Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DYmrNVCnvSja3F689gx_DIuymGI.roa
File: DYmrNVCnvSja3F689gx_DIuymGI.roa (raw, json)
Hash identifier: TajWSTo/pkzvT6Q7muESDXd7u35x6A9CXfKyHFs+Odo=
Subject key identifier: 0D:89:AB:35:50:A7:BD:28:DA:DC:5E:BC:F6:0C:7F:0C:8B:B2:98:62
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C8B176CB1C3ECB6B89C06ED6D01CD734
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DYmrNVCnvSja3F689gx_DIuymGI.roa
Signing time: Wed 02 Jul 2025 01:12:42 +0000
ROA not before: Wed 02 Jul 2025 01:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Jul 2025 02:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:b1:76:cb:1c:3e:cb:6b:89:c0:6e:d6:d0:1c:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 2 01:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d89ab3550a7bd28dadc5ebcf60c7f0c8bb29862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:70:41:8b:eb:c2:1a:01:39:93:4b:9a:9f:
9e:e2:31:24:0f:26:62:92:64:da:c7:2e:23:8d:fa:
62:64:88:14:d1:b3:87:8a:26:74:85:f0:e5:5a:b5:
44:16:16:df:86:ef:f5:0d:9d:5b:90:9b:08:44:c0:
47:ed:02:fa:63:e7:21:9b:85:70:d1:d0:9d:06:24:
28:3a:43:b6:0b:ef:f4:53:35:cf:af:38:42:6e:f6:
4c:b4:e6:72:02:1a:c8:45:63:7e:c7:cb:11:2d:86:
ab:8b:0f:ad:0b:9e:60:60:4c:59:dd:af:73:82:f2:
ec:a4:23:d4:5c:22:aa:90:a5:9b:9b:04:b1:91:38:
8f:4d:87:85:6f:4a:ca:f5:a4:42:87:fa:bd:ca:de:
9c:72:0f:9a:18:78:70:8f:79:85:4e:75:c6:1f:f1:
cd:a3:e9:38:16:5b:33:54:7f:e4:e7:3c:a8:52:70:
89:f9:d7:e0:e3:91:77:d7:91:b6:1b:2f:f8:29:ee:
0e:13:5e:88:88:b0:b6:62:a1:ed:39:89:82:ee:92:
fc:99:ea:3c:02:1e:cf:10:b2:ac:96:b8:60:0d:31:
ff:fe:23:2e:69:9e:0c:28:6e:4f:0e:59:25:f1:5a:
2a:db:04:69:b3:ff:bf:eb:74:4a:16:9e:19:7f:c9:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:AB:35:50:A7:BD:28:DA:DC:5E:BC:F6:0C:7F:0C:8B:B2:98:62
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DYmrNVCnvSja3F689gx_DIuymGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2a:5b:ef:b9:91:60:1e:81:c1:1a:e8:b5:3a:2c:76:20:5f:8e:
97:d0:54:90:88:ff:2c:ab:97:47:db:5e:2b:29:b7:39:65:87:
05:96:14:f0:33:d1:ca:c9:5f:20:b4:a1:2b:3b:69:12:70:be:
60:86:36:c2:30:f0:a1:01:c2:f3:68:38:11:de:73:0f:ad:3c:
5e:48:7a:c9:6c:79:78:08:cf:d7:f5:9e:f3:de:0e:28:52:74:
89:70:bc:34:e7:53:74:65:68:57:f9:65:82:16:8d:95:9e:6b:
60:3a:6f:bf:09:0f:5c:89:63:fe:5f:2b:df:b6:91:9d:ee:66:
f5:10:f1:04:6e:df:a4:b2:94:cd:2b:e1:1e:d1:06:fb:3d:88:
1d:e4:1a:d5:be:81:a4:c0:0d:fb:57:67:5a:b3:75:28:91:11:
c9:a0:f9:cf:fb:9c:5f:21:d4:00:ab:58:d1:c3:97:c9:54:84:
4c:34:ce:c5:d5:10:10:fc:aa:b5:91:f1:b0:c8:11:2e:67:a5:
c5:b4:44:e1:6c:91:1c:97:66:5f:c9:eb:f0:39:e3:2e:fe:c3:
68:a4:0c:17:f5:41:92:cc:8f:af:de:fc:c5:e8:65:1d:36:34:
46:e5:a8:6e:70:fa:7a:79:03:76:35:59:7b:2e:c0:85:89:a7:
52:a7:ae:4d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZfIsXbLHD7La4nAbtbQHNc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNzAyMDExMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDg5YWIzNTUwYTdiZDI4ZGFkYzVlYmNmNjBjN2YwYzhiYjI5ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CVwQYvrwhoBOZNLmp+e4jEkDyZi
kmTaxy4jjfpiZIgU0bOHiiZ0hfDlWrVEFhbfhu/1DZ1bkJsIRMBH7QL6Y+chm4Vw
0dCdBiQoOkO2C+/0UzXPrzhCbvZMtOZyAhrIRWN+x8sRLYariw+tC55gYExZ3a9z
gvLspCPUXCKqkKWbmwSxkTiPTYeFb0rK9aRCh/q9yt6ccg+aGHhwj3mFTnXGH/HN
o+k4FlszVH/k5zyoUnCJ+dfg45F315G2Gy/4Ke4OE16IiLC2YqHtOYmC7pL8meo8
Ah7PELKslrhgDTH//iMuaZ4MKG5PDlkl8Voq2wRps/+/63RKFp4Zf8n4vQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFA2JqzVQp70o2txevPYMfwyLsphiMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvRFltck5WQ252U2phM0Y2ODlneF9ESXV5bUdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAKlvvuZFgHoHBGui1Oix2IF+O
l9BUkIj/LKuXR9teKym3OWWHBZYU8DPRyslfILShKztpEnC+YIY2wjDwoQHC82g4
Ed5zD608Xkh6yWx5eAjP1/We894OKFJ0iXC8NOdTdGVoV/llghaNlZ5rYDpvvwkP
XIlj/l8r37aRne5m9RDxBG7fpLKUzSvhHtEG+z2IHeQa1b6BpMAN+1dnWrN1KJER
yaD5z/ucXyHUAKtY0cOXyVSETDTOxdUQEPyqtZHxsMgRLmelxbRE4WyRHJdmX8nr
8DnjLv7DaKQMF/VBksyPr978xehlHTY0RuWobnD6enkDdjVZey7AhYmnUqeuTQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:02:45 2025 by rpki-client