Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cvrlVUMLwZAXYHx-rArW3lDYdkU.roa
File: cvrlVUMLwZAXYHx-rArW3lDYdkU.roa (raw, json)
Hash identifier: 8ibHU1Ksqq8zpP4kzx1uaY+F3CHbFX/di2/nyxg2bK0=
Subject key identifier: 72:FA:E5:55:43:0B:C1:90:17:60:7C:7E:AC:0A:D6:DE:50:D8:76:45
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019704C90FC785EBA13A585874ABF1F6355E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cvrlVUMLwZAXYHx-rArW3lDYdkU.roa
Signing time: Sun 25 May 2025 00:12:54 +0000
ROA not before: Sun 25 May 2025 00:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 01:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:c9:0f:c7:85:eb:a1:3a:58:58:74:ab:f1:f6:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 00:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72fae555430bc19017607c7eac0ad6de50d87645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:dd:7d:37:37:52:fb:35:d2:39:6e:1a:c0:
cb:a9:59:46:5b:2a:0a:a1:ff:f7:40:c4:69:65:5e:
73:8c:db:4d:63:b4:b3:c1:37:d7:cc:8e:87:9e:4c:
46:f0:9d:04:af:97:e7:64:8b:9f:16:dd:6c:79:e4:
aa:63:da:1d:c7:7a:0d:1c:70:83:dc:f4:1e:f7:e7:
29:5f:fe:9f:ad:5c:be:05:ea:8c:55:e4:c6:31:08:
e1:d5:58:89:b9:60:75:6d:a7:42:55:10:c2:6e:86:
c4:42:01:f3:d5:a7:50:da:2f:cd:a3:f1:e4:de:9a:
f4:f9:68:e2:b8:dd:28:6d:8a:95:55:ae:e5:c6:c6:
63:5c:73:32:99:ed:06:eb:13:74:9f:9a:c8:a9:f7:
36:fe:fd:f0:d4:61:39:f3:a2:c1:30:39:fe:21:7f:
26:08:95:56:59:e3:ba:32:3a:b6:9d:3c:4e:2f:d2:
79:c4:7d:60:e4:33:bc:3b:91:ca:fe:48:47:a2:86:
88:75:1c:39:9b:81:2c:ef:ed:a6:e0:44:f1:fa:9d:
c5:06:89:e0:51:02:1f:14:be:15:3c:1b:52:71:e8:
20:79:54:98:c5:9b:38:61:49:27:cd:ff:bb:61:09:
17:4d:d4:6d:23:76:96:a5:a7:28:40:4e:52:8e:12:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:E5:55:43:0B:C1:90:17:60:7C:7E:AC:0A:D6:DE:50:D8:76:45
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/cvrlVUMLwZAXYHx-rArW3lDYdkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
34:93:fd:d8:c9:aa:aa:29:b0:ca:a2:b7:fb:2d:8f:66:dd:54:
c3:8b:4f:83:68:09:9c:4f:da:3a:1f:d8:67:c4:c0:30:eb:26:
f8:d3:c8:59:f0:45:df:c1:21:71:0f:b3:79:0d:08:ee:09:ac:
87:61:d3:c6:fa:5b:06:2b:e5:0c:74:06:11:fe:19:98:22:53:
00:bf:40:42:ae:b6:85:22:c1:f7:0d:eb:79:d6:c6:ec:ac:01:
0e:11:94:8f:48:04:e9:4e:50:f6:cb:18:5e:83:e8:d5:f7:b8:
00:ac:5d:7c:f7:ad:c4:14:66:76:e7:94:24:b6:17:b8:77:79:
d3:5f:3e:d6:54:3d:9c:7b:2c:77:8e:67:b7:1c:72:99:e1:ed:
4d:b8:12:fb:e3:ce:b9:f4:a1:f5:5c:93:a1:2b:a2:2b:2e:38:
e1:00:1d:fe:7a:d4:46:76:40:41:7f:19:8e:4a:c9:c8:3e:b1:
3d:63:c3:c1:38:f2:c4:21:e7:75:a2:27:04:cf:47:b3:c3:3b:
22:fc:49:d7:48:29:f6:63:87:7e:25:da:71:44:1c:bd:f7:16:
4f:fd:f2:a2:90:2b:22:4d:48:ff:58:0e:8d:0e:b5:06:5d:51:
ab:4a:8e:2f:b3:4c:10:ce:4a:dd:cc:9e:bd:44:68:ba:84:d8:
01:bc:ab:5c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcEyQ/HheuhOlhYdKvx9jVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI1MDAxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmZhZTU1NTQzMGJjMTkwMTc2MDdjN2VhYzBhZDZkZTUwZDg3NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvprdfTc3Uvs10jluGsDLqVlGWyoK
of/3QMRpZV5zjNtNY7SzwTfXzI6HnkxG8J0Er5fnZIufFt1seeSqY9odx3oNHHCD
3PQe9+cpX/6frVy+BeqMVeTGMQjh1ViJuWB1badCVRDCbobEQgHz1adQ2i/No/Hk
3pr0+WjiuN0obYqVVa7lxsZjXHMyme0G6xN0n5rIqfc2/v3w1GE586LBMDn+IX8m
CJVWWeO6Mjq2nTxOL9J5xH1g5DO8O5HK/khHooaIdRw5m4Es7+2m4ETx+p3FBong
UQIfFL4VPBtSceggeVSYxZs4YUknzf+7YQkXTdRtI3aWpacoQE5SjhJpwQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHL65VVDC8GQF2B8fqwK1t5Q2HZFMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvY3ZybFZVTUx3WkFYWUh4LXJBclczbERZZGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEANJP92MmqqimwyqK3+y2PZt1U
w4tPg2gJnE/aOh/YZ8TAMOsm+NPIWfBF38EhcQ+zeQ0I7gmsh2HTxvpbBivlDHQG
Ef4ZmCJTAL9AQq62hSLB9w3redbG7KwBDhGUj0gE6U5Q9ssYXoPo1fe4AKxdfPet
xBRmdueUJLYXuHd5018+1lQ9nHssd45ntxxymeHtTbgS++POufSh9VyToSuiKy44
4QAd/nrURnZAQX8ZjkrJyD6xPWPDwTjyxCHndaInBM9Hs8M7IvxJ10gp9mOHfiXa
cUQcvfcWT/3yopArIk1I/1gOjQ61Bl1Rq0qOL7NMEM5K3cyevURouoTYAbyrXA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:24 2025 by rpki-client