Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZV9U7e9u-rdZsdYoDDZ525vnM_4.roa
File: ZV9U7e9u-rdZsdYoDDZ525vnM_4.roa (raw, json)
Hash identifier: Qzvozbw8tMQocdko79YfrtQehBSI27P4VqFr5wvSva8=
Subject key identifier: 65:5F:54:ED:EF:6E:FA:B7:59:B1:D6:28:0C:36:79:DB:9B:E7:33:FE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972DFBEFFDD261965FF1AB4EFEFFE1F062
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZV9U7e9u-rdZsdYoDDZ525vnM_4.roa
Signing time: Mon 02 Jun 2025 00:12:55 +0000
ROA not before: Mon 02 Jun 2025 00:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Jun 2025 01:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2d:fb:ef:fd:d2:61:96:5f:f1:ab:4e:fe:ff:e1:f0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 00:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655f54edef6efab759b1d6280c3679db9be733fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:ed:ac:84:4f:bc:45:7a:da:60:7b:b8:31:
6d:d1:52:b9:c6:ae:82:33:4e:c5:d1:fd:63:00:7a:
dd:2b:92:93:47:11:e5:79:65:9c:3a:36:10:95:21:
f0:44:f5:fb:26:8c:e5:d5:a8:e0:40:68:d3:19:c7:
2a:78:18:a3:31:8e:fc:1c:5d:7b:e9:b5:75:bc:0d:
08:f6:61:c9:92:f9:55:0b:e9:4b:54:1b:76:f4:11:
12:da:de:be:47:5a:bb:08:a5:b5:b0:60:58:9c:5d:
aa:fc:28:a8:ae:70:56:a5:41:e5:59:b8:ce:02:f9:
03:93:33:69:98:6a:44:22:c7:99:e4:41:89:31:6e:
3f:cb:36:f5:64:48:0d:84:b9:10:f2:7c:78:16:09:
60:67:86:60:c9:0d:7e:51:ee:27:b3:37:95:18:46:
45:e8:2a:fb:2b:f4:d6:05:eb:82:70:ee:b1:00:22:
7d:23:c6:23:33:e5:9e:45:3f:ce:69:42:52:12:fd:
47:c3:1a:12:b8:02:6c:5a:f8:2c:ef:a3:da:d5:21:
34:56:43:6f:d2:ec:13:ae:5c:8e:fc:76:e2:6a:9c:
36:9d:6c:a6:52:26:31:12:5d:1b:79:11:c6:08:d5:
ec:b7:ed:1d:14:9d:a5:3e:de:37:7a:50:e6:3a:94:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:54:ED:EF:6E:FA:B7:59:B1:D6:28:0C:36:79:DB:9B:E7:33:FE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZV9U7e9u-rdZsdYoDDZ525vnM_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
5e:f2:f4:ed:37:e6:6b:e6:b8:ce:17:ce:a5:1a:ca:62:31:95:
5a:b0:7f:70:c3:80:85:57:5c:ff:14:80:2f:17:3e:2a:dd:dc:
6a:5a:78:ac:0c:3f:20:aa:de:dd:e2:7d:ef:23:fa:8f:f9:e8:
fc:7b:84:2e:ce:85:02:d1:33:c8:36:6d:9e:35:e6:14:10:0b:
f6:c7:8d:02:a7:7f:65:be:4d:f9:11:ac:94:b2:c9:79:c7:30:
c7:9e:84:5b:05:20:cb:0b:91:66:2c:3a:fd:50:50:fa:88:27:
40:6f:3f:50:fb:e4:ef:7f:73:6f:59:60:f2:9f:e1:44:c8:2f:
f0:80:c0:18:7d:76:53:97:7a:28:71:d2:d5:b5:a6:6b:91:52:
34:d9:ec:da:32:fe:f3:77:8b:9d:32:55:22:dc:d2:05:87:8e:
91:c0:d0:43:bd:eb:5c:44:d9:7f:f7:4b:5f:23:0c:29:f6:d7:
d4:e2:e8:24:61:57:3f:71:01:39:4e:1a:b3:21:a9:39:40:e3:
e1:4b:90:65:e9:bc:7b:53:40:a5:65:4f:45:43:ff:ad:bf:11:
42:b5:20:a6:2e:7a:9d:0d:2d:52:cc:36:f6:5b:1a:12:4e:36:
07:13:01:28:0f:84:a7:55:7b:fd:ce:55:fd:5e:24:7e:43:c4:
59:33:6d:f0
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZct++/90mGWX/GrTv7/4fBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjAyMDAxMjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTVmNTRlZGVmNmVmYWI3NTliMWQ2MjgwYzM2NzlkYjliZTczM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy57trIRPvEV62mB7uDFt0VK5xq6C
M07F0f1jAHrdK5KTRxHleWWcOjYQlSHwRPX7Jozl1ajgQGjTGccqeBijMY78HF17
6bV1vA0I9mHJkvlVC+lLVBt29BES2t6+R1q7CKW1sGBYnF2q/CiornBWpUHlWbjO
AvkDkzNpmGpEIseZ5EGJMW4/yzb1ZEgNhLkQ8nx4FglgZ4ZgyQ1+Ue4nszeVGEZF
6Cr7K/TWBeuCcO6xACJ9I8YjM+WeRT/OaUJSEv1HwxoSuAJsWvgs76Pa1SE0VkNv
0uwTrlyO/Hbiapw2nWymUiYxEl0beRHGCNXst+0dFJ2lPt43elDmOpS49QIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFGVfVO3vbvq3WbHWKAw2edub5zP+MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvWlY5VTdlOXUtcmRac2RZb0REWjUyNXZuTV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQBe8vTtN+Zr5rjOF86lGspiMZVasH9ww4CFV1z/
FIAvFz4q3dxqWnisDD8gqt7d4n3vI/qP+ej8e4QuzoUC0TPINm2eNeYUEAv2x40C
p39lvk35EayUssl5xzDHnoRbBSDLC5FmLDr9UFD6iCdAbz9Q++Tvf3NvWWDyn+FE
yC/wgMAYfXZTl3oocdLVtaZrkVI02ezaMv7zd4udMlUi3NIFh46RwNBDvetcRNl/
90tfIwwp9tfU4ugkYVc/cQE5ThqzIak5QOPhS5Bl6bx7U0ClZU9FQ/+tvxFCtSCm
LnqdDS1SzDb2WxoSTjYHEwEoD4SnVXv9zlX9XiR+Q8RZM23w
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:35 2025 by rpki-client