Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/s_JkzdwqLR1JStz1OS27brm-9Lg.roa
File: s_JkzdwqLR1JStz1OS27brm-9Lg.roa (raw, json)
Hash identifier: gwRt01nDuXE1o+vLDN/GlYBjzEvHxatoGSu/w4tImvU=
Subject key identifier: B3:F2:64:CD:DC:2A:2D:1D:49:4A:DC:F5:39:2D:BB:6E:B9:BE:F4:B8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970BA5F4EFDF108171A6C19F8BB44E2459
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/s_JkzdwqLR1JStz1OS27brm-9Lg.roa
Signing time: Mon 26 May 2025 08:11:54 +0000
ROA not before: Mon 26 May 2025 08:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 09:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:a5:f4:ef:df:10:81:71:a6:c1:9f:8b:b4:4e:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 08:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f264cddc2a2d1d494adcf5392dbb6eb9bef4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:bb:98:30:22:6b:c0:7f:c7:45:0b:27:ed:
eb:9d:b3:24:ad:2e:82:1c:73:5b:64:77:ea:be:00:
d0:33:16:8d:18:1c:6b:81:16:03:0f:78:30:59:3a:
44:59:56:4b:fd:44:04:59:5e:b5:d5:af:3f:9c:55:
f9:b0:cf:c2:e9:30:1b:aa:d7:74:5d:03:33:ec:4b:
b3:a5:8f:12:ee:57:0f:f6:ac:8b:be:5f:10:d6:a2:
2e:45:42:e7:59:ce:32:02:2a:bf:ba:cf:ba:e0:a7:
8e:96:9f:fe:64:d7:de:d8:3c:25:15:bf:67:6a:58:
f8:a7:4a:8f:cf:62:62:02:d3:f2:21:c6:35:9f:f1:
63:c6:3a:c7:a7:2c:65:26:e1:d4:97:1e:35:64:3e:
78:8d:a4:67:04:5d:15:41:82:c8:6c:61:f5:bd:2b:
82:98:e4:8b:87:f3:1f:f2:b7:37:07:8b:ae:7e:bc:
cc:5e:9d:df:3f:88:f5:1f:72:0d:7d:3e:d0:36:68:
c0:f7:44:91:ed:13:49:70:16:33:3e:c1:e9:d7:51:
50:a0:20:e5:ce:7b:0b:60:3b:68:91:e4:73:b2:45:
4e:61:a8:15:22:ea:ad:a0:63:2f:f6:f4:21:c0:e3:
80:b2:47:27:6c:a6:85:97:8b:58:3d:94:ef:ee:11:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:64:CD:DC:2A:2D:1D:49:4A:DC:F5:39:2D:BB:6E:B9:BE:F4:B8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/s_JkzdwqLR1JStz1OS27brm-9Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
c3:22:46:79:32:23:ab:6c:14:46:4a:25:12:b0:0a:17:0a:b3:
24:44:ab:98:f3:af:2e:7d:e7:17:90:fc:c6:62:48:47:05:0d:
6e:f2:7e:a2:eb:b6:99:c1:47:9b:57:ff:c3:e9:97:ea:c2:69:
23:cc:5d:7a:2b:32:83:85:6c:e5:2a:d7:65:9d:6a:45:8b:31:
e3:49:ba:d3:4a:a5:75:de:c8:c9:f5:de:f9:a4:00:a5:0c:bd:
92:d6:98:6f:96:6a:06:37:2b:f4:eb:87:8e:c3:6f:5d:0b:17:
3b:22:98:5a:85:9e:fd:59:22:a9:f6:b2:48:1b:00:a5:02:70:
4f:b3:e2:de:b3:70:1d:6d:d4:82:43:52:87:2d:5c:07:1a:3b:
62:3c:a1:1a:4c:37:c1:2a:7d:b2:7a:2c:da:0d:97:9c:ed:e0:
25:d9:58:cf:15:82:67:a9:05:af:1d:a0:a4:d2:02:51:c5:72:
9f:2e:e9:15:23:2d:53:4c:e9:dd:6b:e8:d7:57:89:f2:a3:fc:
96:2b:fe:f2:4b:a0:80:8b:2c:9e:94:18:01:b0:2b:60:ec:bc:
1d:47:12:80:00:e1:ae:b3:87:e1:0b:d0:e3:99:23:50:9d:9a:
c3:52:6f:40:44:1f:5b:4d:60:10:24:8a:21:c7:9e:d5:fc:f4:
61:75:71:1e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcLpfTv3xCBcabBn4u0TiRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI2MDgxMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2YyNjRjZGRjMmEyZDFkNDk0YWRjZjUzOTJkYmI2ZWI5YmVmNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63O7mDAia8B/x0ULJ+3rnbMkrS6C
HHNbZHfqvgDQMxaNGBxrgRYDD3gwWTpEWVZL/UQEWV611a8/nFX5sM/C6TAbqtd0
XQMz7EuzpY8S7lcP9qyLvl8Q1qIuRULnWc4yAiq/us+64KeOlp/+ZNfe2DwlFb9n
alj4p0qPz2JiAtPyIcY1n/FjxjrHpyxlJuHUlx41ZD54jaRnBF0VQYLIbGH1vSuC
mOSLh/Mf8rc3B4uufrzMXp3fP4j1H3INfT7QNmjA90SR7RNJcBYzPsHp11FQoCDl
znsLYDtokeRzskVOYagVIuqtoGMv9vQhwOOAskcnbKaFl4tYPZTv7hHowQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLPyZM3cKi0dSUrc9Tktu265vvS4MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvc19Ka3pkd3FMUjFKU3R6MU9TMjdicm0tOUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAwyJGeTIjq2wURkolErAKFwqz
JESrmPOvLn3nF5D8xmJIRwUNbvJ+ouu2mcFHm1f/w+mX6sJpI8xdeisyg4Vs5SrX
ZZ1qRYsx40m600qldd7IyfXe+aQApQy9ktaYb5ZqBjcr9OuHjsNvXQsXOyKYWoWe
/VkiqfaySBsApQJwT7Pi3rNwHW3UgkNShy1cBxo7YjyhGkw3wSp9snos2g2XnO3g
JdlYzxWCZ6kFrx2gpNICUcVyny7pFSMtU0zp3Wvo11eJ8qP8liv+8kuggIssnpQY
AbArYOy8HUcSgADhrrOH4QvQ45kjUJ2aw1JvQEQfW01gECSKIcee1fz0YXVxHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:22 2025 by rpki-client