Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhCVqn-pwjm8OcJ5tVId8AcVwzk.roa
File: ZhCVqn-pwjm8OcJ5tVId8AcVwzk.roa (raw, json)
Hash identifier: ZGTi9qE78CwX1SGWKSMoSv3T2KH8edtl+cR3r78RdPU=
Subject key identifier: 66:10:95:AA:7F:A9:C2:39:BC:39:C2:79:B5:52:1D:F0:07:15:C3:39
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196E42371FB1CE172EE51DBB2E105DF77B7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhCVqn-pwjm8OcJ5tVId8AcVwzk.roa
Signing time: Sun 18 May 2025 16:04:10 +0000
ROA not before: Sun 18 May 2025 16:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e423:6830/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 18 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:23:71:fb:1c:e1:72:ee:51:db:b2:e1:05:df:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 18 16:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661095aa7fa9c239bc39c279b5521df00715c339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:c3:35:ae:1f:69:25:b0:64:70:92:78:99:
1f:e1:d2:71:37:d8:85:b9:1f:91:f2:69:00:f2:be:
98:69:40:9a:45:6c:5e:77:60:5f:19:5d:b4:57:76:
38:7c:a8:33:fa:b7:0b:9f:02:ac:9b:db:02:ed:68:
07:ab:e2:c9:9b:bc:6a:4e:4b:c6:01:35:bf:e4:ea:
b2:16:61:c0:c5:ae:20:e0:79:f9:64:8a:37:d0:26:
29:90:e1:38:f5:9b:fc:b6:b8:ac:66:de:4d:3d:90:
48:66:7f:da:bb:2a:b8:d2:b6:47:61:51:53:5e:6c:
ae:79:54:f2:0e:c2:19:b7:3c:8a:56:32:0b:3a:e2:
77:4d:db:50:11:b2:f5:37:ce:3e:b8:e6:1a:29:95:
13:60:3a:1c:f6:3e:27:71:06:fb:d4:ef:6d:0a:1f:
9a:c3:df:0c:9d:0f:d6:11:27:50:af:30:b9:b0:31:
cb:27:81:67:dd:d3:7c:73:a8:b3:d1:65:85:e0:99:
1f:d0:ef:4a:d7:da:6e:31:93:fb:cd:02:3d:0f:87:
2a:7f:81:82:31:de:6c:1e:40:ae:ff:75:9c:f9:1b:
ce:55:d5:1c:c1:ee:63:0b:43:5b:03:d4:02:71:23:
db:96:d1:6a:ca:5d:6f:4b:53:12:5e:ac:30:11:3c:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:95:AA:7F:A9:C2:39:BC:39:C2:79:B5:52:1D:F0:07:15:C3:39
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhCVqn-pwjm8OcJ5tVId8AcVwzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e423:6830/128
Signature Algorithm: sha256WithRSAEncryption
63:e4:bc:9e:9a:5a:64:0c:2d:b0:bf:a4:18:7d:d6:c8:25:f1:
ef:67:75:12:a8:e6:6f:64:63:44:18:69:43:fe:11:dd:dd:17:
19:6d:ae:21:25:43:61:9a:c7:85:7b:2d:72:51:a1:82:19:de:
97:6e:6e:ba:39:f4:76:35:c4:94:9f:eb:33:a1:37:70:28:bf:
6e:ae:8f:1c:69:6b:54:e9:89:ae:01:a3:f4:8a:cb:4e:56:6f:
3d:70:7e:50:25:d1:1e:b8:9c:1c:e6:d6:14:d7:4f:5b:5f:37:
f2:ad:20:65:bd:d0:4f:e9:aa:f3:cf:0d:2e:b5:76:7d:41:57:
cc:5b:ad:b7:e9:ec:0a:29:a8:e1:90:0e:bf:0e:b1:3d:9d:03:
48:c7:88:32:88:fa:dd:51:30:f7:44:a8:61:11:c8:5e:a0:8a:
9a:46:ae:6f:95:2f:82:2f:43:e5:e2:5d:33:db:5b:17:5c:8a:
51:86:e8:c7:7c:cf:d9:f1:19:f6:56:d9:61:b9:fe:d2:e7:b6:
2f:f8:dc:ed:b7:fe:c5:d5:12:89:cf:87:d7:31:73:69:5a:8a:
64:87:e2:ee:f7:73:96:23:1f:7a:8c:3a:2f:ad:4c:3e:d4:99:
35:5a:54:d4:9e:4f:39:8b:4c:ef:f7:ea:54:22:db:4e:f0:e9:
6d:45:a4:58
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbkI3H7HOFy7lHbsuEF33e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTE4MTYwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjEwOTVhYTdmYTljMjM5YmMzOWMyNzliNTUyMWRmMDA3MTVjMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/DNa4faSWwZHCSeJkf4dJxN9iF
uR+R8mkA8r6YaUCaRWxed2BfGV20V3Y4fKgz+rcLnwKsm9sC7WgHq+LJm7xqTkvG
ATW/5OqyFmHAxa4g4Hn5ZIo30CYpkOE49Zv8trisZt5NPZBIZn/auyq40rZHYVFT
XmyueVTyDsIZtzyKVjILOuJ3TdtQEbL1N84+uOYaKZUTYDoc9j4ncQb71O9tCh+a
w98MnQ/WESdQrzC5sDHLJ4Fn3dN8c6iz0WWF4Jkf0O9K19puMZP7zQI9D4cqf4GC
Md5sHkCu/3Wc+RvOVdUcwe5jC0NbA9QCcSPbltFqyl1vS1MSXqwwETxk7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGYQlap/qcI5vDnCebVSHfAHFcM5MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvWmhDVnFuLXB3am04T2NKNXRWSWQ4QWNWd3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW5CNoMDANBgkqhkiG9w0BAQsFAAOCAQEAY+S8nppaZAwtsL+kGH3WyCXx
72d1Eqjmb2RjRBhpQ/4R3d0XGW2uISVDYZrHhXstclGhghnel25uujn0djXElJ/r
M6E3cCi/bq6PHGlrVOmJrgGj9IrLTlZvPXB+UCXRHricHObWFNdPW1838q0gZb3Q
T+mq888NLrV2fUFXzFutt+nsCimo4ZAOvw6xPZ0DSMeIMoj63VEw90SoYRHIXqCK
mkaub5Uvgi9D5eJdM9tbF1yKUYbox3zP2fEZ9lbZYbn+0ue2L/jc7bf+xdUSic+H
1zFzaVqKZIfi7vdzliMfeow6L61MPtSZNVpU1J5POYtM7/fqVCLbTvDpbUWkWA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:18 2025 by rpki-client