Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AYCksTny7zKbtOpW9OH1mH7DZRw.roa
File: AYCksTny7zKbtOpW9OH1mH7DZRw.roa (raw, json)
Hash identifier: lK73EwLHFpPl8Qt84EPM+fCwL64tH5JeR54jQJoVc8U=
Subject key identifier: 01:80:A4:B1:39:F2:EF:32:9B:B4:EA:56:F4:E1:F5:98:7E:C3:65:1C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197911F65C7442D675C54A27C8057746BED
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AYCksTny7zKbtOpW9OH1mH7DZRw.roa
Signing time: Sat 21 Jun 2025 06:14:03 +0000
ROA not before: Sat 21 Jun 2025 06:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 07:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:1f:65:c7:44:2d:67:5c:54:a2:7c:80:57:74:6b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 06:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0180a4b139f2ef329bb4ea56f4e1f5987ec3651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:17:b4:31:99:81:c2:a9:1f:6a:82:c2:54:
8e:0c:99:67:b6:fd:a8:f8:fa:45:33:fe:7e:d2:36:
21:31:8a:c1:92:ec:95:07:0b:f7:e9:22:f8:8c:ad:
70:31:b0:6b:6b:4f:12:fd:db:d8:26:99:57:f8:7c:
bb:a0:7d:ce:1e:90:08:f3:7d:24:3b:e9:44:4c:87:
54:34:35:43:4c:e4:ea:7b:ef:07:e5:1e:fe:aa:98:
ed:72:51:00:70:48:0b:f0:5a:79:29:ae:8b:70:11:
5b:72:62:4f:5e:a5:15:03:21:0a:58:0e:3b:b1:6d:
dc:3d:6a:3c:03:07:f7:dc:99:50:d8:dc:11:c7:38:
dd:af:d3:fc:7a:a2:cb:18:e4:76:00:02:63:ad:34:
2c:d3:f6:d9:e0:12:70:1d:d1:67:41:d1:95:23:e2:
36:e5:72:fb:f5:f5:2f:13:9f:0f:b0:d5:68:6e:87:
38:10:a7:aa:81:9b:04:93:15:4a:6c:fb:36:74:f9:
2f:c1:77:91:cb:37:6c:fa:c3:52:c0:02:be:66:29:
ac:10:db:46:13:ea:21:3a:36:fa:fc:6d:1d:07:9c:
f8:3a:59:a0:39:26:be:fa:38:fe:3b:40:ef:85:8a:
2b:a8:fd:fd:ae:57:40:22:26:77:57:49:1b:14:4d:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:A4:B1:39:F2:EF:32:9B:B4:EA:56:F4:E1:F5:98:7E:C3:65:1C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AYCksTny7zKbtOpW9OH1mH7DZRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
14:d6:1d:6d:54:fe:c6:23:a6:62:2d:00:3a:61:d0:5a:18:6f:
c3:a3:31:d9:fa:e9:5e:4f:16:71:7b:c1:7b:9e:e5:04:4c:2d:
4f:ca:75:31:86:21:86:47:72:c9:4c:73:7f:c7:0b:0b:c9:42:
fb:35:0c:84:28:fa:0f:ed:b3:02:72:e1:ad:ad:7d:49:51:2b:
97:0c:7e:38:75:4b:f0:e6:32:43:56:9f:e2:59:80:f4:40:73:
f7:4f:67:13:de:02:8f:8a:78:0c:13:c9:03:41:98:b1:a7:79:
a2:c6:d7:ee:ce:08:73:3b:19:62:ea:a7:ad:f8:33:3a:77:87:
eb:26:92:a8:18:5c:4b:c8:5d:13:e4:46:13:72:15:a1:fc:08:
ea:1d:ec:ea:3a:ad:85:58:5a:c6:6f:56:0c:ae:46:68:68:0e:
b0:28:cb:a4:e6:6f:81:35:9a:13:5c:c7:f8:08:29:65:7e:7a:
c0:b7:5d:08:79:e1:49:09:39:82:df:eb:68:a7:0b:63:10:8c:
be:a0:c0:c7:9a:ed:5f:4c:3e:d4:8c:4e:f1:d1:70:9a:29:cf:
fc:f2:bd:b9:2a:00:f0:6f:f6:31:f2:0d:fd:4e:17:9b:59:4b:
1f:40:59:c3:92:e6:9a:1a:2e:f4:a4:1b:3c:f9:97:37:95:ac:
08:4f:3b:1e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeRH2XHRC1nXFSifIBXdGvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIxMDYxNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTgwYTRiMTM5ZjJlZjMyOWJiNGVhNTZmNGUxZjU5ODdlYzM2NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrMXtDGZgcKpH2qCwlSODJlntv2o
+PpFM/5+0jYhMYrBkuyVBwv36SL4jK1wMbBra08S/dvYJplX+Hy7oH3OHpAI830k
O+lETIdUNDVDTOTqe+8H5R7+qpjtclEAcEgL8Fp5Ka6LcBFbcmJPXqUVAyEKWA47
sW3cPWo8Awf33JlQ2NwRxzjdr9P8eqLLGOR2AAJjrTQs0/bZ4BJwHdFnQdGVI+I2
5XL79fUvE58PsNVoboc4EKeqgZsEkxVKbPs2dPkvwXeRyzds+sNSwAK+ZimsENtG
E+ohOjb6/G0dB5z4OlmgOSa++jj+O0DvhYorqP39rldAIiZ3V0kbFE1SNwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAGApLE58u8ym7TqVvTh9Zh+w2UcMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvQVlDa3NUbnk3ektidE9wVzlPSDFtSDdEWlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAFNYdbVT+xiOmYi0AOmHQWhhv
w6Mx2frpXk8WcXvBe57lBEwtT8p1MYYhhkdyyUxzf8cLC8lC+zUMhCj6D+2zAnLh
ra19SVErlwx+OHVL8OYyQ1af4lmA9EBz909nE94Cj4p4DBPJA0GYsad5osbX7s4I
czsZYuqnrfgzOneH6yaSqBhcS8hdE+RGE3IVofwI6h3s6jqthVhaxm9WDK5GaGgO
sCjLpOZvgTWaE1zH+AgpZX56wLddCHnhSQk5gt/raKcLYxCMvqDAx5rtX0w+1IxO
8dFwminP/PK9uSoA8G/2MfIN/U4Xm1lLH0BZw5Lmmhou9KQbPPmXN5WsCE87Hg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:46:07 2025 by rpki-client