Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ATXhCAWouwg8iZu-69YZEMakt3k.roa
File: ATXhCAWouwg8iZu-69YZEMakt3k.roa (raw, json)
Hash identifier: PPuzAGa6zifBrlxE9SBiZkXyv//7kffjA0DGT/x6wYo=
Subject key identifier: 01:35:E1:08:05:A8:BB:08:3C:89:9B:BE:EB:D6:19:10:C6:A4:B7:79
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F5C4C2887C10D0938FA5CFABB055DBE1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ATXhCAWouwg8iZu-69YZEMakt3k.roa
Signing time: Thu 22 May 2025 02:13:54 +0000
ROA not before: Thu 22 May 2025 02:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 03:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f5:c4:c2:88:7c:10:d0:93:8f:a5:cf:ab:b0:55:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 02:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0135e10805a8bb083c899bbeebd61910c6a4b779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:ef:8c:68:15:5e:73:83:cb:ee:75:8b:6e:
19:a7:e9:d3:f6:39:46:24:83:86:d1:5a:49:30:3b:
e5:02:4a:d2:f1:27:9b:98:4d:5c:22:45:de:e4:73:
22:ae:a9:b7:bb:36:17:14:d9:71:0c:d9:85:44:77:
c2:15:81:23:79:19:f6:e6:c8:98:52:c6:62:5a:de:
57:ab:f4:56:8b:3e:9e:b2:2e:5a:0f:66:b6:49:28:
25:be:7b:ac:c1:0b:9a:e9:08:37:ba:4d:69:d5:90:
89:a9:92:05:7c:ea:e4:3a:05:f2:b7:11:a2:0b:32:
ea:39:fd:b9:50:f2:76:26:d2:57:cb:b6:7f:98:3b:
38:61:f3:72:c4:ed:d7:14:93:ae:9f:55:96:12:73:
2a:d5:22:9d:03:58:8c:f4:bb:73:f3:cb:56:fe:e1:
89:38:3f:82:07:07:c0:d6:62:69:a9:01:89:35:9d:
fa:d6:13:de:ad:63:0e:3e:de:b5:43:f7:7b:b5:27:
dc:d4:d1:b7:9d:5b:39:a6:f0:e6:63:fd:9f:1a:eb:
14:c7:38:ee:b1:9e:69:6f:07:6a:10:bf:f7:c2:ba:
7a:61:62:0d:60:9b:56:e7:50:4c:0f:78:b7:54:d3:
f7:f3:0d:fd:ba:a4:ba:ba:c2:9e:38:89:53:b0:e6:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:E1:08:05:A8:BB:08:3C:89:9B:BE:EB:D6:19:10:C6:A4:B7:79
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ATXhCAWouwg8iZu-69YZEMakt3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
be:e1:68:9f:b1:8b:e0:15:ef:25:88:ef:d8:ac:1e:c3:14:96:
b4:e8:eb:f1:01:bd:e6:e1:e1:86:ec:24:23:bc:bc:cb:b4:ec:
19:a9:b6:08:82:3d:57:d2:d8:55:fe:7b:47:3e:c5:12:8f:33:
c1:36:28:a0:e7:6d:ab:d4:2c:91:f1:f5:d1:70:8e:cf:4b:03:
1b:b3:f8:6f:f4:b0:e6:20:30:11:b6:69:4e:90:52:88:75:70:
87:62:b3:ad:c8:e7:c1:c7:95:24:73:6a:ea:3d:0f:0b:42:6a:
a4:e9:f7:2f:fb:4d:4d:a3:89:8d:ad:90:80:1e:fa:7e:99:24:
b8:1d:50:aa:ef:9a:de:43:01:cd:4e:61:7e:a2:da:46:00:95:
58:03:8c:01:e7:a3:6b:60:4b:de:2b:54:9e:e3:cb:03:74:22:
d0:60:cd:2c:15:d7:09:e3:c3:d6:97:cf:13:10:3b:60:ed:32:
2f:71:3c:7e:fc:5f:88:99:b2:03:ac:b2:07:83:05:cb:ad:6b:
fa:97:c1:32:d3:bd:f1:c8:a5:67:f8:cb:f7:53:58:f8:ae:65:
0d:0e:a0:55:40:db:d3:dc:58:b6:43:5a:71:ee:82:ea:e4:9e:
21:86:cf:85:02:61:85:1d:7a:ce:d5:da:7a:ba:20:c7:fe:1b:
8c:30:66:24
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb1xMKIfBDQk4+lz6uwVdvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIyMDIxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTM1ZTEwODA1YThiYjA4M2M4OTliYmVlYmQ2MTkxMGM2YTRiNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKHvjGgVXnODy+51i24Zp+nT9jlG
JIOG0VpJMDvlAkrS8SebmE1cIkXe5HMirqm3uzYXFNlxDNmFRHfCFYEjeRn25siY
UsZiWt5Xq/RWiz6esi5aD2a2SSglvnuswQua6Qg3uk1p1ZCJqZIFfOrkOgXytxGi
CzLqOf25UPJ2JtJXy7Z/mDs4YfNyxO3XFJOun1WWEnMq1SKdA1iM9Ltz88tW/uGJ
OD+CBwfA1mJpqQGJNZ361hPerWMOPt61Q/d7tSfc1NG3nVs5pvDmY/2fGusUxzju
sZ5pbwdqEL/3wrp6YWINYJtW51BMD3i3VNP38w39uqS6usKeOIlTsOa6JQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAE14QgFqLsIPImbvuvWGRDGpLd5MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvQVRYaENBV291d2c4aVp1LTY5WVpFTWFrdDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAvuFon7GL4BXvJYjv2KwewxSW
tOjr8QG95uHhhuwkI7y8y7TsGam2CII9V9LYVf57Rz7FEo8zwTYooOdtq9QskfH1
0XCOz0sDG7P4b/Sw5iAwEbZpTpBSiHVwh2KzrcjnwceVJHNq6j0PC0JqpOn3L/tN
TaOJja2QgB76fpkkuB1Qqu+a3kMBzU5hfqLaRgCVWAOMAeeja2BL3itUnuPLA3Qi
0GDNLBXXCePD1pfPExA7YO0yL3E8fvxfiJmyA6yyB4MFy61r+pfBMtO98cilZ/jL
91NY+K5lDQ6gVUDb09xYtkNace6C6uSeIYbPhQJhhR16ztXaerogx/4bjDBmJA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:54 2025 by rpki-client