Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tJj2cxNXO7Uw1iRwogMnqK4a_nU.roa
File: tJj2cxNXO7Uw1iRwogMnqK4a_nU.roa (raw, json)
Hash identifier: YHBmjU+grjlwAvmPijGINk1NxOXLu45fB4iiQ5JORZQ=
Subject key identifier: B4:98:F6:73:13:57:3B:B5:30:D6:24:70:A2:03:27:A8:AE:1A:FE:75
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968E86A351E2FFCFA41B3843FF6F5383FB
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tJj2cxNXO7Uw1iRwogMnqK4a_nU.roa
Signing time: Fri 02 May 2025 01:05:10 +0000
ROA not before: Fri 02 May 2025 01:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8e85:e14a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 02 May 2025 01:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:86:a3:51:e2:ff:cf:a4:1b:38:43:ff:6f:53:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 2 01:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b498f67313573bb530d62470a20327a8ae1afe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:d9:a0:9e:a7:1c:78:e1:71:e9:dd:56:ab:
43:30:12:62:94:05:e8:5a:7e:fc:95:37:e5:26:9b:
db:b3:b2:11:5b:74:34:6c:7b:d2:7f:0e:a9:04:d7:
e5:5f:67:c1:eb:a6:c5:3b:81:35:bb:53:49:ac:4f:
52:02:71:e4:69:0f:e7:45:1e:0a:2c:e2:12:4a:fc:
4c:31:d6:73:71:1e:47:89:2e:d9:52:44:c7:1f:98:
d9:f7:11:59:56:92:83:5b:9e:bd:b8:a7:bc:64:e9:
74:eb:78:13:d2:2f:84:52:ff:8d:87:d6:95:fe:9d:
92:86:52:85:20:ee:2c:5a:8f:cf:99:3d:80:2b:e0:
c3:57:cb:0a:4f:0a:6a:9e:e7:b1:f9:46:a7:01:b8:
00:b1:36:b2:48:8f:ae:5a:18:6e:17:f7:06:4c:45:
1f:67:96:71:70:c1:db:11:44:f2:9a:a4:de:83:b3:
98:6b:92:a9:17:d4:94:12:90:77:c7:3e:22:53:a0:
ea:f4:00:4a:43:91:18:7e:fb:b6:a0:35:09:f1:c0:
63:d1:86:21:89:8f:ac:d4:db:ed:d5:81:e7:d7:78:
0e:fa:fa:33:cd:61:35:0f:25:c6:d1:bb:59:fc:97:
ad:b7:09:3c:11:2f:13:83:bd:f6:49:bb:1e:5a:98:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:F6:73:13:57:3B:B5:30:D6:24:70:A2:03:27:A8:AE:1A:FE:75
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tJj2cxNXO7Uw1iRwogMnqK4a_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8e85:e14a/128
Signature Algorithm: sha256WithRSAEncryption
18:b1:ce:e7:6e:16:48:2d:2a:3c:ca:ea:a2:82:af:8f:6b:92:
dd:e9:c9:9c:1a:fe:ef:7e:28:69:95:45:23:71:6c:9b:94:2c:
8c:b5:87:46:de:70:38:ee:00:7c:86:c3:de:c4:19:bb:3b:2c:
4f:0c:78:b7:f5:57:fe:2c:f4:62:69:3f:a3:f1:d4:4d:b3:e3:
42:7b:c1:6e:74:38:89:a7:e2:41:81:fa:2c:e2:66:d3:75:59:
b8:be:9b:2c:a2:a4:72:fc:2b:ac:1d:f6:2a:7c:25:d5:93:0e:
aa:2a:4f:55:ca:b4:a7:ba:4d:30:de:5b:8a:8c:df:6a:b9:40:
d7:39:d1:7e:48:04:3f:2a:6a:bd:88:d6:be:83:9f:27:8e:48:
d5:0a:06:86:0f:02:c1:d1:09:dd:17:3c:7a:5b:77:74:0e:71:
fa:64:2b:d4:7d:81:d5:0f:06:07:a4:80:90:ba:26:76:52:89:
e6:6c:25:10:1a:50:18:52:46:b0:5e:85:48:1d:b3:e7:8f:21:
36:cc:c2:24:e1:ba:73:e5:a8:43:13:b4:6f:2b:9a:4e:2e:0f:
9e:83:1b:c3:6d:e6:6d:f7:f8:44:b2:32:9c:ef:df:17:b4:6f:
3d:d4:78:18:6f:eb:ec:8e:38:1a:4e:76:ad:c1:d9:71:3f:ff:
b7:66:ac:28
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZaOhqNR4v/PpBs4Q/9vU4P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTAyMDEwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk4ZjY3MzEzNTczYmI1MzBkNjI0NzBhMjAzMjdhOGFlMWFmZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1PZoJ6nHHjhcendVqtDMBJilAXo
Wn78lTflJpvbs7IRW3Q0bHvSfw6pBNflX2fB66bFO4E1u1NJrE9SAnHkaQ/nRR4K
LOISSvxMMdZzcR5HiS7ZUkTHH5jZ9xFZVpKDW569uKe8ZOl063gT0i+EUv+Nh9aV
/p2ShlKFIO4sWo/PmT2AK+DDV8sKTwpqnuex+UanAbgAsTaySI+uWhhuF/cGTEUf
Z5ZxcMHbEUTymqTeg7OYa5KpF9SUEpB3xz4iU6Dq9ABKQ5EYfvu2oDUJ8cBj0YYh
iY+s1Nvt1YHn13gO+vozzWE1DyXG0btZ/Jettwk8ES8Tg732SbseWpgxHwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLSY9nMTVzu1MNYkcKIDJ6iuGv51MB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvdEpqMmN4TlhPN1V3MWlSd29nTW5xSzRhX25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWjoXhSjANBgkqhkiG9w0BAQsFAAOCAQEAGLHO524WSC0qPMrqooKvj2uS
3enJnBr+734oaZVFI3Fsm5QsjLWHRt5wOO4AfIbD3sQZuzssTwx4t/VX/iz0Ymk/
o/HUTbPjQnvBbnQ4iafiQYH6LOJm03VZuL6bLKKkcvwrrB32Knwl1ZMOqipPVcq0
p7pNMN5biozfarlA1znRfkgEPypqvYjWvoOfJ45I1QoGhg8CwdEJ3Rc8elt3dA5x
+mQr1H2B1Q8GB6SAkLomdlKJ5mwlEBpQGFJGsF6FSB2z548hNszCJOG6c+WoQxO0
byuaTi4PnoMbw23mbff4RLIynO/fF7RvPdR4GG/r7I44Gk52rcHZcT//t2asKA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:59 2025 by rpki-client