Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HIzFIHpQnN82MLXqXeIarIskTqA.roa
File: HIzFIHpQnN82MLXqXeIarIskTqA.roa (raw, json)
Hash identifier: KKH1KgzfvC6HtM5/yxCyRy1GO5JhZADP2jvBjPjm96I=
Subject key identifier: 1C:8C:C5:20:7A:50:9C:DF:36:30:B5:EA:5D:E2:1A:AC:8B:24:4E:A0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979AFE41058DF3E011938400B51D72B699
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HIzFIHpQnN82MLXqXeIarIskTqA.roa
Signing time: Mon 23 Jun 2025 04:14:03 +0000
ROA not before: Mon 23 Jun 2025 04:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 05:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:fe:41:05:8d:f3:e0:11:93:84:00:b5:1d:72:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 04:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8cc5207a509cdf3630b5ea5de21aac8b244ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:92:1a:2b:b8:b1:93:f4:00:44:c8:d1:71:
20:3e:6d:f8:18:f6:03:de:cf:1d:12:bc:61:23:a5:
81:10:5c:6f:92:cd:41:da:eb:85:bf:95:03:81:b3:
1b:7b:d8:7a:f7:eb:c8:c5:2e:8f:4e:bb:af:6a:09:
51:a6:95:13:3a:52:fb:96:bf:91:4e:70:8a:90:b0:
84:89:e6:4b:6e:e4:95:60:88:fb:b9:30:23:a3:4b:
78:e2:89:8f:4f:e4:74:88:8e:29:ba:84:55:85:9a:
c9:e6:ae:da:0d:f9:97:09:c7:d1:b2:cd:03:d3:dd:
0c:9e:00:f1:f2:ae:85:43:9f:e1:bd:4c:ba:37:09:
cd:d5:41:fe:65:93:65:4f:6d:e3:e6:4a:6d:eb:b4:
91:00:e7:6d:8c:a2:c1:d1:48:8e:e9:d1:e4:8e:00:
a0:c0:88:e7:1a:50:8a:fd:31:d8:fd:c0:a4:f2:1b:
65:16:d5:06:b5:53:49:1f:46:27:f1:03:81:24:e5:
b4:8b:f7:f0:20:3e:8c:1f:83:d9:ac:c7:e6:fd:c9:
cd:ce:47:aa:97:e7:57:d2:bb:87:e0:9b:2f:4d:24:
79:73:ec:66:e2:11:af:83:68:90:4a:f7:dc:98:13:
c9:23:dc:4c:22:d8:3d:ce:c5:19:a6:1e:77:2c:21:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:C5:20:7A:50:9C:DF:36:30:B5:EA:5D:E2:1A:AC:8B:24:4E:A0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HIzFIHpQnN82MLXqXeIarIskTqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
63:2c:16:a7:67:81:90:3d:48:a2:b9:52:30:8d:4a:e5:76:2a:
dd:9e:11:9a:15:77:e1:ca:61:a6:cb:e5:b3:f5:e8:88:8d:33:
d1:07:12:a5:4e:3f:d1:b7:67:15:3e:6a:0d:7f:2b:b3:26:94:
a6:ca:fc:84:b6:0a:f1:c6:5d:66:e5:e7:7d:33:1f:23:b1:1a:
9f:ad:84:86:a6:8a:ca:69:c8:69:c2:2f:be:73:5f:6c:ff:07:
28:a8:58:02:c4:17:3b:00:04:9c:59:78:0d:05:b9:27:83:db:
6c:f5:2e:b7:8b:05:f7:e8:be:de:4d:b8:82:6d:47:f0:9f:93:
58:a8:c9:81:8c:59:bd:bb:15:61:5d:9e:35:77:a6:e7:53:4b:
aa:ac:6c:fa:5c:ae:09:a0:60:f0:cd:d7:62:f7:8e:31:b5:9b:
68:5c:a3:35:da:b1:63:80:c2:42:34:dc:0f:0f:dd:44:c9:2a:
ca:35:42:e1:f6:35:5d:dd:a1:57:2a:d4:83:93:a7:03:ab:43:
ca:a9:8e:c1:4f:ae:6c:b3:df:0d:5c:5d:0e:d1:e4:da:b3:e5:
90:0e:08:47:b1:aa:c0:0c:65:cd:13:30:bc:52:40:85:78:fd:
fd:93:bd:20:06:a3:b6:aa:26:de:f8:08:d3:08:e1:f7:66:85:
0c:43:52:47
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZea/kEFjfPgEZOEALUdcraZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIzMDQxNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzhjYzUyMDdhNTA5Y2RmMzYzMGI1ZWE1ZGUyMWFhYzhiMjQ0ZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApweSGiu4sZP0AETI0XEgPm34GPYD
3s8dErxhI6WBEFxvks1B2uuFv5UDgbMbe9h69+vIxS6PTruvaglRppUTOlL7lr+R
TnCKkLCEieZLbuSVYIj7uTAjo0t44omPT+R0iI4puoRVhZrJ5q7aDfmXCcfRss0D
090MngDx8q6FQ5/hvUy6NwnN1UH+ZZNlT23j5kpt67SRAOdtjKLB0UiO6dHkjgCg
wIjnGlCK/THY/cCk8htlFtUGtVNJH0Yn8QOBJOW0i/fwID6MH4PZrMfm/cnNzkeq
l+dX0ruH4JsvTSR5c+xm4hGvg2iQSvfcmBPJI9xMItg9zsUZph53LCFziwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFByMxSB6UJzfNjC16l3iGqyLJE6gMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvSEl6RklIcFFuTjgyTUxYcVhlSWFySXNrVHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAYywWp2eBkD1IorlSMI1K5XYq
3Z4RmhV34cphpsvls/XoiI0z0QcSpU4/0bdnFT5qDX8rsyaUpsr8hLYK8cZdZuXn
fTMfI7Ean62EhqaKymnIacIvvnNfbP8HKKhYAsQXOwAEnFl4DQW5J4PbbPUut4sF
9+i+3k24gm1H8J+TWKjJgYxZvbsVYV2eNXem51NLqqxs+lyuCaBg8M3XYveOMbWb
aFyjNdqxY4DCQjTcDw/dRMkqyjVC4fY1Xd2hVyrUg5OnA6tDyqmOwU+ubLPfDVxd
DtHk2rPlkA4IR7GqwAxlzRMwvFJAhXj9/ZO9IAajtqom3vgI0wjh92aFDENSRw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:04:47 2025 by rpki-client