Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IWpzlYRAuV1XhcjnzXA6JzHLN6Y.roa
File: IWpzlYRAuV1XhcjnzXA6JzHLN6Y.roa (raw, json)
Hash identifier: WdJzy5W+CsCGt6uJj3Il8CRORU4GuzgVaXMWdx1trgA=
Subject key identifier: 21:6A:73:95:84:40:B9:5D:57:85:C8:E7:CD:70:3A:27:31:CB:37:A6
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A211BB1B14DBFE6B0B2F9B1B2CF39E56
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IWpzlYRAuV1XhcjnzXA6JzHLN6Y.roa
Signing time: Tue 24 Jun 2025 13:12:40 +0000
ROA not before: Tue 24 Jun 2025 13:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 14:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:11:bb:1b:14:db:fe:6b:0b:2f:9b:1b:2c:f3:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 13:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=216a73958440b95d5785c8e7cd703a2731cb37a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:40:9f:38:ee:4d:17:12:ef:07:db:e8:14:
0e:bd:c2:b3:fe:68:92:8c:18:0e:f5:6a:e0:fb:d4:
9b:97:8f:7b:3c:ad:79:cf:ff:22:6e:78:3c:76:16:
e8:ac:56:2a:49:bf:c7:73:58:b6:4d:0e:4d:ce:d8:
48:50:a9:7f:ee:e4:f6:37:c6:6c:21:21:85:83:dd:
cb:80:98:4f:27:14:be:fc:ed:b6:e3:c7:18:91:20:
47:7d:03:20:a5:26:e6:ee:4a:00:bb:08:b7:e2:f0:
60:36:39:e8:87:a4:04:6d:53:36:22:b5:ef:ad:49:
6e:89:93:64:ac:5e:00:35:c1:ca:38:3b:00:89:b5:
5f:74:06:6b:5c:02:91:10:52:66:81:57:96:28:c6:
50:a4:67:e8:be:00:fb:f7:d9:a8:ca:7f:3c:f5:8e:
11:b1:c9:36:31:d0:a8:3e:4f:1e:5b:f9:5c:c3:56:
83:3e:99:33:7e:00:72:a7:b0:8c:bb:15:92:e1:b3:
75:65:47:27:e9:14:b0:6d:94:0f:f2:80:fe:de:0d:
cc:c4:85:7f:5c:58:3d:4d:4e:ce:3b:f4:4c:01:fc:
cd:15:ea:89:a9:ce:73:f7:5c:c2:47:c9:11:50:15:
be:0d:1c:0a:77:11:44:c2:0a:76:b8:9d:9d:f4:6d:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:73:95:84:40:B9:5D:57:85:C8:E7:CD:70:3A:27:31:CB:37:A6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IWpzlYRAuV1XhcjnzXA6JzHLN6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
14:9c:05:22:5c:53:78:ee:82:d7:2d:ae:08:e9:83:08:12:3e:
79:50:0a:c1:e1:df:72:ee:66:78:c3:00:a7:5b:f8:63:45:0a:
18:34:d7:69:b4:de:48:e3:d4:2a:df:5f:03:cb:aa:29:62:ee:
9f:5d:bc:0c:53:30:c8:36:96:51:12:0c:8e:a8:36:2f:8d:06:
4a:e3:ca:eb:36:cc:02:dd:04:0a:09:32:99:9b:54:a5:7e:58:
e2:e4:df:fc:05:f5:a8:15:9f:4b:3c:c9:a7:ab:a4:f3:19:57:
aa:bc:0b:d5:eb:51:ac:f1:5b:e7:98:28:15:b9:fc:a4:9d:53:
a2:ad:01:5f:fb:dd:13:85:d8:4a:19:44:92:11:52:0b:08:dd:
35:85:d8:46:54:1a:a9:5a:a4:6d:06:0f:ea:69:81:aa:96:99:
bb:77:33:c0:b9:00:df:2f:76:52:42:2d:46:5f:da:d4:ff:a9:
36:a5:1b:28:d6:25:58:0c:74:41:5f:1c:58:37:96:9b:a3:86:
39:ab:83:5e:25:96:c9:2c:bf:7a:52:79:51:ff:6f:0e:3d:b8:
5b:f7:ed:fc:e5:30:18:03:db:40:d6:cc:a2:99:b8:6a:d7:9f:
58:00:38:14:3f:78:6b:c6:4a:d3:99:93:a6:62:bd:6f:0a:9b:
68:18:f8:fc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeiEbsbFNv+awsvmxss855WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI0MTMxMjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTZhNzM5NTg0NDBiOTVkNTc4NWM4ZTdjZDcwM2EyNzMxY2IzN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1AnzjuTRcS7wfb6BQOvcKz/miS
jBgO9Wrg+9Sbl497PK15z/8ibng8dhborFYqSb/Hc1i2TQ5NzthIUKl/7uT2N8Zs
ISGFg93LgJhPJxS+/O2248cYkSBHfQMgpSbm7koAuwi34vBgNjnoh6QEbVM2IrXv
rUluiZNkrF4ANcHKODsAibVfdAZrXAKREFJmgVeWKMZQpGfovgD799moyn889Y4R
sck2MdCoPk8eW/lcw1aDPpkzfgByp7CMuxWS4bN1ZUcn6RSwbZQP8oD+3g3MxIV/
XFg9TU7OO/RMAfzNFeqJqc5z91zCR8kRUBW+DRwKdxFEwgp2uJ2d9G35dwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFCFqc5WEQLldV4XI581wOicxyzemMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvSVdwemxZUkF1VjFYaGNqbnpYQTZKekhMTjZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAFJwFIlxTeO6C1y2uCOmDCBI+
eVAKweHfcu5meMMAp1v4Y0UKGDTXabTeSOPUKt9fA8uqKWLun128DFMwyDaWURIM
jqg2L40GSuPK6zbMAt0ECgkymZtUpX5Y4uTf/AX1qBWfSzzJp6uk8xlXqrwL1etR
rPFb55goFbn8pJ1Toq0BX/vdE4XYShlEkhFSCwjdNYXYRlQaqVqkbQYP6mmBqpaZ
u3czwLkA3y92UkItRl/a1P+pNqUbKNYlWAx0QV8cWDeWm6OGOauDXiWWySy/elJ5
Uf9vDj24W/ft/OUwGAPbQNbMopm4atefWAA4FD94a8ZK05mTpmK9bwqbaBj4/A==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:05:24 2025 by rpki-client