Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9IXnylYqp4XFINU-vHYZBseVYK8.roa
File: 9IXnylYqp4XFINU-vHYZBseVYK8.roa (raw, json)
Hash identifier: 1uSqzJdeGerdmIReFAJXg8PxGuGE4g+n97rTqxux5kA=
Subject key identifier: F4:85:E7:CA:56:2A:A7:85:C5:20:D5:3E:BC:76:19:06:C7:95:60:AF
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970648A9DC7A2356E6B837947CDA806178
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9IXnylYqp4XFINU-vHYZBseVYK8.roa
Signing time: Sun 25 May 2025 07:11:54 +0000
ROA not before: Sun 25 May 2025 07:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 08:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:48:a9:dc:7a:23:56:e6:b8:37:94:7c:da:80:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 07:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f485e7ca562aa785c520d53ebc761906c79560af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:c5:12:2c:7f:91:64:69:01:e2:ac:e6:98:
5a:36:db:bc:99:95:04:19:9f:40:27:55:9f:eb:1e:
9a:9e:03:0b:f2:ab:47:58:55:46:bc:8c:50:7a:2c:
ac:61:66:5e:b7:a8:cc:96:da:70:d4:8a:84:d9:fe:
a3:78:d1:d4:86:15:d4:94:47:48:c7:23:63:45:64:
ce:73:ea:6b:51:d2:85:aa:3a:36:f4:69:7c:c1:99:
46:b8:fb:d7:2e:5c:f8:91:e6:fe:f3:d7:ab:5a:b3:
44:65:38:33:e1:99:5b:cf:32:e7:62:78:39:37:a1:
78:a4:dc:7c:b7:35:b5:e0:af:19:85:25:ec:ad:b7:
76:91:a0:f8:da:da:06:25:60:93:4d:23:d5:c5:4e:
36:20:29:2f:fa:ff:04:2e:14:f7:f7:dc:e3:69:7b:
9f:69:ee:34:3f:ef:ec:1e:63:86:ea:e2:f2:65:ce:
1a:d8:18:ba:63:21:f6:bd:e0:44:9f:12:d4:d8:3a:
cb:2a:62:2c:1b:17:7e:05:50:b3:1a:a0:7e:94:8d:
e3:69:8e:ab:93:8a:f8:91:e9:b3:c0:88:6e:73:96:
74:35:57:3c:dd:c1:92:86:ad:7f:ca:62:ca:97:6e:
af:26:85:8a:df:14:9e:42:d9:9e:78:51:99:72:c0:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:E7:CA:56:2A:A7:85:C5:20:D5:3E:BC:76:19:06:C7:95:60:AF
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9IXnylYqp4XFINU-vHYZBseVYK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
29:ec:a3:70:58:b1:98:bf:a3:5f:6e:76:da:86:c2:96:c7:1d:
8a:c9:6d:d8:2a:38:17:01:2d:7b:ec:24:72:09:47:af:f6:c8:
9a:34:df:3b:f9:e5:99:5a:d5:91:df:ac:a9:a7:e4:69:0c:e5:
cf:7a:c2:a3:f0:f6:2e:76:2c:50:17:0d:c3:34:2b:60:42:66:
e4:45:b8:fb:85:69:ab:cb:ef:08:51:9f:15:bc:60:40:c5:79:
75:4e:71:fb:13:5f:4d:eb:77:40:e4:ad:78:b4:8c:44:9f:62:
95:ea:8c:28:78:2e:30:2d:e3:0d:80:ac:4e:a0:ef:2c:91:80:
e9:d0:02:ae:2e:0b:4e:f0:4b:17:b7:4e:90:a0:fb:2e:2b:68:
17:7e:b2:c8:ee:d4:b5:a7:d9:39:62:da:c1:de:95:9e:9c:1a:
0b:dd:40:c0:0f:18:d3:b7:59:d2:a4:02:62:f4:ba:da:6c:e4:
b2:67:0f:cc:e9:80:18:d7:1b:41:27:98:12:9a:4b:89:58:1c:
fa:a8:6a:cf:75:70:c6:15:a0:70:c2:8a:94:11:77:74:80:49:
96:92:3d:67:23:de:a0:31:3c:65:c1:37:5a:0d:24:88:7d:13:
8b:21:c0:87:df:29:8c:64:de:bb:4c:0a:c3:41:b1:bc:cc:ba:
af:54:1f:d9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcGSKnceiNW5rg3lHzagGF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI1MDcxMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDg1ZTdjYTU2MmFhNzg1YzUyMGQ1M2ViYzc2MTkwNmM3OTU2MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FXFEix/kWRpAeKs5phaNtu8mZUE
GZ9AJ1Wf6x6angML8qtHWFVGvIxQeiysYWZet6jMltpw1IqE2f6jeNHUhhXUlEdI
xyNjRWTOc+prUdKFqjo29Gl8wZlGuPvXLlz4keb+89erWrNEZTgz4ZlbzzLnYng5
N6F4pNx8tzW14K8ZhSXsrbd2kaD42toGJWCTTSPVxU42ICkv+v8ELhT399zjaXuf
ae40P+/sHmOG6uLyZc4a2Bi6YyH2veBEnxLU2DrLKmIsGxd+BVCzGqB+lI3jaY6r
k4r4kemzwIhuc5Z0NVc83cGShq1/ymLKl26vJoWK3xSeQtmeeFGZcsAALQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPSF58pWKqeFxSDVPrx2GQbHlWCvMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvOUlYbnlsWXFwNFhGSU5VLXZIWVpCc2VWWUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAKeyjcFixmL+jX2522obClscd
islt2Co4FwEte+wkcglHr/bImjTfO/nlmVrVkd+sqafkaQzlz3rCo/D2LnYsUBcN
wzQrYEJm5EW4+4Vpq8vvCFGfFbxgQMV5dU5x+xNfTet3QOSteLSMRJ9ileqMKHgu
MC3jDYCsTqDvLJGA6dACri4LTvBLF7dOkKD7LitoF36yyO7UtafZOWLawd6Vnpwa
C91AwA8Y07dZ0qQCYvS62mzksmcPzOmAGNcbQSeYEppLiVgc+qhqz3VwxhWgcMKK
lBF3dIBJlpI9ZyPeoDE8ZcE3Wg0kiH0TiyHAh98pjGTeu0wKw0GxvMy6r1Qf2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:58 2025 by rpki-client