Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sL-FNKoFebXRawkHJ0LAw9YMxxQ.roa
File: sL-FNKoFebXRawkHJ0LAw9YMxxQ.roa (raw, json)
Hash identifier: dJ2cx+KlM+vAyWDC3CM38P7iJdeGpTaCN4KRm7sGTGg=
Subject key identifier: B0:BF:85:34:AA:05:79:B5:D1:6B:09:07:27:42:C0:C3:D6:0C:C7:14
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FDB4511D53CE077FF7391413D7C42B9E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sL-FNKoFebXRawkHJ0LAw9YMxxQ.roa
Signing time: Fri 23 May 2025 15:12:54 +0000
ROA not before: Fri 23 May 2025 15:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 16:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:b4:51:1d:53:ce:07:7f:f7:39:14:13:d7:c4:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 15:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0bf8534aa0579b5d16b09072742c0c3d60cc714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:03:23:8d:7f:33:a7:bf:2d:46:a1:4c:4c:
00:e5:c7:04:13:9b:ea:bc:7c:fc:31:15:9d:0a:b8:
1c:82:db:0f:b4:65:13:9d:c1:41:c0:75:ad:f9:93:
83:be:7e:27:08:1b:26:1a:c6:08:7c:b0:18:00:77:
0c:a2:b4:36:7a:44:ab:6c:3b:be:93:61:42:67:83:
c4:89:c8:eb:96:64:ae:99:ef:66:f2:88:46:a2:ef:
2b:97:92:31:bc:98:4f:bf:08:b4:a0:a5:7f:fc:1b:
5c:0a:90:19:86:80:8e:a7:68:68:a2:b4:81:7a:d2:
63:fc:a4:a9:16:cc:d8:10:2e:32:29:cc:45:6c:7f:
c4:73:92:cc:12:9b:09:e0:c3:bd:0b:9b:08:5f:4e:
9b:4b:80:e5:b3:8a:e4:2b:6a:f4:63:75:ca:15:bc:
fe:f8:20:c6:05:a2:93:d8:8c:a5:36:ea:5f:22:a6:
42:21:09:15:41:53:32:1b:49:a4:95:15:de:fc:40:
c8:4e:41:a2:96:6f:68:72:59:f1:c1:8b:28:a0:b7:
28:ea:03:33:46:2a:5b:70:3b:db:1e:6b:7a:05:2c:
e1:c7:9c:87:58:d7:bc:3e:9a:17:93:04:9d:d9:cf:
56:5c:52:30:67:36:02:8a:6d:56:e6:d7:b9:27:b7:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BF:85:34:AA:05:79:B5:D1:6B:09:07:27:42:C0:C3:D6:0C:C7:14
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sL-FNKoFebXRawkHJ0LAw9YMxxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
12:ce:6c:b8:03:0e:92:2e:0c:ef:1c:ad:4c:96:97:53:1b:82:
d3:04:3a:3c:7a:3c:b6:fb:3e:cf:bd:85:91:0e:0c:0b:c1:9e:
cb:79:5f:5a:5f:6c:19:fc:95:20:e9:5c:7c:ee:58:8e:81:bf:
fb:a4:db:75:d3:45:3d:9f:02:c1:a2:05:5a:da:3a:5e:95:40:
21:42:af:0f:bc:b2:67:01:9d:68:17:d7:32:5e:86:4b:5e:b6:
4a:f9:2d:b0:e4:93:e9:4f:c5:12:03:30:aa:c2:df:93:38:35:
1f:2d:9f:88:a8:56:e9:4d:b7:1e:a2:d3:c3:0d:71:22:0f:6a:
8f:16:f2:b1:cd:ee:aa:03:0d:8b:70:29:a3:56:4f:7f:12:ee:
d1:3b:b3:19:ae:47:78:17:8a:b7:f3:15:b0:41:84:9d:55:61:
eb:30:78:bc:69:3f:a6:fa:35:c0:61:f1:66:68:81:9c:4a:4e:
7d:83:92:18:3d:83:4d:db:0b:d1:05:33:b7:e4:1d:4b:c0:00:
5a:e2:a9:66:02:26:a8:0e:55:ed:f3:0e:8f:0b:fc:e8:cf:6d:
94:ca:fa:ed:7a:bc:37:1e:60:1b:7e:eb:51:e9:ea:26:e5:d8:
10:e1:26:2c:85:75:ca:ea:c7:88:26:1d:c8:4a:0a:d4:fe:38:
a6:bd:c0:83
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb9tFEdU84Hf/c5FBPXxCueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIzMTUxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGJmODUzNGFhMDU3OWI1ZDE2YjA5MDcyNzQyYzBjM2Q2MGNjNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUcDI41/M6e/LUahTEwA5ccEE5vq
vHz8MRWdCrgcgtsPtGUTncFBwHWt+ZODvn4nCBsmGsYIfLAYAHcMorQ2ekSrbDu+
k2FCZ4PEicjrlmSume9m8ohGou8rl5IxvJhPvwi0oKV//BtcCpAZhoCOp2hoorSB
etJj/KSpFszYEC4yKcxFbH/Ec5LMEpsJ4MO9C5sIX06bS4Dls4rkK2r0Y3XKFbz+
+CDGBaKT2IylNupfIqZCIQkVQVMyG0mklRXe/EDITkGilm9oclnxwYsooLco6gMz
RipbcDvbHmt6BSzhx5yHWNe8PpoXkwSd2c9WXFIwZzYCim1W5te5J7fHrwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLC/hTSqBXm10WsJBydCwMPWDMcUMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvc0wtRk5Lb0ZlYlhSYXdrSEowTEF3OVlNeHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAEs5suAMOki4M7xytTJaXUxuC
0wQ6PHo8tvs+z72FkQ4MC8Gey3lfWl9sGfyVIOlcfO5YjoG/+6TbddNFPZ8CwaIF
Wto6XpVAIUKvD7yyZwGdaBfXMl6GS162SvktsOST6U/FEgMwqsLfkzg1Hy2fiKhW
6U23HqLTww1xIg9qjxbysc3uqgMNi3Apo1ZPfxLu0TuzGa5HeBeKt/MVsEGEnVVh
6zB4vGk/pvo1wGHxZmiBnEpOfYOSGD2DTdsL0QUzt+QdS8AAWuKpZgImqA5V7fMO
jwv86M9tlMr67Xq8Nx5gG37rUenqJuXYEOEmLIV1yurHiCYdyEoK1P44pr3Agw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:05 2025 by rpki-client