Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DHFeAHfrxOxy5oVmgjpjrpgk7PE.roa
File: DHFeAHfrxOxy5oVmgjpjrpgk7PE.roa (raw, json)
Hash identifier: OnQx4rI4xlsFxejIgCki3zn+7nfPZr84cfuSKuEvf0g=
Subject key identifier: 0C:71:5E:00:77:EB:C4:EC:72:E6:85:66:82:3A:63:AE:98:24:EC:F1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019638441EDDE8E8841839FC506B7CE107D6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DHFeAHfrxOxy5oVmgjpjrpgk7PE.roa
Signing time: Tue 15 Apr 2025 07:05:10 +0000
ROA not before: Tue 15 Apr 2025 07:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:3843:5989/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 15 Apr 2025 07:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:44:1e:dd:e8:e8:84:18:39:fc:50:6b:7c:e1:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 15 07:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c715e0077ebc4ec72e68566823a63ae9824ecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:02:67:a4:5d:54:04:3c:af:93:94:b2:92:
ee:c3:f3:38:96:ba:a9:fd:8f:5c:5f:84:f6:05:d8:
c5:86:07:bf:58:2e:29:5f:ce:47:b9:77:70:82:ef:
64:58:d5:0c:e6:93:78:22:e1:59:77:0e:e2:f6:96:
e8:38:ab:97:86:c0:ec:89:ae:ca:d3:d4:8a:2e:e0:
ac:7f:8b:d9:19:44:46:21:3a:5a:e6:c7:64:85:e6:
91:36:b0:8f:71:d9:87:16:15:6e:c8:0a:94:49:63:
5a:ff:8b:6c:c2:1f:b1:90:0a:0c:5a:3f:f3:22:41:
c8:d0:c1:b1:c9:50:b5:56:ed:34:b0:c0:e5:58:d7:
a2:e8:ec:1f:33:63:e1:df:81:4d:aa:10:79:d7:a2:
47:95:0e:85:fe:ef:7a:d1:ea:51:f6:2a:be:49:14:
25:9a:ac:e2:a6:3d:e6:f5:28:e5:d0:1a:79:7d:18:
c2:35:4a:33:cd:23:7c:fb:fe:0c:20:4e:77:cb:dd:
4d:aa:17:91:87:67:14:e9:21:0c:0c:24:bf:21:2b:
3f:ee:f3:4d:76:de:8f:ad:81:7d:7b:37:10:a9:10:
4d:c9:0e:e9:51:26:66:b9:23:1f:69:c2:1a:c2:72:
7d:b6:26:84:d7:bd:0b:1b:8c:13:ff:19:10:8d:e2:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:71:5E:00:77:EB:C4:EC:72:E6:85:66:82:3A:63:AE:98:24:EC:F1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DHFeAHfrxOxy5oVmgjpjrpgk7PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:3843:5989/128
Signature Algorithm: sha256WithRSAEncryption
14:f0:cd:9e:7e:6a:e2:05:50:71:27:66:d6:ca:ef:89:7c:67:
9b:d8:58:ed:d2:93:26:9a:d7:b4:55:a3:ca:d1:fa:01:48:f7:
c9:0e:3d:f9:83:f7:57:3b:03:2e:cf:24:86:55:b5:ac:cf:d9:
34:14:b2:12:2f:b4:3f:da:c1:13:5c:73:cd:5b:29:50:63:07:
fc:e8:d9:2d:e9:ee:6b:56:ad:a5:95:73:1c:35:62:ef:9c:c9:
d0:2a:39:bf:b0:ae:60:bc:9c:46:92:b2:28:b0:8a:b7:3f:25:
6e:bd:38:89:6e:39:9c:88:ba:c6:1a:2d:6a:9f:c5:56:6e:21:
03:8c:82:ba:af:66:95:e4:84:3f:5f:5c:1e:0a:03:dc:06:de:
0a:9d:23:dd:f6:be:b2:e7:d1:13:21:92:64:50:f5:24:6f:1c:
5f:f4:b4:32:8a:07:93:55:fb:ec:d9:6a:3b:2f:83:4b:1a:7f:
aa:94:dd:04:aa:e4:12:df:42:af:9b:60:0a:b9:58:9d:b7:97:
51:fd:0b:0c:82:88:6a:4d:42:9b:28:39:f5:10:f6:e1:3e:d2:
39:4d:08:01:52:f1:06:09:9e:ea:c3:14:8d:77:b8:26:5a:df:
29:24:a4:cf:c0:33:d7:d0:af:7d:80:dd:f8:c1:b4:87:08:6b:
16:af:c0:03
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZY4RB7d6OiEGDn8UGt84QfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDE1MDcwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzcxNWUwMDc3ZWJjNGVjNzJlNjg1NjY4MjNhNjNhZTk4MjRlY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t8CZ6RdVAQ8r5OUspLuw/M4lrqp
/Y9cX4T2BdjFhge/WC4pX85HuXdwgu9kWNUM5pN4IuFZdw7i9pboOKuXhsDsia7K
09SKLuCsf4vZGURGITpa5sdkheaRNrCPcdmHFhVuyAqUSWNa/4tswh+xkAoMWj/z
IkHI0MGxyVC1Vu00sMDlWNei6OwfM2Ph34FNqhB516JHlQ6F/u960epR9iq+SRQl
mqzipj3m9Sjl0Bp5fRjCNUozzSN8+/4MIE53y91NqheRh2cU6SEMDCS/ISs/7vNN
dt6PrYF9ezcQqRBNyQ7pUSZmuSMfacIawnJ9tiaE170LG4wT/xkQjeLHXQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAxxXgB368TscuaFZoI6Y66YJOzxMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvREhGZUFIZnJ4T3h5NW9WbWdqcGpycGdrN1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWOENZiTANBgkqhkiG9w0BAQsFAAOCAQEAFPDNnn5q4gVQcSdm1srviXxn
m9hY7dKTJprXtFWjytH6AUj3yQ49+YP3VzsDLs8khlW1rM/ZNBSyEi+0P9rBE1xz
zVspUGMH/OjZLenua1atpZVzHDVi75zJ0Co5v7CuYLycRpKyKLCKtz8lbr04iW45
nIi6xhotap/FVm4hA4yCuq9mleSEP19cHgoD3AbeCp0j3fa+sufREyGSZFD1JG8c
X/S0MooHk1X77NlqOy+DSxp/qpTdBKrkEt9Cr5tgCrlYnbeXUf0LDIKIak1Cmyg5
9RD24T7SOU0IAVLxBgme6sMUjXe4JlrfKSSkz8Az19CvfYDd+MG0hwhrFq/AAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:10 2025 by rpki-client