Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JlzuiFsgFhEJwsczJn-zI38dcyc.roa
File: JlzuiFsgFhEJwsczJn-zI38dcyc.roa (raw, json)
Hash identifier: zA0XkRWhiE7u67PkbJqdNxuV4+UUpNgZOxAfgb29jdM=
Subject key identifier: 26:5C:EE:88:5B:20:16:11:09:C2:C7:33:26:7F:B3:23:7F:1D:73:27
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197113C022B1D08D4D75809FD73D4B9A2F4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JlzuiFsgFhEJwsczJn-zI38dcyc.roa
Signing time: Tue 27 May 2025 10:13:54 +0000
ROA not before: Tue 27 May 2025 10:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 11:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:3c:02:2b:1d:08:d4:d7:58:09:fd:73:d4:b9:a2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 10:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265cee885b20161109c2c733267fb3237f1d7327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:d4:db:e7:53:31:92:81:6e:87:d3:76:f3:
20:85:d5:9a:90:f8:24:ad:6e:e1:ff:40:2b:5c:c2:
af:25:3a:31:56:d0:92:f1:2c:16:7b:1b:36:5d:ee:
fa:2c:ce:71:6a:7b:4c:17:b7:9c:89:f4:af:e3:f5:
5b:7e:df:e3:b3:cd:8f:ce:1d:d1:f5:c2:ad:9c:5f:
4f:38:3a:50:8a:e5:65:32:99:ea:a1:13:63:d1:d7:
5c:f0:ab:77:98:5d:86:95:ae:c2:70:0c:3f:ec:43:
e5:45:65:af:c7:12:b4:ba:cf:a4:73:78:2c:70:b0:
90:e1:73:0e:bf:3c:2e:54:9e:32:0d:6a:ff:df:10:
3a:4f:62:69:d3:3e:06:7a:3e:ed:a7:be:6d:76:d4:
ab:8e:1b:fe:d5:3e:32:ba:ee:d1:8d:73:79:09:cc:
ae:09:77:0d:ea:92:a4:9d:d7:30:b0:1b:1a:63:31:
ba:c2:15:06:ed:9d:be:04:72:1d:0d:55:50:3c:f1:
50:8a:ff:4e:e7:4f:db:2f:3e:85:53:96:b0:ce:a9:
a5:33:36:ee:89:a3:b2:69:b3:02:85:85:05:38:9c:
f3:56:ee:90:af:4f:d3:be:ce:22:35:ce:d4:70:46:
3c:b8:83:8a:53:37:29:20:a4:d6:59:8d:a9:d1:c7:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:EE:88:5B:20:16:11:09:C2:C7:33:26:7F:B3:23:7F:1D:73:27
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JlzuiFsgFhEJwsczJn-zI38dcyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
15:cb:52:00:c8:c2:a8:42:6c:31:1d:5c:a8:fe:ca:f4:e1:0b:
e3:c7:6c:89:19:3d:a4:e9:bb:7e:7e:88:b5:d8:5b:05:0c:fc:
fc:17:ec:37:23:a4:ab:bc:dd:ba:fa:3c:41:42:52:7c:a0:7c:
5f:d2:a6:b0:f3:3c:c8:41:63:e8:d0:27:0e:7e:bb:31:29:5f:
06:98:89:53:9a:2b:c1:f0:e7:26:5e:86:04:bf:72:d0:e9:df:
a0:87:e1:ae:5c:5e:9c:aa:de:1e:98:fc:a1:9d:8c:7f:6b:ec:
1d:01:ef:57:0b:05:20:be:5b:63:73:09:2f:b3:91:28:a7:a3:
b5:7c:96:01:26:61:97:08:fe:5b:e3:9d:5b:ed:95:6d:fc:1f:
e5:01:b9:ea:68:97:ef:bd:22:d4:b6:18:64:0f:4a:f6:3f:54:
26:f2:7f:6d:5a:95:2d:93:17:87:5b:cd:e6:d4:5d:27:a2:e9:
ce:85:7d:3a:f8:fb:41:dd:53:c9:2b:28:cc:e4:4a:a5:cb:65:
3f:1f:cf:4b:1f:07:30:70:29:68:1c:66:22:e2:71:c1:53:07:
9f:99:f5:00:43:ae:c9:44:e4:09:4c:25:0e:7c:5c:3a:1d:e3:
19:b8:55:ae:5b:5d:de:bc:87:46:19:ca:69:c6:9f:80:dd:b2:
67:10:db:d0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZcRPAIrHQjU11gJ/XPUuaL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI3MTAxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjVjZWU4ODViMjAxNjExMDljMmM3MzMyNjdmYjMyMzdmMWQ3MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezU2+dTMZKBbofTdvMghdWakPgk
rW7h/0ArXMKvJToxVtCS8SwWexs2Xe76LM5xantMF7ecifSv4/Vbft/js82Pzh3R
9cKtnF9PODpQiuVlMpnqoRNj0ddc8Kt3mF2Gla7CcAw/7EPlRWWvxxK0us+kc3gs
cLCQ4XMOvzwuVJ4yDWr/3xA6T2Jp0z4Gej7tp75tdtSrjhv+1T4yuu7RjXN5Ccyu
CXcN6pKkndcwsBsaYzG6whUG7Z2+BHIdDVVQPPFQiv9O50/bLz6FU5awzqmlMzbu
iaOyabMChYUFOJzzVu6Qr0/Tvs4iNc7UcEY8uIOKUzcpIKTWWY2p0ccfJQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCZc7ohbIBYRCcLHMyZ/syN/HXMnMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvSmx6dWlGc2dGaEVKd3NjekpuLXpJMzhkY3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4wDQYJKoZIhvcNAQELBQADggEB
ABXLUgDIwqhCbDEdXKj+yvThC+PHbIkZPaTpu35+iLXYWwUM/PwX7DcjpKu83br6
PEFCUnygfF/SprDzPMhBY+jQJw5+uzEpXwaYiVOaK8Hw5yZehgS/ctDp36CH4a5c
Xpyq3h6Y/KGdjH9r7B0B71cLBSC+W2NzCS+zkSino7V8lgEmYZcI/lvjnVvtlW38
H+UBuepol++9ItS2GGQPSvY/VCbyf21alS2TF4dbzebUXSei6c6FfTr4+0HdU8kr
KMzkSqXLZT8fz0sfBzBwKWgcZiLiccFTB5+Z9QBDrslE5AlMJQ58XDod4xm4Va5b
Xd68h0YZymnGn4DdsmcQ29A=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:28 2025 by rpki-client