Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mTr5yqAAPcbAPhxMkZ1Ak4KOto.roa
File: 9mTr5yqAAPcbAPhxMkZ1Ak4KOto.roa (raw, json)
Hash identifier: b6BXNt16Tmlxr7YwslKQsZRJKfGvB7+70K9bLFcNSj4=
Subject key identifier: F6:64:EB:E7:2A:80:00:F7:1B:00:F8:71:32:46:75:02:4E:0A:3A:DA
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196D2F9D47B258DCEF575C7A9669D7BCB7E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mTr5yqAAPcbAPhxMkZ1Ak4KOto.roa
Signing time: Thu 15 May 2025 08:05:10 +0000
ROA not before: Thu 15 May 2025 08:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:d2f8:eacc/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 15 May 2025 08:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:f9:d4:7b:25:8d:ce:f5:75:c7:a9:66:9d:7b:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 15 08:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f664ebe72a8000f71b00f871324675024e0a3ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:8a:18:7f:d1:9d:91:db:95:0a:16:19:02:
cf:77:89:d5:b0:1b:97:dc:e9:f7:df:ca:90:32:7b:
9e:ab:6b:ce:9b:31:7f:2c:07:14:3c:05:a3:c1:e3:
db:07:85:d6:ea:86:a2:69:96:0d:92:09:72:8a:d5:
49:63:88:ae:6d:19:45:39:ae:4e:e3:84:c3:a2:6c:
dd:c9:a0:c8:4b:db:2b:ca:18:f8:0c:c3:0c:7a:f8:
ca:03:93:9a:a3:3d:3d:c4:a3:85:79:70:ab:62:bb:
22:e5:79:db:2c:2b:09:c6:8d:75:58:ce:40:98:0b:
3f:2f:10:cd:76:a6:d3:0c:76:4a:cd:e1:55:71:73:
13:3b:9d:30:36:be:fc:d4:a9:90:41:7d:eb:93:ea:
94:ba:85:ab:07:bb:87:43:d0:6d:67:3b:df:eb:bb:
f5:17:dc:3e:2f:5b:82:cc:70:b9:5a:42:3f:c9:f8:
2f:49:0c:ca:44:71:7d:64:a9:7a:a4:33:af:bc:3c:
2a:04:5f:7a:a4:c0:81:b2:67:84:bd:71:a9:50:21:
e7:e5:bd:bd:81:c2:db:07:d3:f4:99:72:f7:5b:da:
1c:3c:c2:e3:cc:24:27:c4:25:36:24:58:94:09:02:
f2:e1:e4:ea:51:7d:7c:41:af:44:56:a7:e6:78:d2:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:64:EB:E7:2A:80:00:F7:1B:00:F8:71:32:46:75:02:4E:0A:3A:DA
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mTr5yqAAPcbAPhxMkZ1Ak4KOto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:d2f8:eacc/128
Signature Algorithm: sha256WithRSAEncryption
8d:3c:d5:7f:98:12:e0:09:17:e8:7e:3e:55:3f:85:86:47:12:
a6:d4:d3:c4:8c:f8:33:42:bc:88:71:d4:0f:d9:4f:d2:96:ef:
16:2d:af:35:a2:6b:89:a1:8f:be:ab:29:b3:74:bb:da:31:b3:
6c:90:fe:f3:37:89:3e:6f:52:13:87:d5:08:44:fd:10:92:e5:
f0:b8:5d:74:59:4e:a2:ad:0e:89:b4:24:f5:cf:17:f4:3c:0d:
a4:17:7d:4a:f1:0f:6f:d0:9c:b7:73:ac:9b:47:27:81:b1:fd:
16:53:bb:06:95:0e:6e:76:76:b1:72:be:f1:13:cf:ac:d0:9b:
75:c8:d4:05:8e:a8:53:99:82:34:61:89:01:b0:5b:92:77:54:
86:c7:bb:7e:27:1c:64:c5:ed:ae:00:ff:51:29:30:9b:ed:81:
b1:e8:4f:46:62:93:3f:0b:4e:5b:d6:a3:9a:f9:70:7a:ef:b4:
9a:e5:7a:43:2b:d3:54:82:e8:f3:ca:d9:61:a9:c7:72:0b:3a:
65:b8:0e:11:1f:41:ef:5c:2a:fa:6a:eb:23:1e:d2:57:88:a2:
7c:58:42:33:e1:fe:86:43:fb:bc:ae:50:41:1c:e6:d0:31:b0:
b6:69:70:ad:ba:c9:c9:68:c0:82:43:b1:3f:2f:66:4f:cd:f6:
fa:6e:2a:d2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbS+dR7JY3O9XXHqWade8t+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTE1MDgwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY0ZWJlNzJhODAwMGY3MWIwMGY4NzEzMjQ2NzUwMjRlMGEzYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLKKGH/RnZHblQoWGQLPd4nVsBuX
3On338qQMnueq2vOmzF/LAcUPAWjwePbB4XW6oaiaZYNkglyitVJY4iubRlFOa5O
44TDomzdyaDIS9sryhj4DMMMevjKA5Oaoz09xKOFeXCrYrsi5XnbLCsJxo11WM5A
mAs/LxDNdqbTDHZKzeFVcXMTO50wNr781KmQQX3rk+qUuoWrB7uHQ9BtZzvf67v1
F9w+L1uCzHC5WkI/yfgvSQzKRHF9ZKl6pDOvvDwqBF96pMCBsmeEvXGpUCHn5b29
gcLbB9P0mXL3W9ocPMLjzCQnxCU2JFiUCQLy4eTqUX18Qa9EVqfmeNIuSQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPZk6+cqgAD3GwD4cTJGdQJOCjraMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvOW1UcjV5cUFBUGNiQVBoeE1rWjFBazRLT3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW0vjqzDANBgkqhkiG9w0BAQsFAAOCAQEAjTzVf5gS4AkX6H4+VT+FhkcS
ptTTxIz4M0K8iHHUD9lP0pbvFi2vNaJriaGPvqsps3S72jGzbJD+8zeJPm9SE4fV
CET9EJLl8LhddFlOoq0OibQk9c8X9DwNpBd9SvEPb9Cct3Osm0cngbH9FlO7BpUO
bnZ2sXK+8RPPrNCbdcjUBY6oU5mCNGGJAbBbkndUhse7ficcZMXtrgD/USkwm+2B
sehPRmKTPwtOW9ajmvlweu+0muV6QyvTVILo88rZYanHcgs6ZbgOER9B71wq+mrr
Ix7SV4iifFhCM+H+hkP7vK5QQRzm0DGwtmlwrbrJyWjAgkOxPy9mT832+m4q0g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:06 2025 by rpki-client