Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RBHdCDF7qJAEOaa7_qGPrYjSm-U.roa
File: RBHdCDF7qJAEOaa7_qGPrYjSm-U.roa (raw, json)
Hash identifier: QurXUd3a77853j/riPHiKWSxMdClkUgKmdM+VtWsIYw=
Subject key identifier: 44:11:DD:08:31:7B:A8:90:04:39:A6:BB:FE:A1:8F:AD:88:D2:9B:E5
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971A7611B0C25FCFF64BA0DB4C300EC5F2
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RBHdCDF7qJAEOaa7_qGPrYjSm-U.roa
Signing time: Thu 29 May 2025 05:13:54 +0000
ROA not before: Thu 29 May 2025 05:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 May 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:76:11:b0:c2:5f:cf:f6:4b:a0:db:4c:30:0e:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 05:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4411dd08317ba8900439a6bbfea18fad88d29be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:20:9a:08:9c:4d:f0:77:a0:d0:6b:43:6f:
ba:98:4c:7a:23:4b:7f:85:05:f7:f1:b3:42:4c:a8:
07:6a:25:2f:79:d5:8e:2a:5d:28:74:e7:65:57:4d:
27:0b:3d:90:43:51:a7:0c:78:de:f8:15:93:45:67:
2c:16:38:a8:13:63:4a:87:46:87:65:2a:0d:c6:f9:
63:77:76:df:60:53:e6:32:62:ef:35:ff:24:97:3e:
d5:63:e3:08:04:5c:ec:10:03:be:0c:ea:38:ce:35:
b3:82:70:35:16:23:39:2b:82:4e:df:37:3b:98:a2:
8e:b9:8b:59:12:f0:06:4b:a8:78:30:67:32:5a:c5:
04:c0:79:7c:7d:1b:1f:dd:a6:93:1b:ad:f1:5b:c5:
16:f8:9d:d9:30:19:d8:07:f6:38:0a:3b:c1:c2:97:
c5:48:ff:fc:d9:44:69:18:59:0d:75:8b:f3:7e:fd:
48:e7:3f:5e:cc:f7:a9:4b:d9:95:9f:d3:e9:34:3a:
72:83:09:df:e4:f3:f6:c4:14:64:da:5c:5b:df:3d:
bc:4b:b5:4c:70:d0:55:d4:2a:b5:7b:ce:cf:c7:54:
0a:ff:9b:1f:58:2c:ec:41:56:4e:6b:71:b2:ea:a0:
5a:3a:2d:53:2d:38:e6:8f:37:53:56:22:cc:7b:5d:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:DD:08:31:7B:A8:90:04:39:A6:BB:FE:A1:8F:AD:88:D2:9B:E5
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RBHdCDF7qJAEOaa7_qGPrYjSm-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
a1:df:0a:c9:d4:53:26:3a:14:6e:87:77:46:b5:aa:55:d1:bf:
76:93:e3:b2:5a:2c:14:d5:f0:2e:82:fc:c5:14:73:5a:11:33:
22:38:57:f8:41:ea:bd:68:69:67:15:e8:ac:a2:20:5e:0c:2d:
f5:17:77:ba:02:1d:8e:cb:3c:c3:29:67:8a:fa:c2:64:cf:01:
6a:f5:78:f0:67:dc:65:24:e5:2d:5d:7d:37:c8:9c:a9:6f:07:
c0:69:77:91:d3:2b:20:d9:01:c4:b8:30:1f:af:fb:90:da:fd:
d4:64:f3:1a:38:dc:d3:f7:90:ae:be:3d:64:b8:15:1e:55:a3:
31:fb:9d:fa:5c:24:ca:90:f2:a8:f0:81:70:cd:17:ca:25:c9:
12:1e:1d:15:0b:3d:0b:b5:de:44:4f:85:15:f8:df:fd:02:5f:
8a:d0:29:6e:5f:81:26:4d:62:68:80:f8:4a:fe:b6:4e:a3:a4:
31:da:38:71:32:e5:82:b8:03:58:d9:72:bd:38:39:e2:e6:42:
e9:22:71:6d:b1:78:d8:f4:61:a9:64:0f:48:f2:6c:49:f6:ef:
c4:35:c6:8d:34:b3:4b:1a:ca:51:77:52:91:2c:31:88:cd:1b:
61:42:36:1b:84:70:93:f1:68:07:45:d9:85:43:b3:12:a8:6e:
e6:e0:30:fe
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZcadhGwwl/P9kug20wwDsXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI5MDUxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDExZGQwODMxN2JhODkwMDQzOWE2YmJmZWExOGZhZDg4ZDI5YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zsgmgicTfB3oNBrQ2+6mEx6I0t/
hQX38bNCTKgHaiUvedWOKl0odOdlV00nCz2QQ1GnDHje+BWTRWcsFjioE2NKh0aH
ZSoNxvljd3bfYFPmMmLvNf8klz7VY+MIBFzsEAO+DOo4zjWzgnA1FiM5K4JO3zc7
mKKOuYtZEvAGS6h4MGcyWsUEwHl8fRsf3aaTG63xW8UW+J3ZMBnYB/Y4CjvBwpfF
SP/82URpGFkNdYvzfv1I5z9ezPepS9mVn9PpNDpygwnf5PP2xBRk2lxb3z28S7VM
cNBV1Cq1e87Px1QK/5sfWCzsQVZOa3Gy6qBaOi1TLTjmjzdTViLMe12iOQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFEQR3Qgxe6iQBDmmu/6hj62I0pvlMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvUkJIZENERjdxSkFFT2FhN19xR1ByWWpTbS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQCh3wrJ1FMmOhRuh3dGtapV0b92k+OyWiwU1fAu
gvzFFHNaETMiOFf4Qeq9aGlnFeisoiBeDC31F3e6Ah2OyzzDKWeK+sJkzwFq9Xjw
Z9xlJOUtXX03yJypbwfAaXeR0ysg2QHEuDAfr/uQ2v3UZPMaONzT95Cuvj1kuBUe
VaMx+536XCTKkPKo8IFwzRfKJckSHh0VCz0Ltd5ET4UV+N/9Al+K0CluX4EmTWJo
gPhK/rZOo6Qx2jhxMuWCuANY2XK9ODni5kLpInFtsXjY9GGpZA9I8mxJ9u/ENcaN
NLNLGspRd1KRLDGIzRthQjYbhHCT8WgHRdmFQ7MSqG7m4DD+
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:11 2025 by rpki-client