Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/f9_-C1PjrQsnU_qGWnnv2jylrAY.roa
File: f9_-C1PjrQsnU_qGWnnv2jylrAY.roa (raw, json)
Hash identifier: Vo7WbASD4NRpCHtzAXeWSY3JySReg4KAhs9Fe2TZckQ=
Subject key identifier: 7F:DF:FE:0B:53:E3:AD:0B:27:53:FA:86:5A:79:EF:DA:3C:A5:AC:06
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970C4C9533E6C132F006A9FE819ABEBFC8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/f9_-C1PjrQsnU_qGWnnv2jylrAY.roa
Signing time: Mon 26 May 2025 11:13:54 +0000
ROA not before: Mon 26 May 2025 11:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 12:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:4c:95:33:e6:c1:32:f0:06:a9:fe:81:9a:be:bf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 11:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdffe0b53e3ad0b2753fa865a79efda3ca5ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:35:54:c4:a4:84:7a:95:67:79:cc:94:89:
f4:f9:b3:f7:6f:e3:65:6e:48:6c:ba:e9:34:e0:fa:
cb:66:ef:15:9b:9f:58:28:24:65:f3:a8:f9:16:8c:
08:fd:b2:11:17:98:23:83:37:37:21:fd:42:9a:dd:
a1:62:26:0e:f9:3d:00:24:b6:92:7b:88:41:1d:fe:
72:3d:4e:41:fc:01:25:ee:99:c4:e4:48:03:21:ab:
81:7c:d0:ef:85:c0:ad:3a:b8:99:e2:07:93:2a:50:
31:40:87:3c:09:77:58:f7:37:e5:ff:dc:30:56:0c:
2f:b7:4b:e0:0b:29:16:ba:a7:a9:18:92:04:59:ff:
b4:d2:06:87:e8:b8:10:79:e9:a6:d2:20:d1:94:89:
c5:69:fa:56:96:aa:e9:e7:82:c3:32:7f:82:6f:2a:
2c:66:d3:92:15:bb:a8:f7:03:49:a1:1a:9c:98:aa:
4a:5b:bd:d4:15:4a:1c:d9:4d:f6:13:a1:06:93:3e:
9a:f3:42:34:43:c0:b4:d4:51:7b:65:44:ad:f2:c5:
35:db:cc:bc:d9:cc:d2:52:70:91:46:68:a7:8e:d3:
10:ec:72:f6:74:89:49:2c:1d:2c:7d:f3:3e:3e:d8:
fc:a5:57:43:a3:36:1b:ac:09:2e:97:09:26:3b:7b:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:FE:0B:53:E3:AD:0B:27:53:FA:86:5A:79:EF:DA:3C:A5:AC:06
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/f9_-C1PjrQsnU_qGWnnv2jylrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
41:07:5c:84:38:d2:22:ca:75:c7:5b:83:4f:92:67:ae:aa:47:
59:aa:58:01:1c:62:b1:51:2f:1f:5c:0b:da:ea:29:4a:08:1d:
76:34:89:93:6a:97:07:66:e0:ee:c6:24:07:c0:4a:be:6f:d8:
d6:78:06:4b:0a:16:d5:ec:b7:b3:42:e5:27:a6:a9:1e:e6:fe:
e1:45:de:e2:50:97:9e:ca:22:24:05:12:c8:5b:e5:5a:2e:4a:
85:6a:0d:b3:ed:6b:75:9b:8d:b2:a5:b8:99:14:b4:b5:0e:70:
7d:e5:18:c2:85:b3:29:0f:44:eb:81:86:24:86:6a:dc:ec:50:
2e:1b:1d:ad:60:d3:5a:ff:22:e1:af:9f:a8:f8:1f:9b:57:fd:
88:b3:3f:dd:b7:7a:f6:bb:f0:13:12:1b:75:70:3a:0f:2a:33:
ec:b4:9c:d1:75:c6:b4:a5:a3:f2:b2:2d:0e:25:46:89:84:dc:
b8:c6:fa:fe:d1:48:13:a3:d7:86:cb:89:64:08:98:04:e6:2a:
c1:7c:ca:25:ec:f0:60:35:50:50:23:f7:c9:24:e0:37:4a:5d:
f4:73:ba:8e:68:ed:e3:ee:c2:9b:6d:ff:6d:57:71:db:d0:33:
ba:0b:4a:08:94:ca:71:d3:b5:9a:30:40:72:3a:f0:41:74:fd:
38:8d:ff:38
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcMTJUz5sEy8Aap/oGavr/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI2MTExMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmRmZmUwYjUzZTNhZDBiMjc1M2ZhODY1YTc5ZWZkYTNjYTVhYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/A1VMSkhHqVZ3nMlIn0+bP3b+Nl
bkhsuuk04PrLZu8Vm59YKCRl86j5FowI/bIRF5gjgzc3If1Cmt2hYiYO+T0AJLaS
e4hBHf5yPU5B/AEl7pnE5EgDIauBfNDvhcCtOriZ4geTKlAxQIc8CXdY9zfl/9ww
Vgwvt0vgCykWuqepGJIEWf+00gaH6LgQeemm0iDRlInFafpWlqrp54LDMn+Cbyos
ZtOSFbuo9wNJoRqcmKpKW73UFUoc2U32E6EGkz6a80I0Q8C01FF7ZUSt8sU128y8
2czSUnCRRminjtMQ7HL2dIlJLB0sffM+Ptj8pVdDozYbrAkulwkmO3u3xQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFH/f/gtT460LJ1P6hlp579o8pawGMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvZjlfLUMxUGpyUXNuVV9xR1dubnYyanlsckFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAQQdchDjSIsp1x1uDT5JnrqpH
WapYARxisVEvH1wL2uopSggddjSJk2qXB2bg7sYkB8BKvm/Y1ngGSwoW1ey3s0Ll
J6apHub+4UXe4lCXnsoiJAUSyFvlWi5KhWoNs+1rdZuNsqW4mRS0tQ5wfeUYwoWz
KQ9E64GGJIZq3OxQLhsdrWDTWv8i4a+fqPgfm1f9iLM/3bd69rvwExIbdXA6Dyoz
7LSc0XXGtKWj8rItDiVGiYTcuMb6/tFIE6PXhsuJZAiYBOYqwXzKJezwYDVQUCP3
ySTgN0pd9HO6jmjt4+7Cm23/bVdx29AzugtKCJTKcdO1mjBAcjrwQXT9OI3/OA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:26 2025 by rpki-client