Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PtrE4r03aVR2657HF7h2zmZ61Pk.roa
File: PtrE4r03aVR2657HF7h2zmZ61Pk.roa (raw, json)
Hash identifier: OPPTtO6F4KdzbOeFwOz+jShivL+bKw1tvPoeKxhdmnY=
Subject key identifier: 3E:DA:C4:E2:BD:37:69:54:76:EB:9E:C7:17:B8:76:CE:66:7A:D4:F9
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F10E54B8B84DAC90AB05A8B448534C6E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PtrE4r03aVR2657HF7h2zmZ61Pk.roa
Signing time: Wed 21 May 2025 04:16:10 +0000
ROA not before: Wed 21 May 2025 04:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 05:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:0e:54:b8:b8:4d:ac:90:ab:05:a8:b4:48:53:4c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 04:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3edac4e2bd37695476eb9ec717b876ce667ad4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:8f:fa:44:b9:ee:e0:6f:38:43:3a:d8:a1:
78:20:46:23:24:cf:16:ce:0a:7b:71:3f:b8:2c:1f:
ad:8b:85:3a:f8:56:ee:54:2f:f5:b2:c4:c6:c5:d2:
24:a0:03:68:e2:a7:d1:32:6f:1d:70:a9:de:07:c4:
86:df:86:b3:3f:03:8d:99:20:36:7c:06:cc:e9:5c:
5a:3d:f9:69:6d:83:dc:b2:78:82:24:ed:dc:9c:dd:
c2:76:ab:23:86:70:a0:d5:49:61:ec:bf:79:c4:d4:
78:94:e0:bc:0a:5f:ea:60:31:fd:0c:8e:98:89:5b:
c6:73:86:c4:8d:46:a8:c2:b4:4d:e2:fd:f7:14:3c:
e3:e6:6c:a7:40:fb:4c:63:1c:8f:cc:a1:f4:53:df:
90:23:91:31:be:9a:24:97:a1:9d:f2:a8:8f:2b:89:
0d:97:34:e0:48:9f:82:9a:aa:60:c0:db:e2:7c:6c:
a8:33:b7:be:81:cb:48:65:ea:2e:86:a9:3b:d5:37:
73:2b:9f:02:70:ed:d4:bd:0d:f1:2e:e3:f9:57:93:
c8:ea:72:be:6d:c2:9e:02:df:79:09:b0:ec:23:69:
95:24:d8:11:f6:10:69:94:1e:75:94:cc:e7:71:08:
1e:6d:a7:45:fc:ad:51:a9:f5:af:14:86:4b:57:67:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:C4:E2:BD:37:69:54:76:EB:9E:C7:17:B8:76:CE:66:7A:D4:F9
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PtrE4r03aVR2657HF7h2zmZ61Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
2f:ef:45:7f:b5:2d:a1:5c:9f:d0:3e:42:6b:21:16:27:d7:2f:
b6:6c:f1:cc:5d:00:ac:bb:81:01:f6:e3:6c:01:ff:6e:86:3e:
54:fc:7e:27:5e:2e:8d:db:28:52:49:6c:1c:eb:46:13:4e:f0:
cf:8a:11:21:95:62:4c:e4:d4:11:5d:7f:fc:86:08:d0:2d:fb:
33:e0:2d:64:73:24:b9:f9:8f:fb:f7:bb:83:7f:c7:f8:6b:73:
10:0b:7f:e2:6d:f5:4c:47:02:24:08:47:15:4c:9d:ab:73:2d:
54:25:1e:b4:b9:d5:3b:a0:29:4b:59:c5:80:d9:6f:24:6c:4d:
58:28:7c:f8:e3:ed:8c:dd:8c:8d:c2:d6:b8:fa:e6:88:1d:fe:
22:af:94:05:c1:c0:60:89:8b:19:80:ae:48:48:9b:13:0e:b0:
5a:b9:b1:d7:9a:a1:52:9b:66:3d:7a:89:09:0b:62:b4:5c:a0:
6e:0d:8c:4b:97:16:67:07:18:95:7b:ed:4b:15:4b:16:7f:95:
b2:60:83:03:d5:9c:63:ad:63:f9:ce:98:7a:00:aa:55:af:5d:
5f:01:bd:25:3f:5a:04:80:91:df:2a:4a:f6:68:78:85:9c:08:
b6:21:6e:6b:28:db:5b:dd:85:7b:af:fe:a7:cf:73:ff:55:ab:
66:4e:ba:bb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbxDlS4uE2skKsFqLRIU0xuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIxMDQxNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWRhYzRlMmJkMzc2OTU0NzZlYjllYzcxN2I4NzZjZTY2N2FkNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujyP+kS57uBvOEM62KF4IEYjJM8W
zgp7cT+4LB+ti4U6+FbuVC/1ssTGxdIkoANo4qfRMm8dcKneB8SG34azPwONmSA2
fAbM6VxaPflpbYPcsniCJO3cnN3CdqsjhnCg1Ulh7L95xNR4lOC8Cl/qYDH9DI6Y
iVvGc4bEjUaowrRN4v33FDzj5mynQPtMYxyPzKH0U9+QI5Exvpokl6Gd8qiPK4kN
lzTgSJ+CmqpgwNvifGyoM7e+gctIZeouhqk71TdzK58CcO3UvQ3xLuP5V5PI6nK+
bcKeAt95CbDsI2mVJNgR9hBplB51lMzncQgebadF/K1RqfWvFIZLV2cXgQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFD7axOK9N2lUduuexxe4ds5metT5MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvUHRyRTRyMDNhVlIyNjU3SEY3aDJ6bVo2MVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAL+9Ff7UtoVyf0D5CayEWJ9cv
tmzxzF0ArLuBAfbjbAH/boY+VPx+J14ujdsoUklsHOtGE07wz4oRIZViTOTUEV1/
/IYI0C37M+AtZHMkufmP+/e7g3/H+GtzEAt/4m31TEcCJAhHFUydq3MtVCUetLnV
O6ApS1nFgNlvJGxNWCh8+OPtjN2MjcLWuPrmiB3+Iq+UBcHAYImLGYCuSEibEw6w
Wrmx15qhUptmPXqJCQtitFygbg2MS5cWZwcYlXvtSxVLFn+VsmCDA9WcY61j+c6Y
egCqVa9dXwG9JT9aBICR3ypK9mh4hZwItiFuayjbW92Fe6/+p89z/1WrZk66uw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:49:34 2025 by rpki-client