Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc9mliQXllQtr1vqzAU2q_RuvxE.roa
File: pc9mliQXllQtr1vqzAU2q_RuvxE.roa (raw, json)
Hash identifier: HmzoaIzXeeWNM8fqKizxCq+Tfylr9eo7yaOsSTyE2q0=
Subject key identifier: A5:CF:66:96:24:17:96:54:2D:AF:5B:EA:CC:05:36:AB:F4:6E:BF:11
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F8FBD159331D54A2FE767C815B7560F9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc9mliQXllQtr1vqzAU2q_RuvxE.roa
Signing time: Thu 22 May 2025 17:12:54 +0000
ROA not before: Thu 22 May 2025 17:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 18:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:fb:d1:59:33:1d:54:a2:fe:76:7c:81:5b:75:60:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 17:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cf6696241796542daf5beacc0536abf46ebf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:b9:c9:9b:00:54:3d:ca:a1:d5:d4:98:b1:
ef:36:c9:3a:73:1c:83:66:b4:6b:9e:6d:b9:88:ea:
14:90:02:07:9b:ce:52:dd:31:60:68:ba:44:43:26:
a7:9a:c3:13:11:2a:d8:d4:2d:b6:58:77:70:a6:d9:
3f:b0:8c:a2:99:8b:73:99:e2:40:d2:9f:bb:80:20:
d4:cf:d6:f5:e4:a8:d7:5c:11:83:f7:44:41:b2:f1:
58:ec:ca:c8:d9:cc:32:6b:ec:a1:d3:55:d9:33:34:
1b:c3:f4:07:1e:cf:a6:cd:31:f2:2a:f5:0c:40:1d:
23:60:78:0d:65:a8:f1:c9:b3:37:ba:be:19:a1:41:
9a:58:f3:06:42:9a:6a:47:cc:49:97:75:b2:59:06:
fa:3b:a4:24:f5:65:82:54:87:f7:94:bf:2b:93:bc:
78:21:67:bc:ad:a1:90:c9:b5:3d:66:33:4f:94:57:
88:34:8e:84:2a:13:a0:d8:15:ab:ae:44:96:d0:0a:
9e:2d:07:71:66:3f:0a:06:5c:9e:1a:e2:e6:2d:92:
b4:8a:b0:6b:a2:28:d7:87:e5:44:19:5c:5d:f1:f0:
37:55:67:19:a7:0d:8b:5a:fb:e2:0e:b1:c7:26:2a:
76:51:e7:25:6e:3a:d3:50:e7:b8:73:9c:88:8e:f0:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:66:96:24:17:96:54:2D:AF:5B:EA:CC:05:36:AB:F4:6E:BF:11
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pc9mliQXllQtr1vqzAU2q_RuvxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
87:ed:51:1f:8e:de:65:4f:55:09:1f:6a:d6:a1:3f:a8:42:65:
f0:0d:a7:c1:48:a9:3f:08:f0:34:57:bb:67:6a:ef:34:4f:71:
37:16:c9:50:c7:d3:da:3e:4e:57:bc:cc:6f:91:f4:9c:e7:ab:
de:a0:ff:1e:91:4e:19:d1:34:24:90:cc:a0:44:3b:3b:76:00:
56:30:3e:50:0b:2e:4f:84:2f:0e:43:23:3d:8c:38:f3:b4:2a:
13:70:83:7b:97:ca:44:0e:3d:93:b9:2c:19:e4:06:c2:31:2c:
85:39:dd:da:af:f3:37:28:4d:e4:11:4a:df:a4:85:f6:1f:e3:
0d:31:12:de:37:76:32:29:35:28:5a:29:02:de:8f:ff:3f:43:
2f:62:0a:18:00:73:09:b8:ec:70:36:c2:12:b2:59:c0:27:c8:
cf:65:ce:77:e5:e5:9a:36:12:ea:dd:da:1c:27:8c:de:fa:a3:
14:de:da:ac:dc:a1:ca:3b:25:31:2e:0e:f9:b4:d0:10:1a:e7:
01:af:6d:3b:7d:18:8c:3e:bc:34:71:54:dc:f1:30:ff:e0:27:
25:ee:2d:2f:6d:1b:40:a5:18:d0:8a:ee:4f:98:e1:40:95:90:
9c:89:49:9f:25:12:af:7d:ba:5c:fd:93:8e:5f:37:a1:26:c2:
79:ba:8f:c1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb4+9FZMx1Uov52fIFbdWD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIyMTcxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWNmNjY5NjI0MTc5NjU0MmRhZjViZWFjYzA1MzZhYmY0NmViZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUq5yZsAVD3KodXUmLHvNsk6cxyD
ZrRrnm25iOoUkAIHm85S3TFgaLpEQyanmsMTESrY1C22WHdwptk/sIyimYtzmeJA
0p+7gCDUz9b15KjXXBGD90RBsvFY7MrI2cwya+yh01XZMzQbw/QHHs+mzTHyKvUM
QB0jYHgNZajxybM3ur4ZoUGaWPMGQppqR8xJl3WyWQb6O6Qk9WWCVIf3lL8rk7x4
IWe8raGQybU9ZjNPlFeINI6EKhOg2BWrrkSW0AqeLQdxZj8KBlyeGuLmLZK0irBr
oijXh+VEGVxd8fA3VWcZpw2LWvviDrHHJip2UeclbjrTUOe4c5yIjvBWkQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKXPZpYkF5ZULa9b6swFNqv0br8RMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvcGM5bWxpUVhsbFF0cjF2cXpBVTJxX1J1dnhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAh+1RH47eZU9VCR9q1qE/qEJl
8A2nwUipPwjwNFe7Z2rvNE9xNxbJUMfT2j5OV7zMb5H0nOer3qD/HpFOGdE0JJDM
oEQ7O3YAVjA+UAsuT4QvDkMjPYw487QqE3CDe5fKRA49k7ksGeQGwjEshTnd2q/z
NyhN5BFK36SF9h/jDTES3jd2Mik1KFopAt6P/z9DL2IKGABzCbjscDbCErJZwCfI
z2XOd+XlmjYS6t3aHCeM3vqjFN7arNyhyjslMS4O+bTQEBrnAa9tO30YjD68NHFU
3PEw/+AnJe4tL20bQKUY0IruT5jhQJWQnIlJnyUSr326XP2Tjl83oSbCebqPwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:13:35 2025 by rpki-client