Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9G-9E8M0v1ReHPMP9P_xruSjxbU.roa
File: 9G-9E8M0v1ReHPMP9P_xruSjxbU.roa (raw, json)
Hash identifier: qHqCR4aFdS+/SsV8GCtLfY2+e3NHcOVpr0T/gRVer4o=
Subject key identifier: F4:6F:BD:13:C3:34:BF:54:5E:1C:F3:0F:F4:FF:F1:AE:E4:A3:C5:B5
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019799E7F0260A823581F7642B17D91A4816
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9G-9E8M0v1ReHPMP9P_xruSjxbU.roa
Signing time: Sun 22 Jun 2025 23:10:03 +0000
ROA not before: Sun 22 Jun 2025 23:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:e7:f0:26:0a:82:35:81:f7:64:2b:17:d9:1a:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 23:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f46fbd13c334bf545e1cf30ff4fff1aee4a3c5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:9c:66:38:c8:16:91:01:36:c2:49:f9:7c:
aa:57:74:d0:7e:bf:10:75:e3:84:54:8a:f4:d5:c7:
bd:d2:dd:82:fb:9a:d4:1c:79:68:8e:b9:23:d3:3a:
13:36:61:c4:cb:95:58:c6:00:44:0e:54:0f:4f:72:
92:c6:e8:3d:76:04:24:3b:ab:ee:77:31:85:88:b5:
8d:3f:f2:d5:24:91:66:11:45:1f:dd:a2:2b:91:de:
30:d7:39:fd:c9:75:30:e2:5e:58:81:bc:1d:98:a5:
25:b6:c5:8c:ef:e5:9f:7e:2d:8c:50:f3:fc:2f:d4:
a9:ae:29:bf:be:35:ee:da:48:38:43:42:d3:10:55:
b4:15:28:1d:66:1b:33:9b:2e:6b:eb:f5:52:51:ee:
cb:e8:26:fd:f3:e0:6a:99:0a:fa:8f:bf:df:f2:cf:
a6:ec:e8:93:02:bc:e8:a8:70:c4:79:b8:6f:6a:06:
39:10:40:f7:68:19:35:63:5f:01:31:91:a4:e6:f7:
05:34:d6:bf:fb:6d:90:63:b8:5e:e7:e5:21:62:9a:
01:88:06:ca:97:ff:cb:d7:bd:28:df:79:00:4d:64:
93:f4:6d:40:65:4e:0a:7e:26:2c:a7:b8:75:37:ab:
e7:8b:c1:12:69:7f:ba:7a:04:b5:89:c6:76:dd:9f:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6F:BD:13:C3:34:BF:54:5E:1C:F3:0F:F4:FF:F1:AE:E4:A3:C5:B5
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9G-9E8M0v1ReHPMP9P_xruSjxbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
00:69:e5:c4:e3:31:a3:cb:7b:94:10:a9:cc:e4:44:93:08:9d:
7c:9b:44:eb:5e:26:d9:da:52:6c:ca:f1:43:a8:17:42:11:b1:
db:4b:6b:d9:9a:f6:3f:23:ac:f9:01:59:ad:d9:99:4e:d9:2c:
2f:d4:2c:63:0d:06:f4:8f:f3:33:50:41:25:31:ce:02:28:73:
36:79:f8:45:ef:a5:22:a6:77:a4:66:a5:ff:2f:27:54:24:dc:
66:cb:e6:52:3a:77:d4:08:f6:19:e1:95:be:fa:d9:af:c5:a9:
f9:49:36:b4:16:d3:0b:42:3f:9f:70:29:5a:35:30:ac:0c:f0:
bf:ee:c7:ec:e2:23:e0:2e:32:9e:48:38:e0:d0:da:f3:51:28:
f5:ef:ad:47:f5:24:45:67:e9:fb:18:88:d3:ba:34:b9:d3:2f:
38:4b:5d:2c:fe:2a:14:d2:f2:5c:83:5f:8c:c0:36:52:d0:eb:
42:57:b4:25:25:d4:e8:1a:eb:a2:a6:f9:44:12:31:25:40:8d:
97:7d:4f:e7:8b:f6:70:54:ba:be:7f:18:d6:f8:3e:98:bf:ce:
cb:de:08:64:76:af:17:66:51:42:5a:64:80:42:3b:64:6f:8b:
1d:e5:5e:7d:8f:c0:73:da:76:a4:27:53:08:f2:01:86:39:1e:
f1:52:cb:65
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeZ5/AmCoI1gfdkKxfZGkgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIyMjMxMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDZmYmQxM2MzMzRiZjU0NWUxY2YzMGZmNGZmZjFhZWU0YTNjNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dycZjjIFpEBNsJJ+XyqV3TQfr8Q
deOEVIr01ce90t2C+5rUHHlojrkj0zoTNmHEy5VYxgBEDlQPT3KSxug9dgQkO6vu
dzGFiLWNP/LVJJFmEUUf3aIrkd4w1zn9yXUw4l5YgbwdmKUltsWM7+Wffi2MUPP8
L9Sprim/vjXu2kg4Q0LTEFW0FSgdZhszmy5r6/VSUe7L6Cb98+BqmQr6j7/f8s+m
7OiTArzoqHDEebhvagY5EED3aBk1Y18BMZGk5vcFNNa/+22QY7he5+UhYpoBiAbK
l//L170o33kATWST9G1AZU4KfiYsp7h1N6vni8ESaX+6egS1icZ23Z/WRwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPRvvRPDNL9UXhzzD/T/8a7ko8W1MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvOUctOUU4TTB2MVJlSFBNUDlQX3hydVNqeGJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAAGnlxOMxo8t7lBCpzOREkwid
fJtE614m2dpSbMrxQ6gXQhGx20tr2Zr2PyOs+QFZrdmZTtksL9QsYw0G9I/zM1BB
JTHOAihzNnn4Re+lIqZ3pGal/y8nVCTcZsvmUjp31Aj2GeGVvvrZr8Wp+Uk2tBbT
C0I/n3ApWjUwrAzwv+7H7OIj4C4ynkg44NDa81Eo9e+tR/UkRWfp+xiI07o0udMv
OEtdLP4qFNLyXINfjMA2UtDrQle0JSXU6Brroqb5RBIxJUCNl31P54v2cFS6vn8Y
1vg+mL/Oy94IZHavF2ZRQlpkgEI7ZG+LHeVefY/Ac9p2pCdTCPIBhjke8VLLZQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:53 2025 by rpki-client