Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9WHxJkPMSK9I_nXNceMtNtvqwnY.roa
File: 9WHxJkPMSK9I_nXNceMtNtvqwnY.roa (raw, json)
Hash identifier: nrTBucCAGHV0St58v14rEsPJ7ZxPMDF5Ef26v0Zlr7k=
Subject key identifier: F5:61:F1:26:43:CC:48:AF:48:FE:75:CD:71:E3:2D:36:DB:EA:C2:76
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A7DDCCB93FD485B57296F88CACE9B1FA
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9WHxJkPMSK9I_nXNceMtNtvqwnY.roa
Signing time: Wed 25 Jun 2025 16:13:40 +0000
ROA not before: Wed 25 Jun 2025 16:13:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 17:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:dd:cc:b9:3f:d4:85:b5:72:96:f8:8c:ac:e9:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 16:13:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f561f12643cc48af48fe75cd71e32d36dbeac276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:91:13:7d:05:f7:33:59:3c:03:0f:c1:45:
5d:65:4d:58:89:e6:1e:ce:67:77:bd:79:46:9a:9e:
bf:02:b2:1f:62:8a:fc:94:73:85:f1:05:a8:b8:32:
e5:0a:dd:76:b9:08:45:82:c5:58:c4:45:7b:4f:3f:
25:8f:58:89:81:2e:4f:4c:98:63:d2:f9:80:38:5b:
f1:fc:03:d1:9e:65:ba:ac:84:c3:12:8e:76:33:7b:
3b:02:c9:ef:b1:b0:a7:c1:87:c5:0a:ad:61:2c:11:
ef:ff:25:72:56:85:35:e6:68:40:64:97:c5:1f:3d:
26:9c:97:2a:0f:0f:fd:e4:21:ce:7c:e9:00:b5:21:
ac:31:20:7d:bf:f0:2f:46:1b:d4:b4:13:24:9f:93:
6a:79:47:d6:80:94:09:9c:97:14:eb:7e:20:fd:82:
8d:6e:2d:6f:fb:f9:28:60:c9:bd:8e:70:04:02:f5:
9d:33:eb:ba:2d:1c:d3:53:68:fa:34:87:77:5f:4b:
a1:ee:73:5b:84:2a:07:1f:7f:2b:e6:ef:e2:7d:c9:
2e:c9:15:92:cf:72:44:a2:df:ea:fe:8f:06:a5:26:
79:fe:78:26:0a:70:7e:bd:c7:32:d3:bd:09:a6:ba:
21:7c:b1:bd:74:b1:54:c7:08:f9:9a:84:50:60:62:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:F1:26:43:CC:48:AF:48:FE:75:CD:71:E3:2D:36:DB:EA:C2:76
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9WHxJkPMSK9I_nXNceMtNtvqwnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
85:42:6a:2e:55:04:08:37:1a:44:ad:4c:76:72:36:1c:3e:79:
cd:ac:f7:35:59:27:6b:eb:4d:bb:51:54:38:32:e2:1f:04:8c:
a5:5f:60:e0:dc:76:2e:16:09:53:b1:d2:4d:43:38:88:62:2d:
66:e9:df:dc:ae:33:e6:b1:42:62:6a:c9:5d:6a:e0:62:d1:7b:
c2:3d:9a:fb:f9:da:e4:6a:a0:b1:95:e3:f3:32:5c:94:04:5b:
09:5a:f8:03:03:7f:39:5d:ca:e8:e4:30:92:c1:72:25:f2:84:
0f:5b:be:b4:ea:15:08:3c:95:83:93:2f:c4:db:4e:85:57:64:
a8:f1:d8:3f:4b:e2:76:24:a1:7c:f2:58:34:18:8e:e7:2c:c9:
29:25:63:c5:9b:ab:88:63:75:b6:71:46:c8:6e:1c:2b:46:78:
40:25:82:38:3d:e6:79:86:fa:4e:30:59:7a:ae:40:f7:c4:af:
00:48:16:b7:57:34:4f:6e:9a:f4:bb:63:d3:24:fb:c8:dd:93:
ab:9c:30:10:a7:8a:bd:24:1a:fc:fc:b9:bb:ca:43:a8:16:98:
93:7c:fd:37:7b:d9:68:df:27:a1:b2:cc:9b:05:76:c2:be:9b:
10:86:1e:5f:fb:3f:87:74:e0:8a:59:69:f6:01:16:bf:ee:27:
f1:17:03:e5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZen3cy5P9SFtXKW+Iys6bH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI1MTYxMzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTYxZjEyNjQzY2M0OGFmNDhmZTc1Y2Q3MWUzMmQzNmRiZWFjMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx02RE30F9zNZPAMPwUVdZU1YieYe
zmd3vXlGmp6/ArIfYor8lHOF8QWouDLlCt12uQhFgsVYxEV7Tz8lj1iJgS5PTJhj
0vmAOFvx/APRnmW6rITDEo52M3s7AsnvsbCnwYfFCq1hLBHv/yVyVoU15mhAZJfF
Hz0mnJcqDw/95CHOfOkAtSGsMSB9v/AvRhvUtBMkn5NqeUfWgJQJnJcU634g/YKN
bi1v+/koYMm9jnAEAvWdM+u6LRzTU2j6NId3X0uh7nNbhCoHH38r5u/ifckuyRWS
z3JEot/q/o8GpSZ5/ngmCnB+vccy070JprohfLG9dLFUxwj5moRQYGJFSQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPVh8SZDzEivSP51zXHjLTbb6sJ2MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvOVdIeEprUE1TSzlJX25YTmNlTXROdHZxd25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAhUJqLlUECDcaRK1MdnI2HD55
zaz3NVkna+tNu1FUODLiHwSMpV9g4Nx2LhYJU7HSTUM4iGItZunf3K4z5rFCYmrJ
XWrgYtF7wj2a+/na5GqgsZXj8zJclARbCVr4AwN/OV3K6OQwksFyJfKED1u+tOoV
CDyVg5MvxNtOhVdkqPHYP0vidiShfPJYNBiO5yzJKSVjxZuriGN1tnFGyG4cK0Z4
QCWCOD3meYb6TjBZeq5A98SvAEgWt1c0T26a9Ltj0yT7yN2Tq5wwEKeKvSQa/Py5
u8pDqBaYk3z9N3vZaN8nobLMmwV2wr6bEIYeX/s/h3Tgillp9gEWv+4n8RcD5Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:06 2025 by rpki-client