Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/b1JXYLbETIlsgI63FF667f7ZZBk.roa
File: b1JXYLbETIlsgI63FF667f7ZZBk.roa (raw, json)
Hash identifier: K2KcVKjITgVgUzCmg47h3dJUJBUYQBoohvdQ+xR6VNM=
Subject key identifier: 6F:52:57:60:B6:C4:4C:89:6C:80:8E:B7:14:5E:BA:ED:FE:D9:64:19
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197053601BB7CAF094EA8DAC9DFE12DFACF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/b1JXYLbETIlsgI63FF667f7ZZBk.roa
Signing time: Sun 25 May 2025 02:11:54 +0000
ROA not before: Sun 25 May 2025 02:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 03:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:05:36:01:bb:7c:af:09:4e:a8:da:c9:df:e1:2d:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 02:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f525760b6c44c896c808eb7145ebaedfed96419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:cf:d0:9e:16:9b:ff:64:4c:d1:6b:6b:12:
1f:cf:42:87:fa:6e:f6:8b:a8:4c:bd:ac:73:5f:84:
4a:26:82:41:c6:fd:f9:19:5b:af:e6:79:f7:bb:69:
30:ab:26:84:a8:f0:67:03:20:a9:13:9e:e5:01:55:
5b:56:c0:03:40:5c:02:16:2e:2d:42:be:80:ea:e9:
a8:dc:32:db:02:95:30:bc:29:f7:d5:51:a7:ac:7c:
64:b0:e9:29:60:13:25:9e:d8:fb:03:b3:7a:ac:ac:
f7:cc:cd:80:b9:ba:54:ec:0a:38:3f:d8:7e:62:6e:
fe:04:4a:94:f7:6b:8a:7c:53:a5:6f:0c:4a:27:82:
9c:08:5c:ca:9f:f0:9a:61:f5:3c:ab:7d:b7:e5:3f:
7c:c6:51:11:af:8c:91:ba:75:c0:66:08:57:39:5d:
ca:24:d0:94:90:98:40:7d:e0:46:db:1c:59:fd:93:
bf:b1:aa:9f:2b:19:45:5f:72:7f:3f:18:05:73:93:
98:48:b8:a5:01:0e:e1:db:6b:3c:b2:24:0c:0d:6e:
e0:9c:58:e0:f8:3f:4d:aa:5d:db:6a:ad:2a:b8:03:
ff:c8:0c:3f:f2:ca:bd:6f:cb:66:e2:92:26:81:96:
4d:da:df:8e:5c:1b:23:e9:57:ba:8c:ee:17:99:e1:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:57:60:B6:C4:4C:89:6C:80:8E:B7:14:5E:BA:ED:FE:D9:64:19
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/b1JXYLbETIlsgI63FF667f7ZZBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
59:2d:55:3e:08:d1:e8:aa:f0:35:fd:f7:9a:d2:8b:d0:44:6b:
5d:49:37:b9:b1:39:f9:57:6c:65:fa:34:29:fe:47:77:ed:03:
06:1b:da:4b:0e:16:4c:1c:75:a5:57:6a:3a:06:ef:19:ad:38:
73:59:44:22:aa:8f:cf:98:0e:e9:5f:71:8c:b7:a3:38:4d:b5:
a6:b8:4d:a6:fd:7d:d2:b8:8b:f7:1a:0a:b8:0d:12:2b:6a:e5:
8c:37:af:35:93:e2:3b:64:a1:bc:77:8c:d1:85:7d:9d:06:19:
0a:a4:4a:6e:4e:e5:db:67:3e:29:7f:1b:d2:95:11:a3:54:72:
3f:df:d1:36:b6:8a:42:27:d9:0c:d2:a6:e6:3b:fb:50:7e:08:
e8:73:ed:fc:80:2c:d4:5c:27:39:d4:70:61:50:de:b5:ec:c5:
47:26:df:45:6c:a6:d5:0e:a1:f9:ce:8b:a9:ce:f7:7e:89:2c:
38:b0:ec:f3:32:75:bf:20:fb:fa:1f:40:af:d3:9b:8f:f3:88:
37:cb:c7:a4:20:d9:6a:0f:15:46:7a:01:15:83:79:56:d8:ea:
2b:4f:15:b2:21:d1:2a:31:a2:c9:09:66:73:c1:7e:7e:27:23:
a6:e2:f3:31:6c:5a:cc:a0:c1:fc:3f:90:06:4e:6a:2b:d9:2c:
06:28:57:9d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcFNgG7fK8JTqjayd/hLfrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI1MDIxMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjUyNTc2MGI2YzQ0Yzg5NmM4MDhlYjcxNDVlYmFlZGZlZDk2NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslLP0J4Wm/9kTNFraxIfz0KH+m72
i6hMvaxzX4RKJoJBxv35GVuv5nn3u2kwqyaEqPBnAyCpE57lAVVbVsADQFwCFi4t
Qr6A6umo3DLbApUwvCn31VGnrHxksOkpYBMlntj7A7N6rKz3zM2AubpU7Ao4P9h+
Ym7+BEqU92uKfFOlbwxKJ4KcCFzKn/CaYfU8q3235T98xlERr4yRunXAZghXOV3K
JNCUkJhAfeBG2xxZ/ZO/saqfKxlFX3J/PxgFc5OYSLilAQ7h22s8siQMDW7gnFjg
+D9Nql3baq0quAP/yAw/8sq9b8tm4pImgZZN2t+OXBsj6Ve6jO4XmeEAowIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFG9SV2C2xEyJbICOtxReuu3+2WQZMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvYjFKWFlMYkVUSWxzZ0k2M0ZGNjY3ZjdaWkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAWS1VPgjR6KrwNf33mtKL0ERr
XUk3ubE5+VdsZfo0Kf5Hd+0DBhvaSw4WTBx1pVdqOgbvGa04c1lEIqqPz5gO6V9x
jLejOE21prhNpv190riL9xoKuA0SK2rljDevNZPiO2ShvHeM0YV9nQYZCqRKbk7l
22c+KX8b0pURo1RyP9/RNraKQifZDNKm5jv7UH4I6HPt/IAs1FwnOdRwYVDetezF
RybfRWym1Q6h+c6Lqc73foksOLDs8zJ1vyD7+h9Ar9Obj/OIN8vHpCDZag8VRnoB
FYN5VtjqK08VsiHRKjGiyQlmc8F+ficjpuLzMWxazKDB/D+QBk5qK9ksBihXnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:24 2025 by rpki-client