Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-Dl9b5WsZUnlaZmnI2H3VB63UTw.roa
File: 1-Dl9b5WsZUnlaZmnI2H3VB63UTw.roa (raw, json)
Hash identifier: jV4ZdJ2P03OYeu/XYVpF55hpELfCfDwYtYckiNu+D9I=
Subject key identifier: F8:39:7D:6F:95:AC:65:49:E5:69:99:A7:23:61:F7:54:1E:B7:51:3C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A05C757C06EDDEC57386CE7E02EB6217
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-Dl9b5WsZUnlaZmnI2H3VB63UTw.roa
Signing time: Tue 24 Jun 2025 05:15:03 +0000
ROA not before: Tue 24 Jun 2025 05:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 06:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:5c:75:7c:06:ed:de:c5:73:86:ce:7e:02:eb:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 05:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8397d6f95ac6549e56999a72361f7541eb7513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:06:d2:e8:7a:ec:4b:6f:bc:c2:fb:2f:2e:
1a:04:f1:30:9a:3a:8f:5b:b8:d5:61:8a:c9:a4:7c:
5f:48:92:76:26:e5:eb:94:86:f6:d7:c4:3d:4d:1c:
3f:a0:e7:ef:ff:96:6a:bf:cc:d4:5a:ae:ca:6a:8b:
62:0a:0e:8f:bd:dd:83:91:f2:af:83:88:50:62:55:
a6:34:0d:72:96:13:61:21:c2:b6:70:45:e5:6c:c1:
9c:a7:44:de:5c:d5:5f:31:ce:e0:99:f5:c4:46:ed:
d6:bc:97:ed:72:e3:ed:0e:bf:d6:ba:6b:d3:5b:07:
33:07:43:94:4d:14:69:da:95:f5:1a:0d:43:46:31:
b0:bf:79:13:bb:dc:45:d2:13:c1:e0:0b:97:68:81:
05:0e:b5:ef:80:1f:15:8c:af:db:a7:57:27:2f:48:
6f:4b:1b:07:a5:9c:d4:17:86:26:2d:a9:f9:43:ac:
51:0c:8c:ef:bd:24:24:34:e4:32:81:8f:12:e4:82:
f3:ae:56:c4:3f:68:8b:0e:13:6d:ad:73:b9:ab:74:
31:6c:b9:25:07:a5:05:22:14:c9:52:5b:17:13:88:
8b:3d:41:65:c4:79:2e:68:cd:0f:7c:db:15:52:07:
7a:27:8d:fc:6f:c5:be:de:2b:10:41:2a:10:3c:fb:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:7D:6F:95:AC:65:49:E5:69:99:A7:23:61:F7:54:1E:B7:51:3C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-Dl9b5WsZUnlaZmnI2H3VB63UTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
85:70:cc:b9:ee:11:58:b3:ab:3f:00:b1:25:52:a1:50:be:15:
21:66:c3:a4:1a:a4:9b:76:28:72:bb:b7:d9:4b:3c:d8:c9:04:
4c:ac:4b:fc:ef:58:7e:c9:87:f8:a3:3b:2c:e5:f2:37:76:24:
5b:f9:af:17:f0:e5:3a:cd:ec:2a:e6:bb:07:b9:03:f5:db:ec:
a5:f2:cd:12:e9:80:84:92:6a:94:32:9e:dc:3c:a2:99:ce:25:
fc:58:68:25:38:6e:92:fc:db:1a:6c:c0:de:3b:26:b9:c0:40:
48:ff:3f:2b:13:cf:16:dc:c9:dc:fc:91:0e:0f:20:99:bc:94:
77:59:0c:7b:72:60:62:ab:e6:6b:a6:2c:8d:9e:e2:7a:6b:3a:
fd:6d:a8:f9:b0:06:ad:c8:d8:0b:78:71:d2:36:2e:33:c1:4c:
78:ee:02:8d:98:3d:0d:27:14:80:4d:c7:a7:b8:74:3e:d8:91:
64:3d:3f:75:ab:e2:4c:0d:91:5b:36:ce:c7:d7:b5:4e:23:e9:
b7:93:78:b6:1f:20:22:99:73:38:b3:8a:26:4f:bc:b8:d9:ed:
65:fc:18:d3:50:fe:77:09:a0:30:f5:71:ed:e4:f5:11:99:39:
75:1e:bf:ad:c6:c9:2e:56:ab:16:f0:7b:d6:de:c0:2b:8d:d3:
5a:6b:87:c5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZegXHV8Bu3exXOGzn4C62IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI0MDUxNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODM5N2Q2Zjk1YWM2NTQ5ZTU2OTk5YTcyMzYxZjc1NDFlYjc1MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+MG0uh67EtvvML7Ly4aBPEwmjqP
W7jVYYrJpHxfSJJ2JuXrlIb218Q9TRw/oOfv/5Zqv8zUWq7KaotiCg6Pvd2DkfKv
g4hQYlWmNA1ylhNhIcK2cEXlbMGcp0TeXNVfMc7gmfXERu3WvJftcuPtDr/WumvT
WwczB0OUTRRp2pX1Gg1DRjGwv3kTu9xF0hPB4AuXaIEFDrXvgB8VjK/bp1cnL0hv
SxsHpZzUF4YmLan5Q6xRDIzvvSQkNOQygY8S5ILzrlbEP2iLDhNtrXO5q3QxbLkl
B6UFIhTJUlsXE4iLPUFlxHkuaM0PfNsVUgd6J438b8W+3isQQSoQPPuUoQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPg5fW+VrGVJ5WmZpyNh91Qet1E8MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvMS1EbDliNVdzWlVubGFabW5JMkgzVkI2M1VUdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTYvYWUwNDlhLTA3OGItNDJlZC1hMjhmLTZhYTQ0MzUyOGNl
NS8xL1RoUFF3S2NENEp6YVpNRXJDTjJpdDBtZ1Fwdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACABBnwA
ZP//AAABl2hReJwwDQYJKoZIhvcNAQELBQADggEBAIVwzLnuEVizqz8AsSVSoVC+
FSFmw6QapJt2KHK7t9lLPNjJBEysS/zvWH7Jh/ijOyzl8jd2JFv5rxfw5TrN7Crm
uwe5A/Xb7KXyzRLpgISSapQyntw8opnOJfxYaCU4bpL82xpswN47JrnAQEj/PysT
zxbcydz8kQ4PIJm8lHdZDHtyYGKr5mumLI2e4nprOv1tqPmwBq3I2At4cdI2LjPB
THjuAo2YPQ0nFIBNx6e4dD7YkWQ9P3Wr4kwNkVs2zsfXtU4j6beTeLYfICKZcziz
iiZPvLjZ7WX8GNNQ/ncJoDD1ce3k9RGZOXUev63GyS5Wqxbwe9bewCuN01prh8U=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:09:43 2025 by rpki-client