Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_pLZaAqF5FoycMGywswwJQD5tk.roa
File: c_pLZaAqF5FoycMGywswwJQD5tk.roa (raw, json)
Hash identifier: k7Lpwm5kh+ETM4HswOWL35sO4WnpgkP762PtZL13PNo=
Subject key identifier: 73:FA:4B:65:A0:2A:17:91:68:C9:C3:06:CB:0B:30:C0:94:03:E6:D9
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019700B72FC1ABF401941C043C7D7E1C610E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_pLZaAqF5FoycMGywswwJQD5tk.roa
Signing time: Sat 24 May 2025 05:14:54 +0000
ROA not before: Sat 24 May 2025 05:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:b7:2f:c1:ab:f4:01:94:1c:04:3c:7d:7e:1c:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 05:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fa4b65a02a179168c9c306cb0b30c09403e6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:c3:75:22:a7:9d:e1:51:d3:07:48:0a:6a:
ea:66:41:07:85:d4:b0:a9:9c:f1:70:47:8d:66:3c:
be:b6:93:e8:57:2b:7a:09:04:55:eb:64:1f:b4:cf:
d0:e0:d4:c4:39:67:eb:4a:52:da:2d:9a:42:30:74:
66:93:f2:a5:65:4e:d7:71:21:ce:39:b3:1b:af:7a:
f3:16:fc:7d:a3:5d:dd:ab:3b:52:2a:5f:3b:b6:6e:
6f:ef:9b:2b:30:9e:4d:04:9c:50:2a:23:e6:6c:1e:
6a:3f:0f:21:d6:dc:01:9e:9f:00:32:9a:e4:ce:18:
f2:9c:e9:dc:b9:f8:cd:b3:d1:92:58:77:2f:99:4a:
f6:4e:34:7f:88:34:82:52:c9:9a:87:20:70:d8:50:
2d:3c:41:ac:98:d3:65:11:c8:9b:0a:71:f9:f2:b0:
12:ab:73:1f:0f:f8:6c:b6:64:41:7e:ad:3b:02:a4:
08:c7:d7:f8:53:e9:1a:81:1e:77:6b:e8:f7:28:fe:
a1:3f:14:b4:32:25:a7:49:26:8b:c8:c9:05:80:1a:
57:6b:85:5c:a9:a1:07:34:de:a7:b6:43:b1:5c:5f:
9f:91:e5:b8:eb:b2:ac:5f:63:84:bb:d0:40:6a:7d:
f0:f9:77:fc:aa:85:43:32:41:b3:d6:0c:c7:b8:6d:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:4B:65:A0:2A:17:91:68:C9:C3:06:CB:0B:30:C0:94:03:E6:D9
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_pLZaAqF5FoycMGywswwJQD5tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
a8:db:9b:c1:63:c6:d1:25:dc:0d:94:f8:23:74:ee:ab:64:22:
4e:42:e0:70:7a:9d:a1:5b:b4:f7:ac:38:d9:31:5f:b6:db:d4:
c7:b0:b3:92:05:9b:5f:b8:e8:90:c7:e1:e7:9c:ac:1c:c2:85:
c8:17:0c:f8:d4:1f:e5:34:57:d5:a3:77:15:6e:72:2f:3e:ab:
f9:16:43:4e:93:e4:6a:ed:8e:39:b1:f2:a2:03:ad:f4:a6:7a:
df:c7:8c:74:6e:b0:c4:0e:23:dc:0e:df:69:78:09:f8:34:ae:
c7:9c:3b:ea:86:84:0e:3f:44:0a:cd:cd:f8:26:77:aa:42:61:
22:8d:b7:36:78:1f:82:cb:53:ed:9c:c1:d3:34:bf:67:46:72:
fb:c6:41:04:0e:dd:02:9a:8d:68:1d:c3:f4:44:13:94:d4:7d:
77:85:37:39:86:04:6e:b5:3b:f1:6c:10:39:83:20:a2:52:04:
b6:4e:ed:c3:b1:0e:d7:a5:b1:3b:c2:29:fd:fd:18:23:8a:52:
8c:05:9e:b6:5e:8f:f0:dc:59:11:b3:d5:a1:29:f5:58:aa:9e:
c5:db:5e:df:38:8d:ba:39:98:ca:a8:9f:a0:57:f9:44:8c:4f:
62:07:6b:7d:99:e6:46:5f:c8:42:8e:6c:22:51:6f:26:9b:b9:
e1:2e:3a:9d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcAty/Bq/QBlBwEPH1+HGEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI0MDUxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ZhNGI2NWEwMmExNzkxNjhjOWMzMDZjYjBiMzBjMDk0MDNlNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq17DdSKnneFR0wdICmrqZkEHhdSw
qZzxcEeNZjy+tpPoVyt6CQRV62QftM/Q4NTEOWfrSlLaLZpCMHRmk/KlZU7XcSHO
ObMbr3rzFvx9o13dqztSKl87tm5v75srMJ5NBJxQKiPmbB5qPw8h1twBnp8AMprk
zhjynOncufjNs9GSWHcvmUr2TjR/iDSCUsmahyBw2FAtPEGsmNNlEcibCnH58rAS
q3MfD/hstmRBfq07AqQIx9f4U+kagR53a+j3KP6hPxS0MiWnSSaLyMkFgBpXa4Vc
qaEHNN6ntkOxXF+fkeW467KsX2OEu9BAan3w+Xf8qoVDMkGz1gzHuG3v0wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHP6S2WgKheRaMnDBssLMMCUA+bZMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvY19wTFphQXFGNUZveWNNR3l3c3d3SlFENXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAqNubwWPG0SXcDZT4I3Tuq2Qi
TkLgcHqdoVu096w42TFfttvUx7CzkgWbX7jokMfh55ysHMKFyBcM+NQf5TRX1aN3
FW5yLz6r+RZDTpPkau2OObHyogOt9KZ638eMdG6wxA4j3A7faXgJ+DSux5w76oaE
Dj9ECs3N+CZ3qkJhIo23NngfgstT7ZzB0zS/Z0Zy+8ZBBA7dApqNaB3D9EQTlNR9
d4U3OYYEbrU78WwQOYMgolIEtk7tw7EO16WxO8Ip/f0YI4pSjAWetl6P8NxZEbPV
oSn1WKqexdte3ziNujmYyqifoFf5RIxPYgdrfZnmRl/IQo5sIlFvJpu54S46nQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:05 2025 by rpki-client