Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bnEIiUafWUE8MLjjRnMoi8GYHNs.roa
File: bnEIiUafWUE8MLjjRnMoi8GYHNs.roa (raw, json)
Hash identifier: fFM7jujVrNrogG84m7wDr66ggt14OvTiXBrL3IDTEOM=
Subject key identifier: 6E:71:08:89:46:9F:59:41:3C:30:B8:E3:46:73:28:8B:C1:98:1C:DB
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019739C89C6FA95EB437C6546BEA874997AA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bnEIiUafWUE8MLjjRnMoi8GYHNs.roa
Signing time: Wed 04 Jun 2025 07:12:17 +0000
ROA not before: Wed 04 Jun 2025 07:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:c8:9c:6f:a9:5e:b4:37:c6:54:6b:ea:87:49:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 07:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e710889469f59413c30b8e34673288bc1981cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:5f:0b:b5:b3:eb:d2:35:c5:38:a3:c1:1c:
ff:34:b1:b1:c4:f9:80:84:ba:5d:70:07:bf:37:f9:
b4:33:2f:b8:11:45:b8:65:1c:ec:86:60:50:03:32:
53:59:eb:e4:35:f7:b2:41:7a:a1:1e:a1:41:26:eb:
2a:ea:64:a5:70:3d:03:ab:d4:c0:56:b0:6e:61:8f:
ff:7a:a3:58:2d:bc:7e:5e:7a:4a:6b:23:ca:66:6e:
5b:77:4f:e4:52:8a:41:de:dd:2d:c5:0a:42:84:e6:
a4:a3:44:6b:39:1b:29:95:da:bf:e9:8b:69:23:c0:
7e:24:91:8f:d4:a0:61:db:19:59:39:b3:46:51:ac:
bc:b7:5c:79:91:b6:09:6c:da:b0:95:00:c7:e7:e7:
00:96:45:4d:ce:43:47:81:f2:0d:2c:9c:fd:ef:61:
bc:d0:73:8c:90:51:6a:3c:f9:0f:25:57:96:16:7b:
a4:3f:11:7c:a9:60:c4:49:03:e7:66:d0:73:f7:e9:
b6:e7:22:17:3b:f3:5f:fc:84:b2:e0:70:82:67:01:
d5:65:d7:9e:24:59:1c:2f:9a:62:a9:29:bf:b4:d2:
c9:d0:52:90:cd:0d:22:b6:62:f7:88:14:c8:07:8a:
83:85:c1:c3:b3:5f:24:33:dd:24:bd:ec:96:93:8c:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:71:08:89:46:9F:59:41:3C:30:B8:E3:46:73:28:8B:C1:98:1C:DB
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bnEIiUafWUE8MLjjRnMoi8GYHNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
1b:b9:63:fc:00:88:9e:37:0b:85:a2:78:2d:74:ad:81:36:98:
1a:86:33:de:21:27:fe:db:34:9e:31:3a:c2:7c:55:3a:74:f8:
0f:b9:ed:fe:cb:9b:fd:6b:67:a5:c7:73:d2:f0:3b:72:f6:dc:
9f:c3:25:a1:47:82:86:44:10:d6:c3:86:60:33:18:4e:0d:fd:
5e:fd:1b:f1:02:29:6f:3e:2c:f1:31:b9:f8:75:29:c1:67:39:
f5:07:d3:a6:0c:7c:ab:47:f9:2a:35:04:0f:c7:2d:07:2c:49:
a5:6a:df:e2:44:5b:26:3f:98:cb:bc:80:70:e3:e8:42:90:c4:
9a:86:84:a7:49:34:d1:63:bb:87:03:0c:3d:92:27:68:df:79:
37:3b:33:2f:69:b9:1e:7b:47:d5:6a:97:24:ad:8b:af:61:90:
db:8c:89:dd:50:ee:70:1a:81:ce:0e:ec:49:21:89:20:55:8c:
6c:cc:11:86:a3:96:75:f6:c1:c7:6e:01:8a:a7:5d:4c:55:ae:
47:3d:1c:4a:9b:29:b8:80:58:ce:f9:34:3c:56:06:9f:aa:81:
7d:9f:f7:d0:13:c4:b5:38:8a:c6:a3:5d:ee:c4:24:3e:a2:07:
96:10:ad:40:01:55:74:69:3a:4f:2a:b6:55:ad:ff:15:9c:9b:
e7:33:c4:ab
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZc5yJxvqV60N8ZUa+qHSZeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA0MDcxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTcxMDg4OTQ2OWY1OTQxM2MzMGI4ZTM0NjczMjg4YmMxOTgxY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5fC7Wz69I1xTijwRz/NLGxxPmA
hLpdcAe/N/m0My+4EUW4ZRzshmBQAzJTWevkNfeyQXqhHqFBJusq6mSlcD0Dq9TA
VrBuYY//eqNYLbx+XnpKayPKZm5bd0/kUopB3t0txQpChOako0RrORspldq/6Ytp
I8B+JJGP1KBh2xlZObNGUay8t1x5kbYJbNqwlQDH5+cAlkVNzkNHgfINLJz972G8
0HOMkFFqPPkPJVeWFnukPxF8qWDESQPnZtBz9+m25yIXO/Nf/ISy4HCCZwHVZdee
JFkcL5piqSm/tNLJ0FKQzQ0itmL3iBTIB4qDhcHDs18kM90kveyWk4wBMQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFG5xCIlGn1lBPDC440ZzKIvBmBzbMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvYm5FSWlVYWZXVUU4TUxqalJuTW9pOEdZSE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAG7lj/ACInjcL
haJ4LXStgTaYGoYz3iEn/ts0njE6wnxVOnT4D7nt/sub/Wtnpcdz0vA7cvbcn8Ml
oUeChkQQ1sOGYDMYTg39Xv0b8QIpbz4s8TG5+HUpwWc59QfTpgx8q0f5KjUED8ct
ByxJpWrf4kRbJj+Yy7yAcOPoQpDEmoaEp0k00WO7hwMMPZInaN95NzszL2m5HntH
1WqXJK2Lr2GQ24yJ3VDucBqBzg7sSSGJIFWMbMwRhqOWdfbBx24BiqddTFWuRz0c
SpspuIBYzvk0PFYGn6qBfZ/30BPEtTiKxqNd7sQkPqIHlhCtQAFVdGk6Tyq2Va3/
FZyb5zPEqw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:20:47 2025 by rpki-client