Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S2fh-ty0Dzm4PYzXr2QT4i2hMD0.roa
File: S2fh-ty0Dzm4PYzXr2QT4i2hMD0.roa (raw, json)
Hash identifier: QI9B1kVDfrcXQdg0Ng2LFLNaRvlJJa2TK8CNsPFe3kc=
Subject key identifier: 4B:67:E1:FA:DC:B4:0F:39:B8:3D:8C:D7:AF:64:13:E2:2D:A1:30:3D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019743725E10A21B1D830D3716ACD44EAF45
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S2fh-ty0Dzm4PYzXr2QT4i2hMD0.roa
Signing time: Fri 06 Jun 2025 04:14:18 +0000
ROA not before: Fri 06 Jun 2025 04:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 05:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:72:5e:10:a2:1b:1d:83:0d:37:16:ac:d4:4e:af:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 04:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b67e1fadcb40f39b83d8cd7af6413e22da1303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:89:99:a6:e8:a8:0f:82:f7:10:9b:c1:bd:
4d:17:61:4d:7b:b2:00:87:59:ef:f5:b8:33:68:a0:
a4:bc:f5:0c:4f:93:64:96:20:ab:64:1a:92:3d:f3:
5b:f3:f6:3a:61:1e:68:f7:46:72:75:37:eb:41:26:
fa:67:d3:bc:1e:55:7b:4c:8c:c1:dc:44:76:56:3e:
cf:e1:94:c9:51:a3:7a:cf:25:e7:b8:b4:f0:91:04:
c1:5f:8a:f1:e4:4c:7b:04:23:1c:d4:98:a8:58:06:
39:fd:67:35:00:23:4b:b7:2d:42:df:ce:7d:7f:f2:
dc:94:42:5d:78:1f:4e:13:9a:46:14:3f:f3:02:f8:
6f:c7:2c:58:2e:b3:74:17:9c:0a:bf:6f:7d:8b:06:
eb:ef:5b:1a:ec:67:7d:3b:84:c9:62:67:29:64:03:
02:c5:48:b6:4d:1b:43:c3:73:39:2f:fa:da:22:45:
3b:bb:47:9a:d7:02:a7:fc:2c:a1:75:ca:57:d5:c8:
b5:22:33:85:e9:ab:d8:15:9f:4e:ad:51:55:69:ac:
ba:83:b2:58:fb:f7:5c:e6:3e:91:06:d5:e9:71:b1:
07:33:5f:69:ba:4b:d6:08:34:fb:f9:04:52:3f:dd:
54:ec:3a:23:34:60:1b:60:d6:dd:ed:b3:26:dc:f9:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:E1:FA:DC:B4:0F:39:B8:3D:8C:D7:AF:64:13:E2:2D:A1:30:3D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S2fh-ty0Dzm4PYzXr2QT4i2hMD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
06:66:09:3a:81:69:35:e1:07:ba:f4:55:76:fa:d0:00:19:4f:
9e:6f:c2:48:8d:38:09:5f:eb:52:ab:d7:df:e5:aa:66:aa:0d:
8c:80:b7:a1:e4:38:67:56:3a:e8:bf:bb:67:70:f4:4a:56:50:
40:d1:99:57:11:e2:0f:a1:d5:8a:b0:b5:e6:a5:e5:60:6f:e8:
c4:da:ec:bd:fb:f7:f7:04:ff:fb:6a:2b:02:5c:17:8b:5b:06:
ce:5e:15:84:99:0c:dc:01:ba:4c:8f:e9:79:d9:06:97:10:02:
49:d3:81:fb:20:9f:0c:08:a9:8a:83:cd:84:7a:04:fb:af:95:
42:70:76:7b:78:eb:d7:04:f5:95:79:a1:4e:33:e9:93:5c:99:
bd:62:e6:12:ea:31:51:69:5a:3f:22:49:e5:4c:f6:43:2a:ed:
35:ed:0f:5a:30:70:5a:0f:96:08:2e:dd:b6:c9:c9:3e:76:4e:
9f:41:e0:8f:37:fe:66:b8:24:0a:d2:d9:ed:3e:5f:aa:61:41:
06:08:86:73:0c:23:eb:59:ec:13:4e:56:c5:e4:2a:bb:8b:bf:
da:d2:a2:4f:70:95:7b:66:07:18:ba:d8:c3:61:79:bb:d8:fd:
ca:20:d2:6d:f6:6a:54:c7:a3:68:90:1b:14:4e:73:b4:d4:dc:
f5:2a:85:b7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdDcl4Qohsdgw03FqzUTq9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA2MDQxNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjY3ZTFmYWRjYjQwZjM5YjgzZDhjZDdhZjY0MTNlMjJkYTEzMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE2JmaboqA+C9xCbwb1NF2FNe7IA
h1nv9bgzaKCkvPUMT5NkliCrZBqSPfNb8/Y6YR5o90ZydTfrQSb6Z9O8HlV7TIzB
3ER2Vj7P4ZTJUaN6zyXnuLTwkQTBX4rx5Ex7BCMc1JioWAY5/Wc1ACNLty1C3859
f/LclEJdeB9OE5pGFD/zAvhvxyxYLrN0F5wKv299iwbr71sa7Gd9O4TJYmcpZAMC
xUi2TRtDw3M5L/raIkU7u0ea1wKn/CyhdcpX1ci1IjOF6avYFZ9OrVFVaay6g7JY
+/dc5j6RBtXpcbEHM19pukvWCDT7+QRSP91U7DojNGAbYNbd7bMm3PnuuwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFEtn4frctA85uD2M169kE+ItoTA9MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvUzJmaC10eTBEem00UFl6WHIyUVQ0aTJoTUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEABmYJOoFpNeEH
uvRVdvrQABlPnm/CSI04CV/rUqvX3+WqZqoNjIC3oeQ4Z1Y66L+7Z3D0SlZQQNGZ
VxHiD6HVirC15qXlYG/oxNrsvfv39wT/+2orAlwXi1sGzl4VhJkM3AG6TI/pedkG
lxACSdOB+yCfDAipioPNhHoE+6+VQnB2e3jr1wT1lXmhTjPpk1yZvWLmEuoxUWla
PyJJ5Uz2QyrtNe0PWjBwWg+WCC7dtsnJPnZOn0Hgjzf+ZrgkCtLZ7T5fqmFBBgiG
cwwj61nsE05WxeQqu4u/2tKiT3CVe2YHGLrYw2F5u9j9yiDSbfZqVMejaJAbFE5z
tNTc9SqFtw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:02 2025 by rpki-client