Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GXBKpKMAg-ZQygKR1BbStzExJJQ.roa
File: GXBKpKMAg-ZQygKR1BbStzExJJQ.roa (raw, json)
Hash identifier: +88sW6TDgNxEIX1dYay56r5ErMOhrhZwo+WVvMh7PTo=
Subject key identifier: 19:70:4A:A4:A3:00:83:E6:50:CA:02:91:D4:16:D2:B7:31:31:24:94
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972B30E7FB7E95FE1D30BCAAC0109AEB6F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GXBKpKMAg-ZQygKR1BbStzExJJQ.roa
Signing time: Sun 01 Jun 2025 11:11:54 +0000
ROA not before: Sun 01 Jun 2025 11:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 12:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:30:e7:fb:7e:95:fe:1d:30:bc:aa:c0:10:9a:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 11:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19704aa4a30083e650ca0291d416d2b731312494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:3c:58:8f:1d:75:58:42:f9:5c:17:24:a6:
3d:16:85:6d:b7:d7:f7:59:f5:58:18:1b:47:61:ae:
cc:7e:e4:16:4a:fa:98:f5:c2:16:14:61:3f:87:8f:
7b:2d:94:22:69:98:ea:15:b4:a6:ef:14:f0:6b:58:
cc:ae:4d:cb:52:dc:11:8f:a3:70:5e:29:a1:e0:eb:
30:38:56:c4:cd:3f:2c:9c:8a:6b:3b:87:42:e4:89:
a2:4e:63:94:33:c9:fe:00:86:4d:b7:2f:5a:b7:53:
de:55:5b:1f:a8:23:f2:84:ae:67:41:62:30:bb:d6:
fd:32:bf:d1:9b:86:94:97:3d:18:e0:d5:f1:d4:94:
68:b2:cb:e0:8a:22:bd:0e:b0:3f:e7:48:ad:24:bc:
b8:54:fb:ea:52:a2:57:91:58:5c:79:84:85:e7:1f:
8d:6c:76:43:61:f7:6f:7f:75:44:a0:c7:41:94:a8:
f1:d3:2e:54:2d:72:dd:86:ed:09:e3:54:8f:e0:3b:
f2:18:68:c8:99:48:e5:eb:95:ce:dc:43:76:20:67:
43:d3:5a:95:2b:b8:66:06:5a:55:6b:1a:f6:ad:30:
c1:4b:34:a8:55:ee:08:fd:bd:f4:7c:de:63:4a:62:
89:4d:1e:b7:ad:b7:7e:a9:e7:4f:36:a6:09:04:5e:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:4A:A4:A3:00:83:E6:50:CA:02:91:D4:16:D2:B7:31:31:24:94
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GXBKpKMAg-ZQygKR1BbStzExJJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
4e:1d:c8:80:57:e0:3e:f7:43:62:bd:d0:22:60:e6:80:f5:41:
95:c9:0e:b8:18:0d:3c:a5:ea:a9:13:0e:80:34:f4:2a:7e:d5:
42:44:b8:42:c9:7e:f7:64:b5:5f:84:04:b2:50:3f:29:76:1f:
42:12:17:d8:51:46:1b:bd:c4:27:0d:fe:47:e6:6e:56:fd:73:
f2:7f:36:e7:af:e7:f3:25:57:76:47:c9:92:5b:af:18:59:a2:
2c:89:a9:80:52:fa:7c:54:fb:60:45:56:19:f8:72:0f:4c:1a:
06:2d:ad:80:a5:76:bb:b0:0d:c3:3b:2c:de:23:e5:d0:ca:6b:
1c:56:6a:33:25:d5:1c:fb:f8:ba:41:3d:02:cc:0f:a8:6a:19:
aa:13:1a:a1:21:5d:e2:f8:73:2d:da:ac:2a:8c:3e:5a:72:d9:
88:3a:d6:70:5f:ba:53:f4:fb:96:18:31:dd:8c:0e:b5:be:ef:
50:88:92:8a:4d:c3:aa:d9:5b:02:4f:1c:5a:6c:c7:15:cc:1d:
3f:df:56:c9:85:0c:80:83:d2:bc:cf:b8:64:4a:e9:a4:c4:2c:
e5:58:ba:3f:b0:a7:84:35:9f:50:4b:e0:0f:28:00:7b:aa:ce:
96:4b:74:b1:52:66:d0:22:3c:b2:3f:11:1b:ca:1d:cf:4b:87:
9e:c4:11:76
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZcrMOf7fpX+HTC8qsAQmutvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjAxMTExMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTcwNGFhNGEzMDA4M2U2NTBjYTAyOTFkNDE2ZDJiNzMxMzEyNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslY8WI8ddVhC+VwXJKY9FoVtt9f3
WfVYGBtHYa7MfuQWSvqY9cIWFGE/h497LZQiaZjqFbSm7xTwa1jMrk3LUtwRj6Nw
Ximh4OswOFbEzT8snIprO4dC5ImiTmOUM8n+AIZNty9at1PeVVsfqCPyhK5nQWIw
u9b9Mr/Rm4aUlz0Y4NXx1JRossvgiiK9DrA/50itJLy4VPvqUqJXkVhceYSF5x+N
bHZDYfdvf3VEoMdBlKjx0y5ULXLdhu0J41SP4DvyGGjImUjl65XO3EN2IGdD01qV
K7hmBlpVaxr2rTDBSzSoVe4I/b30fN5jSmKJTR63rbd+qedPNqYJBF4dGQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFBlwSqSjAIPmUMoCkdQW0rcxMSSUMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvR1hCS3BLTUFnLVpReWdLUjFCYlN0ekV4SkpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQBOHciAV+A+90NivdAiYOaA9UGVyQ64GA08peqp
Ew6ANPQqftVCRLhCyX73ZLVfhASyUD8pdh9CEhfYUUYbvcQnDf5H5m5W/XPyfzbn
r+fzJVd2R8mSW68YWaIsiamAUvp8VPtgRVYZ+HIPTBoGLa2ApXa7sA3DOyzeI+XQ
ymscVmozJdUc+/i6QT0CzA+oahmqExqhIV3i+HMt2qwqjD5actmIOtZwX7pT9PuW
GDHdjA61vu9QiJKKTcOq2VsCTxxabMcVzB0/31bJhQyAg9K8z7hkSumkxCzlWLo/
sKeENZ9QS+APKAB7qs6WS3SxUmbQIjyyPxEbyh3PS4eexBF2
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:27 2025 by rpki-client