Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cJCa1fFgYIo4lzZ3_aDugou3nWI.roa
File: cJCa1fFgYIo4lzZ3_aDugou3nWI.roa (raw, json)
Hash identifier: dlBpnwPX5pbrvbsObM6kmreUwFh+rzll+b6Yr2AIjhY=
Subject key identifier: 70:90:9A:D5:F1:60:60:8A:38:97:36:77:FD:A0:EE:82:8B:B7:9D:62
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973D70470B60ED4A014044B8734D617578
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cJCa1fFgYIo4lzZ3_aDugou3nWI.roa
Signing time: Thu 05 Jun 2025 00:14:17 +0000
ROA not before: Thu 05 Jun 2025 00:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 01:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3d:70:47:0b:60:ed:4a:01:40:44:b8:73:4d:61:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 00:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70909ad5f160608a38973677fda0ee828bb79d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:a3:e9:14:d1:6b:c1:54:d0:c8:56:76:ea:
5f:13:84:7d:1d:f2:ed:f9:e5:6d:7e:4d:b2:35:78:
c4:61:59:1c:cb:6f:9f:9f:00:66:00:22:77:ed:38:
c3:f2:be:99:d2:18:bb:bb:9a:78:5e:20:50:8b:ef:
ca:a9:31:2e:71:5d:a2:42:e9:68:ab:2e:b8:7b:bf:
47:99:71:d7:4e:86:3d:c4:93:c9:4b:14:8d:d4:ae:
28:70:d3:16:8c:c5:86:d1:88:c3:1d:43:bf:e6:a2:
9d:5a:0c:4f:52:61:96:dd:32:ac:bc:83:60:1f:7c:
07:81:23:f4:21:6f:97:e7:e6:3b:cb:ab:66:b3:d9:
d9:a9:7d:4d:77:6d:f7:79:34:1d:83:20:e5:9f:1d:
42:ca:53:01:55:13:b0:96:f3:b3:89:fe:05:f3:d7:
f2:8d:bc:6d:44:9f:f2:dd:3b:ab:ea:ba:3c:05:6a:
fc:90:fc:02:9e:db:f5:36:42:1b:20:c5:79:0b:d4:
37:81:9e:bd:75:a5:15:dd:80:31:a1:18:92:cf:f6:
36:9f:fc:eb:b4:5e:82:42:49:03:f2:8b:2c:de:60:
7f:e9:ea:3e:82:0c:3b:ff:df:bb:6f:cd:44:01:6e:
30:81:1f:2a:e0:89:94:06:df:62:0c:cb:5f:1d:e1:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:9A:D5:F1:60:60:8A:38:97:36:77:FD:A0:EE:82:8B:B7:9D:62
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cJCa1fFgYIo4lzZ3_aDugou3nWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
53:68:87:6c:25:42:cd:f6:66:08:a7:d9:00:b8:e2:3e:60:87:
db:ac:93:3d:b3:97:ab:c6:8c:ca:a7:02:49:89:20:27:cf:eb:
ea:ea:ca:bd:d9:81:9d:e8:06:0b:27:ea:f9:af:76:e3:78:b8:
2a:02:e7:db:74:b9:dd:0c:66:f7:58:03:a9:81:9e:59:10:98:
27:cd:2f:35:a9:30:75:de:f4:8f:b3:b2:97:c6:aa:e3:d9:fe:
ec:82:76:bc:a1:03:0b:f3:83:6c:c5:26:d7:e0:56:4e:da:54:
42:64:a5:9d:4c:e8:2d:04:be:38:bc:8b:7e:07:7a:d7:db:ad:
72:7e:52:24:11:e9:d7:3a:4f:ad:24:43:29:db:60:eb:14:74:
e4:c1:d5:42:9a:6d:5a:ec:d9:e2:9d:e5:06:ce:30:36:5e:c6:
72:39:9f:fc:ea:b6:57:11:dd:89:e2:54:2a:6c:66:5d:93:ce:
65:fd:c8:a2:fb:0c:a7:23:b4:23:91:b6:b5:94:07:69:81:d6:
56:cf:d8:44:57:2b:16:ef:b6:5a:aa:f0:76:88:76:a8:08:64:
a1:ec:22:5e:a6:ce:fd:e5:1c:15:6b:33:01:46:96:4e:5f:04:
11:3e:58:b4:d9:40:64:76:80:06:ca:06:a9:5b:77:44:2c:27:
48:ec:ec:a9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZc9cEcLYO1KAUBEuHNNYXV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA1MDAxNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDkwOWFkNWYxNjA2MDhhMzg5NzM2NzdmZGEwZWU4MjhiYjc5ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLej6RTRa8FU0MhWdupfE4R9HfLt
+eVtfk2yNXjEYVkcy2+fnwBmACJ37TjD8r6Z0hi7u5p4XiBQi+/KqTEucV2iQulo
qy64e79HmXHXToY9xJPJSxSN1K4ocNMWjMWG0YjDHUO/5qKdWgxPUmGW3TKsvINg
H3wHgSP0IW+X5+Y7y6tms9nZqX1Nd233eTQdgyDlnx1CylMBVROwlvOzif4F89fy
jbxtRJ/y3Tur6ro8BWr8kPwCntv1NkIbIMV5C9Q3gZ69daUV3YAxoRiSz/Y2n/zr
tF6CQkkD8oss3mB/6eo+ggw7/9+7b81EAW4wgR8q4ImUBt9iDMtfHeGGOQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHCQmtXxYGCKOJc2d/2g7oKLt51iMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvY0pDYTFmRmdZSW80bHpaM19hRHVnb3UzbldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAU2iHbCVCzfZm
CKfZALjiPmCH26yTPbOXq8aMyqcCSYkgJ8/r6urKvdmBnegGCyfq+a9243i4KgLn
23S53Qxm91gDqYGeWRCYJ80vNakwdd70j7Oyl8aq49n+7IJ2vKEDC/ODbMUm1+BW
TtpUQmSlnUzoLQS+OLyLfgd619utcn5SJBHp1zpPrSRDKdtg6xR05MHVQpptWuzZ
4p3lBs4wNl7Gcjmf/Oq2VxHdieJUKmxmXZPOZf3IovsMpyO0I5G2tZQHaYHWVs/Y
RFcrFu+2Wqrwdoh2qAhkoewiXqbO/eUcFWszAUaWTl8EET5YtNlAZHaABsoGqVt3
RCwnSOzsqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:43 2025 by rpki-client