Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/py8XGOQnLHlp5lVRmjYwraGfPVo.roa
File: py8XGOQnLHlp5lVRmjYwraGfPVo.roa (raw, json)
Hash identifier: MOPlNdV59zkDDtIOcub8I42fs7Q1YYvMA/AlH5wXZ6Q=
Subject key identifier: A7:2F:17:18:E4:27:2C:79:69:E6:55:51:9A:36:30:AD:A1:9F:3D:5A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197267A3DD60C3A23B52B2ED77346E96CCC
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/py8XGOQnLHlp5lVRmjYwraGfPVo.roa
Signing time: Sat 31 May 2025 13:13:54 +0000
ROA not before: Sat 31 May 2025 13:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 14:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:7a:3d:d6:0c:3a:23:b5:2b:2e:d7:73:46:e9:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 31 13:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a72f1718e4272c7969e655519a3630ada19f3d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:03:f5:46:59:18:54:7b:64:25:e4:0e:13:
1b:fb:a3:81:c3:f3:57:98:b1:8e:2c:b4:93:b5:01:
83:ff:1f:e6:11:95:53:a5:26:55:8b:d4:28:de:ee:
56:6e:57:da:ee:4f:10:a2:08:82:c8:49:c9:d9:2e:
aa:bf:ed:9d:30:dd:b5:30:a9:16:bf:b1:d5:61:f1:
d5:44:df:a8:f1:3c:d4:da:3f:e9:73:97:7b:f9:e9:
74:53:44:77:17:20:46:5c:10:a4:00:a5:a2:a0:6a:
fb:ec:d8:c3:c6:fd:b5:a6:76:d0:58:ea:c4:25:b1:
7e:7b:f1:c1:8e:79:12:c9:17:5b:42:32:29:8f:55:
c7:3b:6f:5e:e0:ed:15:99:b1:e8:b3:79:36:c1:a8:
e7:c2:b8:9a:98:12:c3:ed:b8:fa:dd:7d:9b:e2:b3:
7d:37:f6:1b:6c:f3:1f:e8:ab:16:57:21:87:09:70:
da:25:1f:94:62:09:84:5c:3d:45:a4:d3:25:ba:51:
d3:1c:d3:64:47:2c:65:d8:3d:04:fd:c6:e4:3a:a8:
c0:0c:f1:b6:1f:eb:a3:78:a1:70:56:33:78:f5:1e:
78:f1:fa:5e:3f:1c:72:07:61:91:23:1b:f5:49:ac:
4c:b7:49:dc:60:a4:f5:65:c2:1c:32:3e:33:d1:76:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:17:18:E4:27:2C:79:69:E6:55:51:9A:36:30:AD:A1:9F:3D:5A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/py8XGOQnLHlp5lVRmjYwraGfPVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
35:0b:b5:f5:b4:f5:22:bb:85:1e:a3:09:9d:bc:5c:0f:5b:03:
35:10:57:25:6a:3a:3c:a4:19:47:18:9f:62:4b:4b:f4:93:84:
7d:a6:1b:bc:e7:e4:d3:c6:76:62:d5:a0:c5:82:14:13:55:4d:
86:72:ea:1a:eb:8a:37:5c:7d:5e:d3:10:27:0b:e5:24:74:2a:
14:06:38:a9:d0:b1:06:cf:b5:0d:dc:b8:9c:76:e8:1f:95:5b:
07:6f:30:87:f1:1b:07:e7:2c:2c:50:76:c9:3b:01:d6:0f:1f:
51:e5:14:b5:34:ae:2c:03:f5:7a:34:c5:45:da:38:69:cd:19:
12:92:57:4d:ab:8d:7c:dc:43:62:2a:a2:e8:4b:4a:de:46:da:
60:c9:9a:1a:b8:e6:07:ce:4c:51:89:a1:2f:4e:38:92:37:81:
cd:44:2b:d3:ab:12:db:f5:65:85:ca:cf:ca:4a:1b:f3:6c:eb:
67:89:e8:79:7f:7f:ed:05:50:f8:19:9b:a3:35:69:dd:8d:20:
bf:03:1d:72:70:5f:95:0e:76:76:fc:fb:b8:45:3a:d4:a6:66:
d7:e4:42:1f:a9:bd:52:03:b2:f4:ea:e2:35:56:62:83:b7:e1:
37:29:ac:3a:c0:07:9b:4e:da:bb:e5:eb:5d:a5:05:14:76:c5:
d3:cf:5e:58
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZcmej3WDDojtSsu13NG6WzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTMxMTMxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzJmMTcxOGU0MjcyYzc5NjllNjU1NTE5YTM2MzBhZGExOWYzZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXkD9UZZGFR7ZCXkDhMb+6OBw/NX
mLGOLLSTtQGD/x/mEZVTpSZVi9Qo3u5Wblfa7k8QogiCyEnJ2S6qv+2dMN21MKkW
v7HVYfHVRN+o8TzU2j/pc5d7+el0U0R3FyBGXBCkAKWioGr77NjDxv21pnbQWOrE
JbF+e/HBjnkSyRdbQjIpj1XHO29e4O0VmbHos3k2wajnwriamBLD7bj63X2b4rN9
N/YbbPMf6KsWVyGHCXDaJR+UYgmEXD1FpNMlulHTHNNkRyxl2D0E/cbkOqjADPG2
H+ujeKFwVjN49R548fpePxxyB2GRIxv1SaxMt0ncYKT1ZcIcMj4z0XZv0QIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFKcvFxjkJyx5aeZVUZo2MK2hnz1aMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvcHk4WEdPUW5MSGxwNWxWUm1qWXdyYUdmUFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQA1C7X1tPUiu4UeowmdvFwPWwM1EFclajo8pBlH
GJ9iS0v0k4R9phu85+TTxnZi1aDFghQTVU2Gcuoa64o3XH1e0xAnC+UkdCoUBjip
0LEGz7UN3LicdugflVsHbzCH8RsH5ywsUHbJOwHWDx9R5RS1NK4sA/V6NMVF2jhp
zRkSkldNq4183ENiKqLoS0reRtpgyZoauOYHzkxRiaEvTjiSN4HNRCvTqxLb9WWF
ys/KShvzbOtnieh5f3/tBVD4GZujNWndjSC/Ax1ycF+VDnZ2/Pu4RTrUpmbX5EIf
qb1SA7L06uI1VmKDt+E3Kaw6wAebTtq75etdpQUUdsXTz15Y
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:26 2025 by rpki-client