Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6mdM5Hiax2VQSkQH8YUbCPcUBd4.roa
File: 6mdM5Hiax2VQSkQH8YUbCPcUBd4.roa (raw, json)
Hash identifier: kgDcBPUBxivENm0dWyhE2SNYlDKPUBWYS8v2hFufVX4=
Subject key identifier: EA:67:4C:E4:78:9A:C7:65:50:4A:44:07:F1:85:1B:08:F7:14:05:DE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019701C8041246FF62B460E0147A845B1FEF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6mdM5Hiax2VQSkQH8YUbCPcUBd4.roa
Signing time: Sat 24 May 2025 10:12:54 +0000
ROA not before: Sat 24 May 2025 10:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 11:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:c8:04:12:46:ff:62:b4:60:e0:14:7a:84:5b:1f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 10:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea674ce4789ac765504a4407f1851b08f71405de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:ca:a5:43:06:63:15:14:38:ab:61:5e:ef:
9d:6f:9d:05:f0:1e:10:ee:c0:e5:6d:86:ad:eb:01:
ec:d7:5f:0a:f5:28:ec:b0:f2:54:0c:ba:29:42:53:
0f:a2:e0:93:6d:0a:3b:04:38:55:7e:48:ac:68:d5:
16:c7:9c:8c:92:47:6b:f2:24:07:1a:42:3f:22:29:
9d:2e:42:8f:08:21:26:69:92:a1:33:26:02:2b:48:
e6:7f:43:a8:97:62:85:93:d2:5b:ca:e0:4b:63:c9:
a3:cb:71:d7:7b:7c:0b:90:ea:ef:b2:a3:61:72:ff:
5c:85:f6:0b:12:f5:80:d8:e9:2d:3a:5d:c1:d7:d7:
32:af:e6:fb:d0:66:47:15:d7:3c:3f:24:47:c5:4e:
da:f0:66:4e:50:b8:69:48:50:95:3f:14:64:16:14:
e7:01:9a:a6:b1:a1:8b:ff:93:55:8e:30:7e:e4:57:
cd:94:a2:46:b8:b2:85:67:f7:ca:ae:05:1d:2b:e1:
c8:24:bc:f1:dc:ad:fc:59:39:dd:32:a4:5b:97:9e:
80:61:03:2b:ef:11:d4:7f:f7:ee:ca:0c:be:80:8f:
15:b0:31:f5:c9:b2:df:08:97:a4:fd:5c:01:92:09:
d1:26:81:32:14:79:39:e5:56:5d:53:2b:7a:45:ea:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:4C:E4:78:9A:C7:65:50:4A:44:07:F1:85:1B:08:F7:14:05:DE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6mdM5Hiax2VQSkQH8YUbCPcUBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
b1:42:c6:4b:ca:7e:6c:b8:01:cc:bc:37:7b:47:dc:53:1e:08:
f1:ee:b5:06:81:8d:5b:f5:0e:25:23:1e:34:91:32:ae:46:b7:
bb:0b:4c:e1:1c:3e:94:fc:12:2a:16:af:4b:f1:d4:a4:7b:a3:
89:4d:28:37:c3:88:2a:83:22:d6:30:27:98:fe:48:eb:3a:46:
70:0b:eb:87:45:5a:d3:93:07:3f:cd:85:a6:53:99:a8:01:f7:
d5:b5:49:30:ab:19:43:85:c7:78:04:a3:22:af:4a:eb:8d:46:
9b:30:e7:1f:b8:53:83:e6:cd:f7:40:f9:12:d2:93:22:2a:5d:
d5:6b:91:b0:b4:05:e5:bf:6d:06:ef:1b:bb:90:11:51:54:3f:
9a:dc:4e:eb:18:11:a7:35:bb:f7:94:01:f2:87:12:a8:6f:aa:
a6:25:fc:04:e3:8a:c4:a8:56:7b:fb:cb:a5:cc:2d:48:d7:fb:
30:ec:8d:eb:f0:15:20:ea:d1:f8:7a:5c:36:77:b9:3f:db:bf:
f3:f1:ed:6f:c4:00:90:4a:20:7c:c4:d0:7a:a0:8f:3a:15:6a:
e8:7c:1c:71:cd:06:d3:a4:a7:fa:05:23:a7:f7:15:59:bb:0f:
ea:b4:26:2a:ff:e5:36:51:b3:17:3f:8e:49:91:f4:f2:9f:26:
ab:b7:14:9e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcByAQSRv9itGDgFHqEWx/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI0MTAxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY3NGNlNDc4OWFjNzY1NTA0YTQ0MDdmMTg1MWIwOGY3MTQwNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MPKpUMGYxUUOKthXu+db50F8B4Q
7sDlbYat6wHs118K9SjssPJUDLopQlMPouCTbQo7BDhVfkisaNUWx5yMkkdr8iQH
GkI/IimdLkKPCCEmaZKhMyYCK0jmf0Ool2KFk9JbyuBLY8mjy3HXe3wLkOrvsqNh
cv9chfYLEvWA2OktOl3B19cyr+b70GZHFdc8PyRHxU7a8GZOULhpSFCVPxRkFhTn
AZqmsaGL/5NVjjB+5FfNlKJGuLKFZ/fKrgUdK+HIJLzx3K38WTndMqRbl56AYQMr
7xHUf/fuygy+gI8VsDH1ybLfCJek/VwBkgnRJoEyFHk55VZdUyt6Req3sQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOpnTOR4msdlUEpEB/GFGwj3FAXeMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvNm1kTTVIaWF4MlZRU2tRSDhZVWJDUGNVQmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAsULGS8p+bLgBzLw3e0fcUx4I
8e61BoGNW/UOJSMeNJEyrka3uwtM4Rw+lPwSKhavS/HUpHujiU0oN8OIKoMi1jAn
mP5I6zpGcAvrh0Va05MHP82FplOZqAH31bVJMKsZQ4XHeASjIq9K641GmzDnH7hT
g+bN90D5EtKTIipd1WuRsLQF5b9tBu8bu5ARUVQ/mtxO6xgRpzW795QB8ocSqG+q
piX8BOOKxKhWe/vLpcwtSNf7MOyN6/AVIOrR+HpcNne5P9u/8/Htb8QAkEogfMTQ
eqCPOhVq6Hwccc0G06Sn+gUjp/cVWbsP6rQmKv/lNlGzFz+OSZH08p8mq7cUng==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:24:33 2025 by rpki-client