Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8FuNllYH0OniVbsXqKLzgJOA9io.roa
File: 8FuNllYH0OniVbsXqKLzgJOA9io.roa (raw, json)
Hash identifier: hAkwFTg4XmqEmAT/yCEAUxd4/WDIlS8+jcH5GiGHqAo=
Subject key identifier: F0:5B:8D:96:56:07:D0:E9:E2:55:BB:17:A8:A2:F3:80:93:80:F6:2A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FEFDE812DC0D84FF35916C7AE1E4C2E8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8FuNllYH0OniVbsXqKLzgJOA9io.roa
Signing time: Fri 23 May 2025 21:12:54 +0000
ROA not before: Fri 23 May 2025 21:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 22:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:fd:e8:12:dc:0d:84:ff:35:91:6c:7a:e1:e4:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 21:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05b8d965607d0e9e255bb17a8a2f3809380f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:bf:9c:8c:68:de:19:76:73:66:c2:54:3c:
15:89:c5:3e:c7:32:0c:46:7e:70:57:9b:96:22:74:
16:42:b4:4a:b3:5f:33:f6:01:cc:3a:78:cc:b0:81:
70:d8:0b:57:bd:b5:79:54:74:be:dd:6e:f9:fe:8b:
4d:a6:e0:55:a6:0a:e8:27:f3:a0:0a:56:7e:ac:68:
cf:d6:fd:8f:e0:1f:e0:a1:63:cb:d4:62:1b:3a:ef:
78:f5:bb:91:49:da:77:3b:70:e2:ea:75:78:ee:75:
d5:21:b6:f0:2e:6d:1a:8d:6e:2b:7a:a1:92:c3:98:
86:8a:f1:3a:13:17:d3:ef:bc:cc:7b:28:90:fb:07:
a6:f1:7b:85:c5:d4:8b:55:92:e2:c6:d3:07:cb:de:
88:67:5f:ac:37:e2:68:1d:84:73:0f:24:d5:47:b4:
03:f4:00:00:5b:21:a9:a3:52:3d:e6:18:86:28:d8:
8f:e3:fd:0a:77:43:75:aa:f4:d2:fe:b2:2c:37:e5:
ca:27:60:15:96:70:38:6c:4b:9a:3b:4d:7a:57:b7:
eb:a7:8d:63:18:97:f4:51:d3:be:c2:33:b3:8b:5c:
b8:36:b9:d0:72:57:9a:26:bc:73:a4:4e:09:7e:8a:
9f:8d:97:b0:04:8b:03:bd:58:09:0a:69:dd:4c:7f:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:8D:96:56:07:D0:E9:E2:55:BB:17:A8:A2:F3:80:93:80:F6:2A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8FuNllYH0OniVbsXqKLzgJOA9io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
85:e4:00:30:d4:c2:85:b8:90:54:9a:ae:6f:1c:c5:21:75:e4:
69:0c:fe:6a:aa:5e:3a:06:6a:40:ad:a0:e8:fc:85:c3:f7:b2:
fb:e2:0a:10:50:83:27:92:3e:1b:96:06:b9:39:82:3b:82:c7:
b0:3a:48:e7:c7:08:16:e5:0a:23:d6:de:98:f8:a6:a9:22:c6:
61:87:3b:d7:02:ec:a0:dc:cf:83:ea:62:0d:e7:dd:d7:60:9f:
54:a6:f8:e1:ac:53:36:ff:af:40:0a:ca:c5:d8:6a:3f:5c:4d:
0d:56:a8:c2:3a:a7:a9:a2:29:80:03:38:f0:0c:d1:c9:46:4c:
2b:65:e9:eb:42:fc:b2:c0:c7:74:1e:54:c1:26:ab:20:4d:9c:
08:31:ff:8b:75:19:4c:aa:04:6e:66:e5:cc:d6:41:f6:64:5a:
64:3e:90:78:fd:22:ba:02:89:8e:a5:7e:c8:a1:a4:f8:85:db:
5d:ff:ea:aa:9f:91:00:94:8f:56:65:83:9c:24:e2:db:82:e1:
e4:43:62:b7:fb:8f:0e:f2:92:69:37:8e:62:b5:4f:87:a9:28:
ce:84:cd:d7:27:41:bc:b1:52:a5:40:1d:fc:20:5d:05:24:0c:
e6:24:a8:04:45:94:8d:ab:ce:b0:40:5d:4d:d7:0e:45:0a:be:
da:02:d4:6f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb+/egS3A2E/zWRbHrh5MLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIzMjExMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDViOGQ5NjU2MDdkMGU5ZTI1NWJiMTdhOGEyZjM4MDkzODBmNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qq/nIxo3hl2c2bCVDwVicU+xzIM
Rn5wV5uWInQWQrRKs18z9gHMOnjMsIFw2AtXvbV5VHS+3W75/otNpuBVpgroJ/Og
ClZ+rGjP1v2P4B/goWPL1GIbOu949buRSdp3O3Di6nV47nXVIbbwLm0ajW4reqGS
w5iGivE6ExfT77zMeyiQ+wem8XuFxdSLVZLixtMHy96IZ1+sN+JoHYRzDyTVR7QD
9AAAWyGpo1I95hiGKNiP4/0Kd0N1qvTS/rIsN+XKJ2AVlnA4bEuaO016V7frp41j
GJf0UdO+wjOzi1y4NrnQcleaJrxzpE4JfoqfjZewBIsDvVgJCmndTH9M+QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPBbjZZWB9Dp4lW7F6ii84CTgPYqMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvOEZ1TmxsWUgwT25pVmJzWHFLTHpnSk9BOWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAheQAMNTChbiQVJqubxzFIXXk
aQz+aqpeOgZqQK2g6PyFw/ey++IKEFCDJ5I+G5YGuTmCO4LHsDpI58cIFuUKI9be
mPimqSLGYYc71wLsoNzPg+piDefd12CfVKb44axTNv+vQArKxdhqP1xNDVaowjqn
qaIpgAM48AzRyUZMK2Xp60L8ssDHdB5UwSarIE2cCDH/i3UZTKoEbmblzNZB9mRa
ZD6QeP0iugKJjqV+yKGk+IXbXf/qqp+RAJSPVmWDnCTi24Lh5ENit/uPDvKSaTeO
YrVPh6kozoTN1ydBvLFSpUAd/CBdBSQM5iSoBEWUjavOsEBdTdcORQq+2gLUbw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:26 2025 by rpki-client