Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mizCgR5o2DWC-ZuWPEmVco8F1Q.roa
File: 9mizCgR5o2DWC-ZuWPEmVco8F1Q.roa (raw, json)
Hash identifier: yc8eP9Eu07arhpaNNJf0+vwmxKt2i+RS+YB1En5YVMU=
Subject key identifier: F6:68:B3:0A:04:79:A3:60:D6:0B:E6:6E:58:F1:26:55:CA:3C:17:54
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197474C62FC02722846F5AEB342D3C6F556
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mizCgR5o2DWC-ZuWPEmVco8F1Q.roa
Signing time: Fri 06 Jun 2025 22:11:17 +0000
ROA not before: Fri 06 Jun 2025 22:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 23:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:4c:62:fc:02:72:28:46:f5:ae:b3:42:d3:c6:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 22:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f668b30a0479a360d60be66e58f12655ca3c1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:6d:48:1d:cf:f3:c8:97:c4:43:41:2e:b8:
e0:f3:b4:95:fd:74:9e:99:fb:98:12:37:85:a4:21:
1a:84:ed:5f:e1:04:af:f0:20:bc:1e:34:d1:fa:8c:
76:a4:f9:28:ee:ae:60:13:0b:a3:9e:50:77:aa:8b:
ec:ba:7a:45:15:81:0e:b7:45:ce:62:43:89:9e:31:
4a:fb:19:9b:de:1a:46:91:64:a2:d2:ca:46:4a:85:
fc:dc:2a:39:c1:1c:c7:0e:c5:f1:eb:85:a1:48:7c:
49:3e:45:ea:cf:10:ca:54:97:db:e6:a8:f6:34:10:
86:f5:07:ea:71:94:05:15:2c:c1:46:a0:8d:67:3e:
f2:61:ec:e1:1b:34:96:92:76:2b:f5:b0:ae:95:96:
27:8f:e3:00:96:44:1f:05:d8:6b:4a:71:b3:ce:79:
23:07:07:8a:51:c2:de:03:21:10:67:ed:ba:76:ec:
af:d2:f7:6b:67:23:23:f6:20:39:dd:dd:fa:8e:e3:
cf:4a:11:a3:46:54:2e:bf:8c:14:58:fd:9e:15:e4:
43:18:81:d2:7f:7b:56:d0:da:bc:02:ce:9e:61:5b:
3c:c5:3c:25:6b:a8:ed:a5:5d:bb:2b:50:c9:92:85:
83:29:d9:b4:dd:d1:11:88:0d:5a:94:ec:55:94:9e:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:B3:0A:04:79:A3:60:D6:0B:E6:6E:58:F1:26:55:CA:3C:17:54
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9mizCgR5o2DWC-ZuWPEmVco8F1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
36:64:0d:26:29:e2:a9:67:ee:c6:49:8f:95:04:52:f1:ad:d8:
43:07:25:18:3b:a5:47:80:c7:61:fd:a4:ab:73:7c:6d:e3:ff:
39:d7:57:63:68:eb:df:ec:35:3b:c3:f7:ec:c4:f9:37:f5:e9:
62:56:c1:9f:cb:3c:91:a9:69:89:c0:66:ab:ba:d5:66:dc:19:
85:96:7b:28:e3:b6:80:1e:46:81:c5:f9:5f:44:c8:d9:1b:b7:
4f:41:f2:3b:72:44:6c:62:b6:96:d2:ef:b8:fe:54:b4:76:90:
a3:23:29:35:b8:c1:e4:16:32:60:67:d0:80:4f:81:29:dc:4c:
46:f1:e8:cd:01:93:e0:a9:45:b2:d8:f7:0e:f0:f0:aa:13:c3:
8f:06:c9:35:51:26:3f:15:0b:ec:b5:3f:a7:bb:00:07:c6:86:
87:ee:01:ba:ba:6f:12:46:8c:1b:c6:4a:80:22:ef:41:4c:2a:
0a:88:fd:39:52:d2:03:82:45:cf:cc:40:13:3d:02:ea:9b:39:
2a:6c:d4:15:0f:fb:8d:62:71:a5:cf:5f:19:f7:03:b8:e7:9b:
3d:04:ed:19:ce:e8:ff:da:91:e9:1c:79:7e:ab:6e:23:b1:39:
6e:ab:6e:c8:19:01:3d:bb:a6:48:6e:4b:04:72:b9:ed:9e:6b:
23:e2:13:ee
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdHTGL8AnIoRvWus0LTxvVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA2MjIxMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY4YjMwYTA0NzlhMzYwZDYwYmU2NmU1OGYxMjY1NWNhM2MxNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAFtSB3P88iXxENBLrjg87SV/XSe
mfuYEjeFpCEahO1f4QSv8CC8HjTR+ox2pPko7q5gEwujnlB3qovsunpFFYEOt0XO
YkOJnjFK+xmb3hpGkWSi0spGSoX83Co5wRzHDsXx64WhSHxJPkXqzxDKVJfb5qj2
NBCG9QfqcZQFFSzBRqCNZz7yYezhGzSWknYr9bCulZYnj+MAlkQfBdhrSnGzznkj
BweKUcLeAyEQZ+26duyv0vdrZyMj9iA53d36juPPShGjRlQuv4wUWP2eFeRDGIHS
f3tW0Nq8As6eYVs8xTwla6jtpV27K1DJkoWDKdm03dERiA1alOxVlJ4ylwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFPZoswoEeaNg1gvmbljxJlXKPBdUMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvOW1pekNnUjVvMkRXQy1adVdQRW1WY284RjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEANmQNJiniqWfu
xkmPlQRS8a3YQwclGDulR4DHYf2kq3N8beP/OddXY2jr3+w1O8P37MT5N/XpYlbB
n8s8kalpicBmq7rVZtwZhZZ7KOO2gB5GgcX5X0TI2Ru3T0HyO3JEbGK2ltLvuP5U
tHaQoyMpNbjB5BYyYGfQgE+BKdxMRvHozQGT4KlFstj3DvDwqhPDjwbJNVEmPxUL
7LU/p7sAB8aGh+4BurpvEkaMG8ZKgCLvQUwqCoj9OVLSA4JFz8xAEz0C6ps5KmzU
FQ/7jWJxpc9fGfcDuOebPQTtGc7o/9qR6Rx5fqtuI7E5bqtuyBkBPbumSG5LBHK5
7Z5rI+IT7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:02:32 2025 by rpki-client