Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mepNNnQkXvi4YrWnE-ddMPZSQPQ.roa
File: mepNNnQkXvi4YrWnE-ddMPZSQPQ.roa (raw, json)
Hash identifier: RhppIitOOUN6pCeaTZE84QbXx6vFVWE5ga37IOoAN5Q=
Subject key identifier: 99:EA:4D:36:74:24:5E:F8:B8:62:B5:A7:13:E7:5D:30:F6:52:40:F4
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019736C9680AF0E240EB131DEA705466B599
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mepNNnQkXvi4YrWnE-ddMPZSQPQ.roa
Signing time: Tue 03 Jun 2025 17:14:18 +0000
ROA not before: Tue 03 Jun 2025 17:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:c9:68:0a:f0:e2:40:eb:13:1d:ea:70:54:66:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 17:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ea4d3674245ef8b862b5a713e75d30f65240f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:58:ce:d4:9f:56:c8:fc:85:ec:16:ec:1f:
62:79:7a:8f:08:2c:a3:86:79:42:a8:2c:7c:92:76:
1c:70:cf:9e:e4:8c:f6:3f:20:61:02:6c:5e:4c:ae:
5d:00:eb:30:64:15:51:65:43:76:62:92:0f:ae:9b:
93:92:c7:18:5a:35:a2:02:77:20:ca:38:35:71:e7:
c2:cf:dd:5e:2a:dc:d6:76:1e:80:e2:7d:09:b9:59:
93:c9:f9:b9:8f:be:84:d9:2a:92:4d:b4:2d:d5:5a:
3d:df:b6:0c:93:6c:b2:d4:f2:7a:70:b8:52:3a:ba:
ce:e6:54:23:5e:eb:d2:11:98:a0:fe:67:31:08:f5:
d6:02:18:74:3c:5d:7c:3e:4c:f2:f7:7e:3d:16:a0:
98:8b:d1:eb:81:8f:6c:ee:ef:bb:76:06:15:2a:06:
33:01:24:c7:3c:b5:87:71:80:ba:36:c4:e6:14:9e:
9b:a1:e9:ad:20:4c:8f:72:96:74:0b:96:ff:ab:c5:
73:bf:02:79:09:7b:d6:b3:ae:90:1f:3d:76:48:89:
d4:56:52:d6:83:fc:89:58:7f:88:31:f1:5d:a4:da:
2d:15:88:bc:d1:bd:2d:72:1a:ad:4b:19:06:6f:87:
e3:73:d8:07:ab:5f:c5:03:71:55:37:02:7c:ca:bf:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:4D:36:74:24:5E:F8:B8:62:B5:A7:13:E7:5D:30:F6:52:40:F4
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mepNNnQkXvi4YrWnE-ddMPZSQPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
43:8a:59:86:d3:1e:f2:42:8c:80:10:93:cb:7e:49:45:d8:65:
ee:66:12:63:d9:fb:45:81:12:d7:f4:5c:79:1c:ba:7f:66:ce:
59:2b:12:92:dd:39:4d:34:4e:e5:a1:09:ad:5d:b3:cd:62:57:
55:a3:10:06:05:ae:76:38:34:93:34:f9:0a:93:5e:73:ac:80:
07:79:70:58:c1:ac:4f:ad:d5:3d:23:4b:8c:2c:f0:c7:e6:48:
ab:7c:90:c8:0e:5a:81:f5:96:8b:b6:2a:0e:15:44:31:d2:6c:
31:01:ce:0a:dd:00:5f:fe:c4:7a:e0:c2:2f:6a:4f:66:cf:47:
67:b9:51:f7:20:e8:5a:60:d4:27:56:ac:d0:d5:b7:27:0d:ed:
9d:02:07:e4:35:03:67:41:35:0d:bb:06:1f:39:5b:82:8e:a5:
3a:c2:da:c8:f1:12:f6:0a:07:cb:c5:02:d5:2e:36:39:7d:67:
d0:e5:6c:5d:a9:b5:86:94:d1:18:4f:b6:de:a1:17:b9:32:5b:
e4:6b:8a:9f:08:d9:48:c2:0a:77:ee:9d:b9:12:a8:16:de:fe:
6a:ee:85:d4:48:1f:e1:a1:a5:28:9a:ce:d1:27:21:c4:a2:88:
08:46:33:24:e8:e8:d7:ae:af:c8:fb:ad:32:32:77:38:22:ba:
e9:f1:b5:fd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZc2yWgK8OJA6xMd6nBUZrWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjAzMTcxNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWVhNGQzNjc0MjQ1ZWY4Yjg2MmI1YTcxM2U3NWQzMGY2NTI0MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlstYztSfVsj8hewW7B9ieXqPCCyj
hnlCqCx8knYccM+e5Iz2PyBhAmxeTK5dAOswZBVRZUN2YpIPrpuTkscYWjWiAncg
yjg1cefCz91eKtzWdh6A4n0JuVmTyfm5j76E2SqSTbQt1Vo937YMk2yy1PJ6cLhS
OrrO5lQjXuvSEZig/mcxCPXWAhh0PF18Pkzy9349FqCYi9HrgY9s7u+7dgYVKgYz
ASTHPLWHcYC6NsTmFJ6boemtIEyPcpZ0C5b/q8VzvwJ5CXvWs66QHz12SInUVlLW
g/yJWH+IMfFdpNotFYi80b0tchqtSxkGb4fjc9gHq1/FA3FVNwJ8yr+o/QIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFJnqTTZ0JF74uGK1pxPnXTD2UkD0MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvbWVwTk5uUWtYdmk0WXJXbkUtZGRNUFpTUVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAQ4pZhtMe8kKM
gBCTy35JRdhl7mYSY9n7RYES1/RceRy6f2bOWSsSkt05TTRO5aEJrV2zzWJXVaMQ
BgWudjg0kzT5CpNec6yAB3lwWMGsT63VPSNLjCzwx+ZIq3yQyA5agfWWi7YqDhVE
MdJsMQHOCt0AX/7EeuDCL2pPZs9HZ7lR9yDoWmDUJ1as0NW3Jw3tnQIH5DUDZ0E1
DbsGHzlbgo6lOsLayPES9goHy8UC1S42OX1n0OVsXam1hpTRGE+23qEXuTJb5GuK
nwjZSMIKd+6duRKoFt7+au6F1Egf4aGlKJrO0SchxKKICEYzJOjo166vyPutMjJ3
OCK66fG1/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:43 2025 by rpki-client