Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OWXM-6eavXNkU8K13gpExpDIUWA.roa
File: OWXM-6eavXNkU8K13gpExpDIUWA.roa (raw, json)
Hash identifier: hvly9L73vTFZjDk3whcDpe61Vy9NGNEuFEoqyusl5LM=
Subject key identifier: 39:65:CC:FB:A7:9A:BD:73:64:53:C2:B5:DE:0A:44:C6:90:C8:51:60
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196E56D09146A468F426A5166FCFE73504D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OWXM-6eavXNkU8K13gpExpDIUWA.roa
Signing time: Sun 18 May 2025 22:04:10 +0000
ROA not before: Sun 18 May 2025 22:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e56c:fc9b/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 18 May 2025 22:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e5:6d:09:14:6a:46:8f:42:6a:51:66:fc:fe:73:50:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 18 22:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3965ccfba79abd736453c2b5de0a44c690c85160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:5a:d9:53:ed:79:b0:73:ce:3b:4d:dd:c8:
40:0e:69:8c:7f:69:29:05:65:10:cf:5a:a2:21:b6:
a4:b6:c5:b4:eb:51:02:7e:b7:53:50:dd:85:e8:89:
f7:1a:89:b0:c8:8f:e7:57:49:2a:37:47:17:fb:91:
da:05:5b:d5:a3:1c:85:dd:cd:39:01:88:ce:e6:18:
ed:99:f9:d3:53:28:eb:e4:70:15:2b:52:e7:63:18:
6b:e5:eb:ab:4e:4e:15:8c:6e:2d:d8:83:27:53:e7:
cf:7a:ca:03:f9:fd:12:d8:e1:af:9e:96:fc:1a:f0:
25:73:16:2b:a2:10:1e:e7:e1:08:86:b3:57:ca:ea:
1c:05:41:f6:a3:71:9f:f0:1e:ed:49:f8:d2:08:f5:
6d:33:a2:f9:55:99:6b:e4:94:3d:5e:5e:56:24:66:
63:3b:a1:44:8f:ef:5d:3e:c0:2f:c2:77:eb:8f:45:
1d:fd:cc:14:64:5c:94:27:c4:08:46:71:a1:d6:c1:
e3:8b:8f:3c:14:15:2e:fe:02:d1:a0:d1:9a:f8:81:
5f:46:ea:9a:54:d9:57:4a:3e:25:cd:d3:46:d8:97:
bd:05:0c:bc:b8:b9:13:44:04:18:f0:03:91:0d:13:
a0:d6:af:df:53:98:a0:c9:03:2e:72:6a:b3:7f:d3:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:65:CC:FB:A7:9A:BD:73:64:53:C2:B5:DE:0A:44:C6:90:C8:51:60
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OWXM-6eavXNkU8K13gpExpDIUWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e56c:fc9b/128
Signature Algorithm: sha256WithRSAEncryption
82:b9:42:8b:f7:ca:43:50:26:f1:ce:a1:0d:ef:99:76:4c:a7:
f3:1e:bd:c2:19:3b:38:be:50:3b:9f:94:6c:0f:2c:2b:3d:57:
b5:04:49:73:c2:a0:9a:27:09:ce:d8:61:5a:db:6c:f9:c0:33:
f3:bb:6f:65:25:0a:10:da:42:87:a1:0a:d3:a2:50:43:ea:77:
8c:4f:8c:ec:11:43:69:97:52:7b:7f:b5:4c:7e:fd:17:8e:5a:
1d:7d:72:ec:f7:bf:39:81:4a:03:bc:06:cf:2a:87:d9:f4:86:
30:5d:9e:73:fe:75:c7:4f:e2:8f:2f:9b:ce:bb:87:4f:ab:51:
85:aa:5b:b7:60:70:91:62:fa:d4:e6:1f:58:3c:3d:73:15:14:
59:a5:a0:32:26:ca:0c:45:3c:a4:2e:c1:49:78:48:5d:70:fc:
18:dd:6f:ae:39:c0:aa:be:27:fa:a6:c9:31:cc:92:79:43:91:
86:af:78:76:8a:aa:82:76:2c:3f:0d:d4:fa:ff:4b:cd:71:20:
f6:44:2c:6d:97:a0:da:28:0d:66:c2:c9:f2:8a:c1:1f:43:38:
4f:f0:1e:82:85:15:52:75:d1:02:81:75:de:58:10:a8:91:cf:
7d:a3:52:8c:42:af:e9:d1:f3:e8:2e:fa:a6:30:c4:ea:ff:2e:
2a:8e:d8:59
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZblbQkUakaPQmpRZvz+c1BNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTE4MjIwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTY1Y2NmYmE3OWFiZDczNjQ1M2MyYjVkZTBhNDRjNjkwYzg1MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWta2VPtebBzzjtN3chADmmMf2kp
BWUQz1qiIbaktsW061ECfrdTUN2F6In3GomwyI/nV0kqN0cX+5HaBVvVoxyF3c05
AYjO5hjtmfnTUyjr5HAVK1LnYxhr5eurTk4VjG4t2IMnU+fPesoD+f0S2OGvnpb8
GvAlcxYrohAe5+EIhrNXyuocBUH2o3Gf8B7tSfjSCPVtM6L5VZlr5JQ9Xl5WJGZj
O6FEj+9dPsAvwnfrj0Ud/cwUZFyUJ8QIRnGh1sHji488FBUu/gLRoNGa+IFfRuqa
VNlXSj4lzdNG2Je9BQy8uLkTRAQY8AORDROg1q/fU5igyQMucmqzf9Om6QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDllzPunmr1zZFPCtd4KRMaQyFFgMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvT1dYTS02ZWF2WE5rVThLMTNncEV4cERJVVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW5Wz8mzANBgkqhkiG9w0BAQsFAAOCAQEAgrlCi/fKQ1Am8c6hDe+Zdkyn
8x69whk7OL5QO5+UbA8sKz1XtQRJc8KgmicJzthhWtts+cAz87tvZSUKENpCh6EK
06JQQ+p3jE+M7BFDaZdSe3+1TH79F45aHX1y7Pe/OYFKA7wGzyqH2fSGMF2ec/51
x0/ijy+bzruHT6tRhapbt2BwkWL61OYfWDw9cxUUWaWgMibKDEU8pC7BSXhIXXD8
GN1vrjnAqr4n+qbJMcySeUORhq94doqqgnYsPw3U+v9LzXEg9kQsbZeg2igNZsLJ
8orBH0M4T/AegoUVUnXRAoF13lgQqJHPfaNSjEKv6dHz6C76pjDE6v8uKo7YWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:19:44 2025 by rpki-client