Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BevADlqFBKgoEBlOe-XbuOEahoI.roa
File: BevADlqFBKgoEBlOe-XbuOEahoI.roa (raw, json)
Hash identifier: IoRP7iMawLaS8c4daK1IJgGGOq4MR0HKe8qrlT8PvFg=
Subject key identifier: 05:EB:C0:0E:5A:85:04:A8:28:10:19:4E:7B:E5:DB:B8:E1:1A:86:82
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01967C128426E6527ADAB7D2BB63D8B0F7BE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BevADlqFBKgoEBlOe-XbuOEahoI.roa
Signing time: Mon 28 Apr 2025 11:05:10 +0000
ROA not before: Mon 28 Apr 2025 11:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:7c11:d953/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 28 Apr 2025 11:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:12:84:26:e6:52:7a:da:b7:d2:bb:63:d8:b0:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 28 11:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05ebc00e5a8504a82810194e7be5dbb8e11a8682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:7e:73:56:ca:f4:e7:f4:bd:54:66:a1:d6:
2b:21:46:67:ae:84:26:eb:32:61:bd:2f:3a:e1:b6:
5d:d5:0e:11:b3:17:9d:08:5d:17:66:95:01:c7:01:
22:74:0c:7a:a6:c7:ce:7d:b4:9b:b9:c3:7b:41:2b:
ba:e3:bf:da:f6:89:03:47:23:1b:f5:d8:6b:6c:e2:
a2:09:6a:b4:d1:13:bb:7e:93:fe:e7:49:1e:7e:39:
77:71:8c:47:d6:68:7a:5f:e3:e0:67:c3:77:6d:6a:
ca:12:8e:a1:9f:56:1b:bf:51:72:e2:cd:31:d8:73:
5b:c1:d0:30:72:6d:fd:32:00:0d:62:f1:ad:72:9d:
8c:db:a1:aa:e5:da:e3:16:f4:b8:1c:de:d7:fa:f5:
28:8d:35:9d:a2:1a:33:47:0a:f5:e6:01:6d:1e:45:
3f:62:64:17:c6:98:82:f0:df:d4:39:58:2f:09:38:
3d:bf:5c:41:c1:1f:a0:90:1c:8c:7f:47:98:90:5f:
26:2f:a8:35:28:30:04:0c:80:15:b5:81:86:ae:01:
70:ee:16:4e:5d:3d:08:b8:e5:28:5a:a0:22:b0:6a:
01:5a:18:63:52:cc:85:76:ae:5c:37:bb:fa:51:7a:
67:aa:bf:48:80:7d:91:f5:87:5b:77:8c:56:cc:e9:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:C0:0E:5A:85:04:A8:28:10:19:4E:7B:E5:DB:B8:E1:1A:86:82
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BevADlqFBKgoEBlOe-XbuOEahoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:7c11:d953/128
Signature Algorithm: sha256WithRSAEncryption
17:19:99:95:4c:af:8c:80:45:9b:d6:3f:f8:50:c3:76:b2:de:
4f:cd:e4:24:ac:88:17:65:7a:b4:18:0f:28:2d:08:b5:68:be:
a8:bf:05:b9:76:ca:34:f0:1b:23:c9:16:61:cc:9f:18:fc:0f:
88:dc:30:80:08:86:a6:d6:e9:b5:17:4c:fa:88:19:3d:83:d4:
7b:7e:26:21:4f:1e:e3:0c:3b:58:5c:37:e4:1d:6a:d5:d1:f9:
75:11:77:cc:a4:39:28:eb:c6:dc:5d:58:0d:89:05:9a:56:eb:
5d:ee:ef:30:0a:9c:09:ae:89:dd:59:7c:fa:d0:2f:36:af:f2:
1e:44:a1:3e:64:ac:d1:a3:7f:9d:21:1b:13:95:11:98:9a:2d:
6b:ca:18:93:a6:ce:f3:9b:cc:28:f1:7c:1f:00:13:19:cf:e4:
66:3c:71:60:66:f3:b2:ae:bb:f8:45:88:fd:16:99:21:c0:9a:
79:2c:70:07:6f:25:69:2e:29:98:ce:44:42:ac:79:eb:b8:a0:
dc:de:21:9a:20:40:08:db:15:9a:00:81:31:b6:da:06:18:36:
1b:ad:c4:51:f7:da:dc:03:ee:ab:73:54:b9:80:b8:e5:0e:e8:
0c:2e:ab:34:55:2c:86:a1:e0:a3:c3:56:b5:aa:e1:ec:75:1f:
b1:38:5a:b2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZZ8EoQm5lJ62rfSu2PYsPe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDI4MTEwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWViYzAwZTVhODUwNGE4MjgxMDE5NGU3YmU1ZGJiOGUxMWE4NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ad+c1bK9Of0vVRmodYrIUZnroQm
6zJhvS864bZd1Q4RsxedCF0XZpUBxwEidAx6psfOfbSbucN7QSu647/a9okDRyMb
9dhrbOKiCWq00RO7fpP+50kefjl3cYxH1mh6X+PgZ8N3bWrKEo6hn1Ybv1Fy4s0x
2HNbwdAwcm39MgANYvGtcp2M26Gq5drjFvS4HN7X+vUojTWdohozRwr15gFtHkU/
YmQXxpiC8N/UOVgvCTg9v1xBwR+gkByMf0eYkF8mL6g1KDAEDIAVtYGGrgFw7hZO
XT0IuOUoWqAisGoBWhhjUsyFdq5cN7v6UXpnqr9IgH2R9Ydbd4xWzOmV1wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAXrwA5ahQSoKBAZTnvl27jhGoaCMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvQmV2QURscUZCS2dvRUJsT2UtWGJ1T0VhaG9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWfBHZUzANBgkqhkiG9w0BAQsFAAOCAQEAFxmZlUyvjIBFm9Y/+FDDdrLe
T83kJKyIF2V6tBgPKC0ItWi+qL8FuXbKNPAbI8kWYcyfGPwPiNwwgAiGptbptRdM
+ogZPYPUe34mIU8e4ww7WFw35B1q1dH5dRF3zKQ5KOvG3F1YDYkFmlbrXe7vMAqc
Ca6J3Vl8+tAvNq/yHkShPmSs0aN/nSEbE5URmJota8oYk6bO85vMKPF8HwATGc/k
ZjxxYGbzsq67+EWI/RaZIcCaeSxwB28laS4pmM5EQqx567ig3N4hmiBACNsVmgCB
MbbaBhg2G63EUffa3APuq3NUuYC45Q7oDC6rNFUshqHgo8NWtarh7HUfsThasg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:42 2025 by rpki-client