Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dCqC1sI0hMs2GD0RDaGqxADoLzY.roa
File: dCqC1sI0hMs2GD0RDaGqxADoLzY.roa (raw, json)
Hash identifier: gQuyGECxLKIbuTg6otpVyei9qlxE+kbXZx8ZKaUACaA=
Subject key identifier: 74:2A:82:D6:C2:34:84:CB:36:18:3D:11:0D:A1:AA:C4:00:E8:2F:36
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019738472B7A32D160A16B8F88C11CFD3665
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dCqC1sI0hMs2GD0RDaGqxADoLzY.roa
Signing time: Wed 04 Jun 2025 00:11:17 +0000
ROA not before: Wed 04 Jun 2025 00:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Jun 2025 01:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:47:2b:7a:32:d1:60:a1:6b:8f:88:c1:1c:fd:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 00:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=742a82d6c23484cb36183d110da1aac400e82f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:6e:66:19:bc:d8:80:7f:d2:ab:ed:8e:0b:
b3:50:38:07:66:52:e5:e9:93:6a:ec:96:63:b4:6c:
9d:82:b3:62:13:6d:69:43:41:ab:e8:c8:50:76:16:
61:0e:08:7d:d6:f7:a8:bb:58:37:76:30:63:9e:76:
6d:44:bb:f0:d3:4f:95:18:32:71:0e:e9:a1:d4:ee:
59:c2:36:24:5e:9c:61:f6:1e:e7:1d:f6:c9:78:d1:
ea:ec:aa:cc:9d:ce:6a:8e:71:21:4e:b8:f3:68:14:
fe:22:16:ac:93:5a:49:86:57:fe:4e:b0:15:eb:80:
48:00:45:95:83:37:79:cc:68:d4:2e:61:a0:df:cc:
76:f0:82:9c:90:ee:a6:6a:4b:9f:0d:d2:4d:16:2e:
76:58:39:62:04:35:fa:6e:b9:c9:15:84:25:8e:3e:
c2:85:53:54:54:d2:72:9e:40:f4:58:b8:4f:c4:e6:
8e:e8:60:ab:a4:e8:93:bb:3e:d5:3b:b6:fa:15:1b:
db:71:d8:ef:f4:16:e8:cd:f8:a5:43:45:67:aa:1b:
6e:69:e9:6c:ed:3d:7a:a7:59:f9:6d:de:7e:d0:c4:
7e:21:5e:84:de:50:17:9b:0b:4b:8f:3e:14:db:43:
25:69:9f:3e:0d:02:2d:6f:0f:08:c8:09:48:5d:76:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:82:D6:C2:34:84:CB:36:18:3D:11:0D:A1:AA:C4:00:E8:2F:36
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dCqC1sI0hMs2GD0RDaGqxADoLzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
a7:ff:fa:a8:78:b2:a4:82:3d:3c:a6:73:cb:65:eb:f4:d8:79:
5d:18:0f:8d:e2:6d:d3:5a:d3:ec:f2:33:71:a0:1b:7f:0f:8e:
46:c0:ba:a8:92:5a:9b:e2:cb:4f:c0:cb:ef:1e:41:68:8b:fa:
8c:02:dd:60:40:2f:cd:78:35:45:1e:0d:f7:05:a3:5e:93:b8:
1c:c2:f1:19:0d:62:7a:67:7b:15:26:3a:14:e6:0a:af:e6:f5:
02:58:c3:69:3a:55:e9:dd:34:b7:8d:5e:6c:5e:97:bb:32:f6:
0f:ae:d1:44:26:6c:34:df:50:97:91:05:b1:ba:f3:1b:f0:39:
9f:67:b8:e1:15:27:37:35:16:ec:03:c8:d2:f7:c6:ee:b3:47:
e4:33:a0:11:9a:fc:77:00:37:04:65:ae:b3:7f:19:54:cf:48:
46:b6:62:49:81:bc:a7:d0:06:bc:69:da:e6:ed:d4:85:c9:24:
ae:3d:c2:a8:f9:0d:12:9a:83:2f:6f:6f:1c:70:b7:b4:ef:5e:
7c:54:2f:fb:5f:70:8c:96:96:d7:4c:4a:2e:ca:00:59:b4:0b:
51:37:c0:8c:0d:ec:8f:8f:23:fd:28:d7:66:0c:09:d5:0b:3c:
42:51:98:21:26:42:b0:78:da:ac:b3:28:e6:0a:dd:97:ee:03:
22:07:da:75
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZc4Ryt6MtFgoWuPiMEc/TZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA0MDAxMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDJhODJkNmMyMzQ4NGNiMzYxODNkMTEwZGExYWFjNDAwZTgyZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokxuZhm82IB/0qvtjguzUDgHZlLl
6ZNq7JZjtGydgrNiE21pQ0Gr6MhQdhZhDgh91veou1g3djBjnnZtRLvw00+VGDJx
Dumh1O5ZwjYkXpxh9h7nHfbJeNHq7KrMnc5qjnEhTrjzaBT+Ihask1pJhlf+TrAV
64BIAEWVgzd5zGjULmGg38x28IKckO6makufDdJNFi52WDliBDX6brnJFYQljj7C
hVNUVNJynkD0WLhPxOaO6GCrpOiTuz7VO7b6FRvbcdjv9BbozfilQ0Vnqhtuaels
7T16p1n5bd5+0MR+IV6E3lAXmwtLjz4U20MlaZ8+DQItbw8IyAlIXXYG0QIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHQqgtbCNITLNhg9EQ2hqsQA6C82MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvZENxQzFzSTBoTXMyR0QwUkRhR3F4QURvTHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAp//6qHiypII9
PKZzy2Xr9Nh5XRgPjeJt01rT7PIzcaAbfw+ORsC6qJJam+LLT8DL7x5BaIv6jALd
YEAvzXg1RR4N9wWjXpO4HMLxGQ1iemd7FSY6FOYKr+b1AljDaTpV6d00t41ebF6X
uzL2D67RRCZsNN9Ql5EFsbrzG/A5n2e44RUnNzUW7API0vfG7rNH5DOgEZr8dwA3
BGWus38ZVM9IRrZiSYG8p9AGvGna5u3Uhckkrj3CqPkNEpqDL29vHHC3tO9efFQv
+19wjJaW10xKLsoAWbQLUTfAjA3sj48j/SjXZgwJ1Qs8QlGYISZCsHjarLMo5grd
l+4DIgfadQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:29 2025 by rpki-client