Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/raYY7O_spckmqjfTUESu0wBtbtw.roa
File: raYY7O_spckmqjfTUESu0wBtbtw.roa (raw, json)
Hash identifier: c0FyptTxvEjlhfumN09jA+vXF4q4nUMGlwH5AorThOQ=
Subject key identifier: AD:A6:18:EC:EF:EC:A5:C9:26:AA:37:D3:50:44:AE:D3:00:6D:6E:DC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F6698D4D218A3E434B36C859BE3802E3
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/raYY7O_spckmqjfTUESu0wBtbtw.roa
Signing time: Thu 22 May 2025 05:13:54 +0000
ROA not before: Thu 22 May 2025 05:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:69:8d:4d:21:8a:3e:43:4b:36:c8:59:be:38:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 05:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ada618ecefeca5c926aa37d35044aed3006d6edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:73:15:49:71:3e:2a:b2:b6:91:12:fc:74:
07:58:6c:cd:07:c1:f3:81:fc:e8:bc:c7:e0:db:d3:
20:5f:e7:d8:7f:bb:19:24:49:66:bc:de:4f:fd:45:
40:29:af:5f:20:74:ad:e0:43:6f:24:51:52:85:8e:
e3:0b:f2:6c:4c:62:4b:b8:0f:82:16:11:f7:7a:a4:
a1:1f:bc:48:10:b1:ef:99:01:5e:af:b0:3e:b4:fb:
67:61:6c:f8:7d:2e:70:2c:a7:19:ba:7c:a1:c9:9e:
66:9f:2e:92:d8:66:5d:60:af:7d:8e:37:85:ef:77:
52:14:d4:b6:96:e3:04:9c:3c:5a:1a:cb:66:c5:5e:
80:a9:a6:ef:03:ae:38:82:88:86:c5:b7:56:7f:b1:
9f:67:fe:59:6b:47:ac:8d:64:c9:45:13:eb:38:00:
1b:a4:ed:f1:6f:9e:3c:6d:78:87:f3:43:31:d3:89:
15:ee:55:82:75:d0:7b:8a:12:9a:ca:81:23:d5:e9:
69:13:8c:2e:e1:e9:98:ed:4a:7b:fe:d7:1b:b9:42:
03:d5:e3:3a:01:83:93:f0:29:e5:c7:4f:0b:3c:d8:
98:a4:4c:f5:16:8e:62:3f:37:93:af:34:67:c9:ae:
62:f3:96:3a:20:e2:42:98:76:1d:61:45:ce:80:ff:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A6:18:EC:EF:EC:A5:C9:26:AA:37:D3:50:44:AE:D3:00:6D:6E:DC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/raYY7O_spckmqjfTUESu0wBtbtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
23:07:93:af:e3:2b:bd:1a:bc:d9:b1:9b:aa:66:9a:86:85:db:
95:ed:cd:20:f7:af:0e:00:9b:59:7f:9e:f1:a2:f3:15:1b:13:
54:c3:48:ee:44:c5:c6:72:66:68:90:04:51:c4:5e:6c:c5:82:
7c:a7:d0:43:a2:13:a5:39:f0:95:61:bc:65:db:97:00:24:25:
fd:e7:a8:9b:98:1d:8a:9a:f1:dc:35:12:83:cf:d5:9d:ba:0e:
32:af:db:4d:7c:ce:39:0f:77:a1:d4:bd:5e:91:80:2e:dc:4c:
f3:f1:0b:e3:d7:f5:19:ad:a6:e6:1e:37:32:a9:48:46:c4:eb:
d3:fe:3d:f7:ee:30:30:c7:b5:1b:74:64:4a:4e:5e:7e:8e:37:
10:29:77:4e:36:12:00:0f:e9:cd:4d:e2:c0:d6:ab:3c:95:fd:
d3:6d:e7:4f:f4:95:5a:08:a1:eb:8c:83:d3:f4:68:6a:14:68:
f6:dc:53:72:c9:cd:f8:1a:c4:a1:65:83:a5:50:f4:94:81:3c:
f3:d4:c2:db:a7:31:95:15:07:15:e0:d4:01:66:7e:5f:4a:fd:
e0:c4:e9:dd:9b:b4:7b:c8:3f:a2:62:9d:ec:a9:72:75:4a:4a:
05:f9:f6:3c:e7:51:50:db:73:be:4b:33:56:04:f3:99:11:2e:
33:64:a3:bb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb2aY1NIYo+Q0s2yFm+OALjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIyMDUxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGE2MThlY2VmZWNhNWM5MjZhYTM3ZDM1MDQ0YWVkMzAwNmQ2ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DJzFUlxPiqytpES/HQHWGzNB8Hz
gfzovMfg29MgX+fYf7sZJElmvN5P/UVAKa9fIHSt4ENvJFFShY7jC/JsTGJLuA+C
FhH3eqShH7xIELHvmQFer7A+tPtnYWz4fS5wLKcZunyhyZ5mny6S2GZdYK99jjeF
73dSFNS2luMEnDxaGstmxV6AqabvA644goiGxbdWf7GfZ/5Za0esjWTJRRPrOAAb
pO3xb548bXiH80Mx04kV7lWCddB7ihKayoEj1elpE4wu4emY7Up7/tcbuUID1eM6
AYOT8Cnlx08LPNiYpEz1Fo5iPzeTrzRnya5i85Y6IOJCmHYdYUXOgP9i3wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFK2mGOzv7KXJJqo301BErtMAbW7cMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvcmFZWTdPX3NwY2ttcWpmVFVFU3Uwd0J0YnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAIweTr+MrvRq82bGbqmaahoXb
le3NIPevDgCbWX+e8aLzFRsTVMNI7kTFxnJmaJAEUcRebMWCfKfQQ6ITpTnwlWG8
ZduXACQl/eeom5gdiprx3DUSg8/VnboOMq/bTXzOOQ93odS9XpGALtxM8/EL49f1
Ga2m5h43MqlIRsTr0/499+4wMMe1G3RkSk5efo43ECl3TjYSAA/pzU3iwNarPJX9
023nT/SVWgih64yD0/RoahRo9txTcsnN+BrEoWWDpVD0lIE889TC26cxlRUHFeDU
AWZ+X0r94MTp3Zu0e8g/omKd7KlydUpKBfn2POdRUNtzvkszVgTzmREuM2Sjuw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:51 2025 by rpki-client