Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/d-i7draAvSRTtnXc6waiVdYiuog.roa
File: d-i7draAvSRTtnXc6waiVdYiuog.roa (raw, json)
Hash identifier: Nzi10YyavH1wjEbt3NwJGtBgfICQyYmIrniTRu9RRBM=
Subject key identifier: 77:E8:BB:76:B6:80:BD:24:53:B6:75:DC:EB:06:A2:55:D6:22:BA:88
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019706EE60E965086613B05504661EEBA3A1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/d-i7draAvSRTtnXc6waiVdYiuog.roa
Signing time: Sun 25 May 2025 10:12:54 +0000
ROA not before: Sun 25 May 2025 10:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 11:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:ee:60:e9:65:08:66:13:b0:55:04:66:1e:eb:a3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 10:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77e8bb76b680bd2453b675dceb06a255d622ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:76:89:dc:df:98:d3:38:5a:07:76:dc:85:
dd:60:34:a6:42:33:a2:eb:fe:a0:71:17:c6:a0:57:
da:93:98:f3:ae:00:0e:1c:1c:00:bd:c3:41:27:82:
7b:73:0b:e7:6e:d9:e3:bc:50:47:fc:63:f1:7d:d0:
67:98:f8:ad:25:75:a5:51:52:a9:d2:d0:41:f6:ec:
48:58:e6:76:56:3e:41:e4:50:30:69:57:b4:fe:94:
e6:ce:0d:e6:30:c3:e4:ac:3f:50:be:b0:95:6f:6b:
83:b1:3e:45:4a:23:d2:f2:f9:52:3c:33:d2:44:2a:
1b:b2:48:d7:3d:7d:57:70:a8:df:fe:ec:d4:77:c6:
26:3d:10:c6:34:3d:3b:64:57:bd:28:85:da:b0:8b:
bd:0b:57:41:e3:e3:2f:ca:2b:24:be:7d:0b:4c:4a:
5c:60:f7:ff:dc:c8:fd:ac:d5:66:1c:7d:c5:99:ab:
68:53:a7:f3:7b:47:18:b5:30:48:66:2d:b2:ab:9a:
69:ed:e6:5a:9b:c4:05:d4:54:b8:55:cf:33:67:d7:
ba:71:93:41:67:0b:ad:7f:01:c2:8b:e6:90:fc:47:
cf:44:35:8e:a6:18:e7:ce:c2:8b:c0:00:c2:44:e1:
d1:7d:01:b7:13:ef:7d:31:f8:4d:55:70:49:eb:a5:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:BB:76:B6:80:BD:24:53:B6:75:DC:EB:06:A2:55:D6:22:BA:88
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/d-i7draAvSRTtnXc6waiVdYiuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
62:ee:65:86:6e:5a:29:9d:99:f2:89:ff:de:44:db:c0:1a:80:
ea:a8:e1:7e:15:1b:28:a8:64:81:a2:00:22:3b:a9:89:79:03:
c0:d3:f9:6b:ab:71:c9:3d:0d:71:0a:9a:bc:da:60:12:c4:ed:
bb:c9:6a:9c:d1:ce:d2:f9:9e:3e:30:25:2a:f5:25:6b:c6:50:
7c:6c:aa:1b:42:60:98:21:d3:38:88:c9:3d:22:6c:81:d4:f5:
15:02:c9:eb:64:8b:c6:14:04:0f:bf:65:fc:db:07:6d:ab:df:
f1:df:92:fe:e4:c0:2a:e7:fb:c4:0f:21:b6:6e:07:77:91:45:
eb:7e:e3:be:7e:db:d6:7a:13:6d:d5:82:75:8d:96:3a:d0:92:
53:ed:d5:34:3c:6f:d6:06:17:7d:5e:e1:b5:73:3e:56:38:89:
d2:03:c5:88:c3:ae:38:9c:21:84:6f:01:fd:6e:6d:cf:15:df:
43:46:73:1a:50:6a:67:27:dc:0a:d6:66:ad:fc:e0:e6:27:bc:
0c:ec:82:bd:f3:88:0f:d3:77:e5:35:b0:d2:ac:c5:0c:35:ad:
04:c4:a8:5d:8c:f7:5c:65:fe:7e:5a:59:bd:0c:9c:7f:46:14:
40:37:14:25:c7:4c:e9:93:67:f5:dc:fe:40:94:1e:82:28:30:
ac:ab:85:d5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcG7mDpZQhmE7BVBGYe66OhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI1MTAxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2U4YmI3NmI2ODBiZDI0NTNiNjc1ZGNlYjA2YTI1NWQ2MjJiYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/l2idzfmNM4Wgd23IXdYDSmQjOi
6/6gcRfGoFfak5jzrgAOHBwAvcNBJ4J7cwvnbtnjvFBH/GPxfdBnmPitJXWlUVKp
0tBB9uxIWOZ2Vj5B5FAwaVe0/pTmzg3mMMPkrD9QvrCVb2uDsT5FSiPS8vlSPDPS
RCobskjXPX1XcKjf/uzUd8YmPRDGND07ZFe9KIXasIu9C1dB4+Mvyiskvn0LTEpc
YPf/3Mj9rNVmHH3FmatoU6fze0cYtTBIZi2yq5pp7eZam8QF1FS4Vc8zZ9e6cZNB
ZwutfwHCi+aQ/EfPRDWOphjnzsKLwADCROHRfQG3E+99MfhNVXBJ66VNSwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHfou3a2gL0kU7Z13OsGolXWIrqIMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvZC1pN2RyYUF2U1JUdG5YYzZ3YWlWZFlpdW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAYu5lhm5aKZ2Z8on/3kTbwBqA
6qjhfhUbKKhkgaIAIjupiXkDwNP5a6txyT0NcQqavNpgEsTtu8lqnNHO0vmePjAl
KvUla8ZQfGyqG0JgmCHTOIjJPSJsgdT1FQLJ62SLxhQED79l/NsHbavf8d+S/uTA
Kuf7xA8htm4Hd5FF637jvn7b1noTbdWCdY2WOtCSU+3VNDxv1gYXfV7htXM+VjiJ
0gPFiMOuOJwhhG8B/W5tzxXfQ0ZzGlBqZyfcCtZmrfzg5ie8DOyCvfOID9N35TWw
0qzFDDWtBMSoXYz3XGX+flpZvQycf0YUQDcUJcdM6ZNn9dz+QJQegigwrKuF1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:30 2025 by rpki-client