Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sMvXQjOqp_UUyJ0-TrSjQZngykI.roa
File: sMvXQjOqp_UUyJ0-TrSjQZngykI.roa (raw, json)
Hash identifier: 8i3V9O42KldWJ0vTXfTtvrShMiRFlaUdt3hgn8vGxLs=
Subject key identifier: B0:CB:D7:42:33:AA:A7:F5:14:C8:9D:3E:4E:B4:A3:41:99:E0:CA:42
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FFDD4B4E5C4D97C2FB4795D8601CB1A8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sMvXQjOqp_UUyJ0-TrSjQZngykI.roa
Signing time: Sat 24 May 2025 01:16:54 +0000
ROA not before: Sat 24 May 2025 01:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 02:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ff:dd:4b:4e:5c:4d:97:c2:fb:47:95:d8:60:1c:b1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 01:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0cbd74233aaa7f514c89d3e4eb4a34199e0ca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:87:47:de:6b:55:6c:37:5b:9a:03:61:8a:
1e:c3:e4:88:f2:aa:17:4e:56:43:0b:e8:d7:34:75:
cc:bc:e5:b5:5c:46:3a:9f:9d:17:64:60:95:7d:2d:
bb:44:e8:e6:36:9f:b7:68:85:3f:63:75:67:6a:8f:
dd:ce:52:3a:42:57:a1:c0:14:d1:3f:6c:16:f1:02:
1f:7c:06:66:21:8e:4c:57:4a:16:dc:40:92:6d:b7:
56:7a:92:a9:36:6d:b7:d3:b3:18:5c:ee:79:7b:1a:
b8:8c:78:48:7a:03:34:12:53:ad:07:80:61:a4:a5:
9c:7b:78:96:74:6f:3c:b4:2a:5d:cf:5a:da:2f:c1:
9c:92:2a:1a:11:5d:9c:a8:bb:d8:60:96:ee:99:40:
84:25:c5:24:b1:26:68:86:ed:f3:5e:fe:3b:41:8f:
4a:8b:18:ae:ad:31:88:60:83:b8:68:bd:02:4d:00:
d5:fa:9a:0d:84:9f:41:38:ef:80:3b:b5:1d:19:39:
1c:74:8a:41:dc:35:1d:60:53:2d:9c:16:8a:3b:fa:
ee:c5:44:46:94:67:03:34:a7:74:c1:7b:ea:7e:47:
e7:92:66:9f:db:cf:1d:1b:9f:01:9a:57:79:fc:6a:
88:93:e7:4f:0d:ca:53:25:4d:ad:b0:ca:08:15:e5:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:D7:42:33:AA:A7:F5:14:C8:9D:3E:4E:B4:A3:41:99:E0:CA:42
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sMvXQjOqp_UUyJ0-TrSjQZngykI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
c6:cc:b5:88:0c:b8:4d:6a:af:cb:36:58:32:40:07:9f:94:28:
67:ad:69:91:48:71:f3:df:60:69:f0:18:18:5e:93:8f:1a:d3:
7d:be:4f:04:0b:b6:3c:cf:24:25:4d:f4:c5:de:e2:18:c6:03:
e5:27:39:ad:84:5d:28:66:fd:05:45:f5:60:5d:14:c1:04:3c:
8e:a7:62:70:33:07:dd:e1:ea:9d:0d:a4:33:f7:c2:b3:68:fc:
97:8c:4a:c5:13:39:fb:ec:46:b3:34:fd:1b:9f:b5:e5:c6:2c:
58:38:b9:90:d9:34:aa:3f:f4:5c:eb:cc:64:96:f1:de:a0:04:
2b:92:06:cd:70:36:48:02:86:3c:6c:ac:20:ee:e5:75:9c:8a:
7f:94:93:00:00:4b:52:2f:4d:7b:42:c8:ad:9e:c7:63:3d:81:
f6:42:c6:6a:e6:15:fa:bd:db:27:c4:a5:3b:75:72:65:be:29:
45:07:a7:12:4d:a5:23:de:03:bf:f9:6d:ef:4e:b8:63:0d:13:
cc:d9:f1:33:c5:c7:0d:d7:a8:50:a9:2a:20:71:96:0b:fa:ad:
7f:fe:05:2f:47:48:fe:55:d7:7e:ab:29:ff:36:8f:a4:62:94:
e3:89:01:4d:55:ce:e0:ee:35:d6:11:32:7a:56:8d:45:10:dc:
8a:c9:16:93
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZb/3UtOXE2XwvtHldhgHLGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI0MDExNjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGNiZDc0MjMzYWFhN2Y1MTRjODlkM2U0ZWI0YTM0MTk5ZTBjYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGeHR95rVWw3W5oDYYoew+SI8qoX
TlZDC+jXNHXMvOW1XEY6n50XZGCVfS27ROjmNp+3aIU/Y3Vnao/dzlI6QlehwBTR
P2wW8QIffAZmIY5MV0oW3ECSbbdWepKpNm2307MYXO55exq4jHhIegM0ElOtB4Bh
pKWce3iWdG88tCpdz1raL8GckioaEV2cqLvYYJbumUCEJcUksSZohu3zXv47QY9K
ixiurTGIYIO4aL0CTQDV+poNhJ9BOO+AO7UdGTkcdIpB3DUdYFMtnBaKO/ruxURG
lGcDNKd0wXvqfkfnkmaf288dG58Bmld5/GqIk+dPDcpTJU2tsMoIFeVj7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLDL10Izqqf1FMidPk60o0GZ4MpCMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvc012WFFqT3FwX1VVeUowLVRyU2pRWm5neWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAxsy1iAy4TWqvyzZYMkAHn5Qo
Z61pkUhx899gafAYGF6TjxrTfb5PBAu2PM8kJU30xd7iGMYD5Sc5rYRdKGb9BUX1
YF0UwQQ8jqdicDMH3eHqnQ2kM/fCs2j8l4xKxRM5++xGszT9G5+15cYsWDi5kNk0
qj/0XOvMZJbx3qAEK5IGzXA2SAKGPGysIO7ldZyKf5STAABLUi9Ne0LIrZ7HYz2B
9kLGauYV+r3bJ8SlO3VyZb4pRQenEk2lI94Dv/lt7064Yw0TzNnxM8XHDdeoUKkq
IHGWC/qtf/4FL0dI/lXXfqsp/zaPpGKU44kBTVXO4O411hEyelaNRRDciskWkw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:26 2025 by rpki-client