Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WOtwIw0LteyvjA1TZib_T0n7Auo.roa
File: WOtwIw0LteyvjA1TZib_T0n7Auo.roa (raw, json)
Hash identifier: 72BIljitCznWmTNLvxXbWI5ynGOojPDhNtQRPkdEdZo=
Subject key identifier: 58:EB:70:23:0D:0B:B5:EC:AF:8C:0D:53:66:26:FF:4F:49:FB:02:EA
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196B4EF668C3E54B3A39A6B31A572654A88
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WOtwIw0LteyvjA1TZib_T0n7Auo.roa
Signing time: Fri 09 May 2025 12:05:10 +0000
ROA not before: Fri 09 May 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:b4ee:a28b/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 09 May 2025 12:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:ef:66:8c:3e:54:b3:a3:9a:6b:31:a5:72:65:4a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 9 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58eb70230d0bb5ecaf8c0d536626ff4f49fb02ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:a0:d3:9b:40:8a:03:c6:f5:6d:c1:08:8d:
b7:ca:f6:e6:6e:9e:d4:73:83:5d:64:eb:c3:a6:af:
53:fa:21:a1:98:d3:e7:ea:45:30:05:83:05:38:e8:
60:dc:74:d8:17:47:7b:57:ea:99:c4:89:30:85:e9:
4f:0b:ca:59:32:00:a0:0c:99:12:07:06:9c:ca:5f:
13:9b:84:26:18:53:6f:d8:4f:da:05:ae:3f:38:f7:
34:ce:c1:cf:b1:e6:67:22:47:e8:01:41:55:0f:65:
54:57:9d:40:89:dc:13:73:d2:00:10:b4:07:14:2d:
69:bc:c7:24:e5:71:8f:48:b1:d7:8b:38:83:ab:e7:
08:6f:00:5f:c7:37:40:da:4a:bf:7b:b7:cf:b1:b9:
2b:8f:27:8d:71:63:18:83:01:a4:af:a6:e6:31:42:
ef:36:9e:6a:fd:fb:62:98:d6:37:b1:bf:5c:8b:ca:
7a:14:8f:1f:cb:11:7f:86:d9:14:5d:e0:39:aa:5c:
e4:2f:18:0d:bd:da:ca:f9:22:00:9c:0f:da:75:76:
14:39:14:6e:23:5a:a1:a7:1f:a2:de:14:27:8a:96:
6e:22:fe:50:de:39:7c:83:9c:19:53:5f:8d:95:f5:
71:15:8c:3f:3d:60:dc:95:33:4a:92:5c:29:21:a2:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:70:23:0D:0B:B5:EC:AF:8C:0D:53:66:26:FF:4F:49:FB:02:EA
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WOtwIw0LteyvjA1TZib_T0n7Auo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:b4ee:a28b/128
Signature Algorithm: sha256WithRSAEncryption
c4:ea:a5:c8:50:d5:90:2d:0c:d1:41:f6:60:ce:c8:87:a0:4f:
32:b0:05:33:38:b6:a8:d5:17:f7:3b:28:07:7e:63:b8:0b:28:
89:72:4a:90:67:76:00:88:92:2b:8b:93:48:da:fb:f0:18:71:
07:0e:59:a5:6f:ef:df:74:c8:79:96:18:28:c4:e0:cb:2b:29:
78:80:ba:88:3d:44:61:cf:d9:75:fd:a3:9c:48:3b:5d:3e:39:
4a:8c:07:2b:04:7a:1d:60:88:d9:8f:03:7d:a2:5d:35:28:93:
e3:53:ec:71:4b:e1:08:f8:c4:b3:94:02:f1:d8:de:d8:7a:a2:
99:df:9e:b1:05:9e:4c:37:d0:81:5d:7a:f8:d8:24:9a:2a:66:
0d:39:41:4a:54:48:9d:05:89:6c:a6:a6:e6:03:e1:d0:6b:b3:
19:72:6b:3e:4a:40:39:68:63:58:db:97:b1:cf:cf:57:98:6a:
d7:e7:82:18:fc:d5:91:c1:26:69:ba:b2:83:a0:d7:45:87:b2:
4a:5d:ce:fe:ec:92:7c:9a:e8:e1:d2:f5:02:6f:07:10:a1:93:
9e:8c:2a:86:3f:9e:18:0b:8e:75:99:ad:2c:3e:51:4d:55:e3:
d1:21:fd:00:43:a0:ff:c5:13:96:f4:b9:83:e4:3a:0c:c5:be:
ae:0e:57:80
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZa072aMPlSzo5prMaVyZUqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTA5MTIwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGViNzAyMzBkMGJiNWVjYWY4YzBkNTM2NjI2ZmY0ZjQ5ZmIwMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAWg05tAigPG9W3BCI23yvbmbp7U
c4NdZOvDpq9T+iGhmNPn6kUwBYMFOOhg3HTYF0d7V+qZxIkwhelPC8pZMgCgDJkS
Bwacyl8Tm4QmGFNv2E/aBa4/OPc0zsHPseZnIkfoAUFVD2VUV51AidwTc9IAELQH
FC1pvMck5XGPSLHXiziDq+cIbwBfxzdA2kq/e7fPsbkrjyeNcWMYgwGkr6bmMULv
Np5q/ftimNY3sb9ci8p6FI8fyxF/htkUXeA5qlzkLxgNvdrK+SIAnA/adXYUORRu
I1qhpx+i3hQnipZuIv5Q3jl8g5wZU1+NlfVxFYw/PWDclTNKklwpIaL0oQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFjrcCMNC7Xsr4wNU2Ym/09J+wLqMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvV090d0l3MEx0ZXl2akExVFppYl9UMG43QXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWtO6iizANBgkqhkiG9w0BAQsFAAOCAQEAxOqlyFDVkC0M0UH2YM7Ih6BP
MrAFMzi2qNUX9zsoB35juAsoiXJKkGd2AIiSK4uTSNr78BhxBw5ZpW/v33TIeZYY
KMTgyyspeIC6iD1EYc/Zdf2jnEg7XT45SowHKwR6HWCI2Y8DfaJdNSiT41PscUvh
CPjEs5QC8dje2Hqimd+esQWeTDfQgV16+NgkmipmDTlBSlRInQWJbKam5gPh0Guz
GXJrPkpAOWhjWNuXsc/PV5hq1+eCGPzVkcEmabqyg6DXRYeySl3O/uySfJro4dL1
Am8HEKGTnowqhj+eGAuOdZmtLD5RTVXj0SH9AEOg/8UTlvS5g+Q6DMW+rg5XgA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:55 2025 by rpki-client