Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AwVyN6y8y221HeKpIhETrtsBHQ4.roa
File: AwVyN6y8y221HeKpIhETrtsBHQ4.roa (raw, json)
Hash identifier: sHPb7xJXHwlY92w/hnWwYPL950V/axsiCTFSQ9EjLXc=
Subject key identifier: 03:05:72:37:AC:BC:CB:6D:B5:1D:E2:A9:22:11:13:AE:DB:01:1D:0E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978A40AB6E0BCACB131FA1F1CDD69176E4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AwVyN6y8y221HeKpIhETrtsBHQ4.roa
Signing time: Thu 19 Jun 2025 22:13:03 +0000
ROA not before: Thu 19 Jun 2025 22:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 23:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:40:ab:6e:0b:ca:cb:13:1f:a1:f1:cd:d6:91:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 22:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03057237acbccb6db51de2a9221113aedb011d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:de:a7:0b:c9:d1:7e:d0:1a:cd:bc:b4:f4:
72:0e:ad:0e:67:e9:ba:6d:e4:90:70:99:24:52:4d:
66:67:54:fd:63:3a:e5:52:82:81:b5:3f:0a:3e:53:
20:f5:70:fb:46:60:13:fc:ba:80:9d:6d:c5:04:96:
0c:84:4c:9e:8b:a9:d3:66:8b:1d:0b:5b:af:42:5a:
f5:44:10:93:e7:74:aa:30:ff:92:9b:78:2a:dc:2e:
5d:65:d2:57:bd:c2:ed:30:37:0f:93:33:d9:cd:27:
e5:3f:12:05:3e:8a:75:c3:19:94:0e:4a:e9:f0:6d:
80:bd:25:92:91:e2:34:1e:40:d6:33:98:90:03:61:
db:7d:a4:5c:84:fc:28:bb:72:a7:d8:6e:65:62:87:
8a:5b:af:41:ec:13:9a:0b:98:d5:55:60:f5:c8:52:
62:67:e7:28:0e:d5:be:10:3a:3c:90:2b:a4:4b:b3:
5a:36:78:da:b7:74:89:26:79:e3:5c:9f:96:cf:18:
26:f8:29:56:16:90:b1:13:24:f7:1c:cf:2b:a7:88:
5c:6e:69:23:df:c7:1e:f1:70:a8:a3:e2:66:48:2b:
d9:51:7c:ce:dd:94:29:31:16:f2:c5:32:bb:bc:69:
e3:c1:d6:4e:50:43:bc:17:3f:7a:5e:bc:55:a0:48:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:72:37:AC:BC:CB:6D:B5:1D:E2:A9:22:11:13:AE:DB:01:1D:0E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AwVyN6y8y221HeKpIhETrtsBHQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
6a:b8:8a:29:01:0c:a1:be:20:f3:13:60:96:6e:c2:66:cd:56:
49:7b:06:30:1b:86:f3:f8:8e:46:7e:84:e6:3f:ba:f4:fc:55:
b2:dd:1d:73:41:9c:b0:1c:2d:90:e1:b9:38:86:2c:9e:c8:ff:
ea:c1:3c:d4:00:32:dd:e2:f2:aa:74:28:d1:3e:c5:fd:d8:8f:
b1:db:fc:b3:81:f9:e2:8d:ff:da:e8:44:f6:60:f1:24:21:d1:
35:00:49:3d:45:02:30:71:93:cf:6a:3f:30:d7:56:eb:1e:78:
94:9c:93:c0:26:9a:08:46:ae:a8:07:45:43:cf:1d:68:43:cc:
6d:20:d0:9b:f5:1b:0a:fe:35:25:80:d9:04:4f:fb:62:65:0b:
cb:f4:e7:08:93:32:5a:0b:4d:53:aa:95:b9:d9:78:9b:32:b5:
c1:70:c5:57:79:69:b5:f9:64:9a:61:03:94:2e:31:70:54:56:
67:a2:5d:80:20:44:b5:28:0e:16:28:4e:8c:01:2a:34:1b:3e:
7b:b5:2f:04:7b:3a:69:aa:a6:ea:98:1d:5f:72:c3:14:3c:2c:
f1:dc:41:54:d7:b0:9a:9a:ba:cc:bc:61:cd:07:5a:bb:90:24:
34:d9:f7:76:e3:e5:54:28:1f:ee:59:0f:1a:e5:78:ee:1b:fe:
d0:c4:06:ee
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeKQKtuC8rLEx+h8c3WkXbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE5MjIxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzA1NzIzN2FjYmNjYjZkYjUxZGUyYTkyMjExMTNhZWRiMDExZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9nepwvJ0X7QGs28tPRyDq0OZ+m6
beSQcJkkUk1mZ1T9YzrlUoKBtT8KPlMg9XD7RmAT/LqAnW3FBJYMhEyei6nTZosd
C1uvQlr1RBCT53SqMP+Sm3gq3C5dZdJXvcLtMDcPkzPZzSflPxIFPop1wxmUDkrp
8G2AvSWSkeI0HkDWM5iQA2HbfaRchPwou3Kn2G5lYoeKW69B7BOaC5jVVWD1yFJi
Z+coDtW+EDo8kCukS7NaNnjat3SJJnnjXJ+Wzxgm+ClWFpCxEyT3HM8rp4hcbmkj
38ce8XCoo+JmSCvZUXzO3ZQpMRbyxTK7vGnjwdZOUEO8Fz96XrxVoEgRDQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAMFcjesvMtttR3iqSIRE67bAR0OMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvQXdWeU42eTh5MjIxSGVLcEloRVRydHNCSFE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAariKKQEMob4g8xNglm7CZs1W
SXsGMBuG8/iORn6E5j+69PxVst0dc0GcsBwtkOG5OIYsnsj/6sE81AAy3eLyqnQo
0T7F/diPsdv8s4H54o3/2uhE9mDxJCHRNQBJPUUCMHGTz2o/MNdW6x54lJyTwCaa
CEauqAdFQ88daEPMbSDQm/UbCv41JYDZBE/7YmULy/TnCJMyWgtNU6qVudl4mzK1
wXDFV3lptflkmmEDlC4xcFRWZ6JdgCBEtSgOFihOjAEqNBs+e7UvBHs6aaqm6pgd
X3LDFDws8dxBVNewmpq6zLxhzQdau5AkNNn3duPlVCgf7lkPGuV47hv+0MQG7g==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:04:46 2025 by rpki-client