Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uh91se9Qd-oODdJH6HZWHOWAkos.roa
File: uh91se9Qd-oODdJH6HZWHOWAkos.roa (raw, json)
Hash identifier: PcMB7et4Aqnpsc5OEnDBsbTIyB9iYyZiVnUsLyqmSNI=
Subject key identifier: BA:1F:75:B1:EF:50:77:EA:0E:0D:D2:47:E8:76:56:1C:E5:80:92:8B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019707CBEE55E5CE4E5C370C99CF1FB941EE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uh91se9Qd-oODdJH6HZWHOWAkos.roa
Signing time: Sun 25 May 2025 14:14:54 +0000
ROA not before: Sun 25 May 2025 14:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:cb:ee:55:e5:ce:4e:5c:37:0c:99:cf:1f:b9:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 14:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba1f75b1ef5077ea0e0dd247e876561ce580928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:01:2c:2f:0e:37:c4:54:c1:8f:d6:d9:b9:
22:37:c6:b3:cc:6d:b2:f7:9e:df:76:4e:48:99:e8:
73:a2:7d:f9:25:98:7c:1f:f2:7c:b9:20:67:57:98:
f8:fa:84:1e:77:66:b0:61:5c:76:b3:7e:12:87:47:
f8:ab:82:ca:7a:4d:d6:25:9b:11:82:7d:c3:9a:94:
f2:23:bf:57:9d:30:ed:b7:c8:35:69:67:b7:83:fb:
fd:a5:68:1e:53:ae:a5:cd:fe:19:c4:80:d9:8b:39:
11:6b:f8:72:22:48:d1:9a:f7:6e:97:21:11:5d:91:
f8:65:f3:81:b7:b3:3a:e0:a2:18:8c:3c:21:b8:a7:
1c:44:2a:e5:08:f5:5a:a2:8d:50:16:64:69:e9:b6:
53:42:25:7a:43:72:e3:d5:af:87:ba:fd:92:7e:63:
6a:73:34:8c:39:a0:f3:b7:f1:69:47:3f:81:97:68:
b4:a8:d0:e9:22:23:24:d8:a4:65:69:0b:14:b2:ab:
9a:12:c9:89:ca:ab:36:7a:cb:be:db:77:7b:c2:dc:
8d:72:48:21:80:0e:62:40:9b:6c:a2:33:67:1e:b1:
31:7f:58:c6:a1:6f:a5:5f:dd:19:ad:57:b7:91:14:
e2:ed:06:78:49:b9:8c:c5:d6:04:20:a1:94:e2:c1:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:75:B1:EF:50:77:EA:0E:0D:D2:47:E8:76:56:1C:E5:80:92:8B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uh91se9Qd-oODdJH6HZWHOWAkos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
8e:9b:e3:6c:a7:7f:f2:7f:73:15:cc:97:c6:cc:fd:c3:48:2f:
9c:09:64:a9:ee:eb:b8:7f:ee:39:b3:c0:25:a6:ec:69:75:94:
8b:9d:f5:57:2b:7f:55:10:f0:18:f4:8d:e6:4d:c7:be:69:4d:
67:bf:b1:5c:f9:ca:a1:55:5e:e8:2e:9d:3a:0b:22:e8:1f:89:
0c:87:6c:72:13:a1:47:e8:04:03:de:ed:c6:47:c0:24:82:79:
fe:37:a5:69:4a:d0:52:10:ba:77:86:77:14:5d:d1:18:de:d0:
33:01:e8:15:15:38:02:6a:bb:cd:a6:76:c1:c0:a9:16:56:30:
c5:bc:ed:23:59:02:55:45:55:44:bb:20:67:92:cf:eb:bf:45:
55:97:62:01:13:0c:75:7d:df:d8:79:e6:fe:fd:04:e7:44:8e:
32:51:29:d5:89:43:2b:4c:8d:1e:7c:20:b7:77:61:05:bb:9b:
58:32:22:ac:ac:9c:2f:ff:28:8d:e9:2f:32:d0:9b:a0:10:87:
08:46:66:ba:34:87:16:2d:ea:cc:ba:01:b5:ad:10:89:2d:75:
ab:72:2b:7a:85:93:9f:bc:5b:92:bb:0a:dd:dc:56:bc:16:a5:
2a:c4:e9:9a:f8:a8:d2:63:a6:cd:d5:d7:59:96:b7:c9:b2:7f:
e6:52:99:4b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcHy+5V5c5OXDcMmc8fuUHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI1MTQxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTFmNzViMWVmNTA3N2VhMGUwZGQyNDdlODc2NTYxY2U1ODA5MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUsBLC8ON8RUwY/W2bkiN8azzG2y
957fdk5Imehzon35JZh8H/J8uSBnV5j4+oQed2awYVx2s34Sh0f4q4LKek3WJZsR
gn3DmpTyI79XnTDtt8g1aWe3g/v9pWgeU66lzf4ZxIDZizkRa/hyIkjRmvdulyER
XZH4ZfOBt7M64KIYjDwhuKccRCrlCPVaoo1QFmRp6bZTQiV6Q3Lj1a+Huv2SfmNq
czSMOaDzt/FpRz+Bl2i0qNDpIiMk2KRlaQsUsquaEsmJyqs2esu+23d7wtyNckgh
gA5iQJtsojNnHrExf1jGoW+lX90ZrVe3kRTi7QZ4SbmMxdYEIKGU4sHniwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLofdbHvUHfqDg3SR+h2VhzlgJKLMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvdWg5MXNlOVFkLW9PRGRKSDZIWldIT1dBa29zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAjpvjbKd/8n9zFcyXxsz9w0gv
nAlkqe7ruH/uObPAJabsaXWUi531Vyt/VRDwGPSN5k3HvmlNZ7+xXPnKoVVe6C6d
Ogsi6B+JDIdschOhR+gEA97txkfAJIJ5/jelaUrQUhC6d4Z3FF3RGN7QMwHoFRU4
Amq7zaZ2wcCpFlYwxbztI1kCVUVVRLsgZ5LP679FVZdiARMMdX3f2Hnm/v0E50SO
MlEp1YlDK0yNHnwgt3dhBbubWDIirKycL/8ojekvMtCboBCHCEZmujSHFi3qzLoB
ta0QiS11q3IreoWTn7xbkrsK3dxWvBalKsTpmvio0mOmzdXXWZa3ybJ/5lKZSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:30 2025 by rpki-client