Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ExT6dYvqr8QnQJhn5IlwUY6wIuI.roa
File: ExT6dYvqr8QnQJhn5IlwUY6wIuI.roa (raw, json)
Hash identifier: ho9WNjGfH03swBgPHdw1n+KlSpJCpTrAq3VDCFqrYss=
Subject key identifier: 13:14:FA:75:8B:EA:AF:C4:27:40:98:67:E4:89:70:51:8E:B0:22:E2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197327FAE144F599866D91E6E446894460D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ExT6dYvqr8QnQJhn5IlwUY6wIuI.roa
Signing time: Mon 02 Jun 2025 21:15:17 +0000
ROA not before: Mon 02 Jun 2025 21:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Jun 2025 22:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:7f:ae:14:4f:59:98:66:d9:1e:6e:44:68:94:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 21:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1314fa758beaafc427409867e48970518eb022e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:3b:e6:29:21:da:57:d1:64:22:61:27:fe:
77:b7:31:e3:3c:93:09:fb:7e:28:5a:c5:68:1a:bc:
b2:10:f8:39:0e:78:e0:bb:3b:7a:74:ca:07:9a:ef:
45:56:f6:da:78:66:39:df:10:a2:29:b8:66:09:f3:
9c:92:3c:c0:04:38:8a:a3:46:09:12:e8:a8:a9:21:
d2:f4:60:2b:53:a9:17:bb:ba:aa:3f:29:7f:30:79:
74:f2:1c:8d:da:3a:68:c8:a3:10:b8:4c:53:12:1d:
20:bb:1e:23:eb:42:4e:9f:29:a8:37:c0:fe:0a:6f:
40:ea:5d:7b:15:ae:d8:59:81:0f:ba:0f:a7:78:c8:
ef:38:68:d6:c3:06:57:be:55:b6:51:7f:60:03:f7:
27:29:57:e8:f5:66:a6:0b:3e:ca:83:90:c8:9d:c8:
97:e4:15:aa:a3:c7:ea:ac:ae:c6:a7:08:39:01:3f:
e3:ef:f8:16:cb:d1:97:21:13:4f:3d:38:5f:e3:34:
f7:2d:ff:00:a5:30:bf:e0:55:52:99:00:a6:6c:2e:
ab:ba:5a:7d:f3:6c:dd:2c:05:d8:6d:9b:55:da:5d:
52:4e:a9:d9:14:8c:d4:6e:77:bb:4e:c5:52:dc:c2:
ac:40:93:b1:9c:60:31:85:fe:a3:cf:0b:27:b6:42:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:FA:75:8B:EA:AF:C4:27:40:98:67:E4:89:70:51:8E:B0:22:E2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ExT6dYvqr8QnQJhn5IlwUY6wIuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
4e:27:dd:ff:9f:b6:5e:e1:9a:4a:41:b9:da:42:a2:56:70:0d:
ff:f0:e8:72:70:60:c9:93:f5:73:b2:01:9f:c0:85:24:30:8c:
1a:34:2c:d3:62:16:40:fe:35:ad:3b:6b:43:c7:c4:25:4c:60:
94:5f:ea:d1:43:f2:e5:34:58:45:ff:0f:08:3d:ad:4c:b0:5c:
3d:44:a1:6e:62:e9:23:e0:3d:c6:d5:97:60:b0:a7:89:26:80:
e9:d6:27:46:d7:32:38:35:c9:cf:ce:7c:6a:03:94:67:24:e6:
53:f0:97:d5:f8:12:58:e9:d6:9e:a4:68:02:01:96:57:b2:74:
74:72:7e:c7:a1:a0:75:d8:96:79:4c:86:91:ff:e2:b8:c7:f8:
24:eb:59:be:aa:8c:d3:43:9a:d2:3d:e9:aa:f2:85:f7:23:cb:
03:94:7b:2a:d3:22:79:22:6f:f0:a9:68:0e:d7:1e:9b:7e:e7:
f0:94:9d:0e:8e:bc:dc:2d:23:f1:a0:da:c3:8d:9e:da:da:17:
48:8c:54:6a:2d:f5:21:67:92:ff:8c:71:a5:96:94:f2:87:a0:
ae:7d:26:b9:b1:64:e4:26:cb:49:d7:f8:50:de:c5:9c:6c:db:
01:41:d1:27:e5:9e:87:e4:cb:25:9e:60:43:4c:4d:60:31:6b:
37:7d:3e:8c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZcyf64UT1mYZtkebkRolEYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjAyMjExNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzE0ZmE3NThiZWFhZmM0Mjc0MDk4NjdlNDg5NzA1MThlYjAyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m875ikh2lfRZCJhJ/53tzHjPJMJ
+34oWsVoGryyEPg5Dnjguzt6dMoHmu9FVvbaeGY53xCiKbhmCfOckjzABDiKo0YJ
EuioqSHS9GArU6kXu7qqPyl/MHl08hyN2jpoyKMQuExTEh0gux4j60JOnymoN8D+
Cm9A6l17Fa7YWYEPug+neMjvOGjWwwZXvlW2UX9gA/cnKVfo9WamCz7Kg5DInciX
5BWqo8fqrK7Gpwg5AT/j7/gWy9GXIRNPPThf4zT3Lf8ApTC/4FVSmQCmbC6rulp9
82zdLAXYbZtV2l1STqnZFIzUbne7TsVS3MKsQJOxnGAxhf6jzwsntkJx7wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFBMU+nWL6q/EJ0CYZ+SJcFGOsCLiMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvRXhUNmRZdnFyOFFuUUpobjVJbHdVWTZ3SXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQBOJ93/n7Ze4ZpKQbnaQqJWcA3/8OhycGDJk/Vz
sgGfwIUkMIwaNCzTYhZA/jWtO2tDx8QlTGCUX+rRQ/LlNFhF/w8IPa1MsFw9RKFu
Yukj4D3G1ZdgsKeJJoDp1idG1zI4NcnPznxqA5RnJOZT8JfV+BJY6daepGgCAZZX
snR0cn7HoaB12JZ5TIaR/+K4x/gk61m+qozTQ5rSPemq8oX3I8sDlHsq0yJ5Im/w
qWgO1x6bfufwlJ0OjrzcLSPxoNrDjZ7a2hdIjFRqLfUhZ5L/jHGllpTyh6CufSa5
sWTkJstJ1/hQ3sWcbNsBQdEn5Z6H5MslnmBDTE1gMWs3fT6M
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:43 2025 by rpki-client