Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IXxMihwGHW8HczQ_BuCbP0Cye5A.roa
File: IXxMihwGHW8HczQ_BuCbP0Cye5A.roa (raw, json)
Hash identifier: motH99/orL8tznwyD3CPlaObD+RmaK8kKt2neHoMvm8=
Subject key identifier: 21:7C:4C:8A:1C:06:1D:6F:07:73:34:3F:06:E0:9B:3F:40:B2:7B:90
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979F14B3213BBC66BB3EE7BCCCE8D56F8E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IXxMihwGHW8HczQ_BuCbP0Cye5A.roa
Signing time: Mon 23 Jun 2025 23:17:03 +0000
ROA not before: Mon 23 Jun 2025 23:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:14:b3:21:3b:bc:66:bb:3e:e7:bc:cc:e8:d5:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 23:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=217c4c8a1c061d6f0773343f06e09b3f40b27b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:6e:38:af:db:54:3a:83:61:fc:a8:00:34:
b1:ca:81:63:2c:08:5a:e1:d2:e8:f7:01:53:7c:8e:
7d:24:bd:51:76:36:2a:ab:9e:41:13:ce:a3:10:53:
79:91:1e:ab:43:23:86:1b:8a:fb:e5:67:15:22:45:
8c:6c:24:3b:25:9a:f5:60:53:26:fa:bd:14:10:5c:
df:b9:54:e0:e5:8c:27:d3:23:cd:62:60:4a:59:31:
5c:da:f7:01:c0:e9:43:47:ad:9f:d4:eb:80:fd:f9:
52:44:cf:a0:06:90:9d:d9:88:35:e1:34:e2:c1:da:
34:d0:6a:10:ec:0a:ad:7c:ea:07:67:61:1c:f0:cc:
b9:0c:bd:cf:50:54:b6:22:98:2b:ee:f1:b8:0d:69:
35:c2:16:db:be:a7:b3:d4:eb:08:9d:48:9e:a8:6f:
10:1e:4a:ca:6e:20:99:7f:eb:33:b9:08:6d:87:ac:
9d:ea:c4:e8:8c:a1:a1:54:80:3f:a6:92:2d:6f:02:
4a:81:dd:4d:b0:c1:61:68:8a:30:f1:a9:ab:0a:ff:
ef:a9:6a:e4:83:c5:a8:b7:f3:1c:89:03:73:34:5b:
b6:5e:53:00:3e:f3:4b:54:16:a9:aa:2a:66:53:24:
42:9a:91:1c:dd:63:2b:e0:f9:69:c9:60:8c:89:94:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:4C:8A:1C:06:1D:6F:07:73:34:3F:06:E0:9B:3F:40:B2:7B:90
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IXxMihwGHW8HczQ_BuCbP0Cye5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
30:59:f2:b6:35:e3:da:8d:e7:3b:9e:94:54:89:bd:da:84:b8:
62:cb:f2:47:92:63:d2:fc:dc:74:f6:ba:d1:ff:99:ff:25:10:
78:bd:b8:60:9d:bd:51:a8:ff:72:9c:d7:4a:73:49:5d:72:eb:
64:5d:65:2e:53:dd:33:48:40:bb:f0:72:09:62:3a:2b:93:a0:
20:95:2e:35:7b:cf:18:fd:f7:09:57:7e:fb:12:9a:99:62:bf:
83:13:ac:3e:bd:0c:05:2b:0c:7e:ed:4c:fc:16:96:3d:71:bb:
5e:26:ae:4c:04:2b:45:b9:33:6c:65:34:25:5b:2b:f7:ce:58:
54:be:94:b0:7a:7a:df:69:fa:d7:2e:f0:c2:29:93:07:40:77:
92:1a:36:2a:9b:65:82:bc:ff:8a:6e:86:da:d8:60:e6:e7:d0:
a9:f4:3d:3e:4f:1a:7b:29:00:08:80:99:00:fc:cc:35:16:69:
7a:fa:77:5a:2c:17:b3:35:e6:b7:ba:70:5f:f8:33:f5:a2:f6:
52:f8:ae:b2:20:9b:21:c7:69:77:1d:4e:fc:f1:5f:8c:72:95:
a5:5b:da:df:c7:5b:95:36:68:ef:de:7f:d4:c7:e4:8a:0f:25:
34:5d:48:96:bf:b9:14:96:56:a1:12:71:93:70:d9:b2:ca:3b:
f5:83:d0:66
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZefFLMhO7xmuz7nvMzo1W+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIzMjMxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTdjNGM4YTFjMDYxZDZmMDc3MzM0M2YwNmUwOWIzZjQwYjI3YjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGVuOK/bVDqDYfyoADSxyoFjLAha
4dLo9wFTfI59JL1RdjYqq55BE86jEFN5kR6rQyOGG4r75WcVIkWMbCQ7JZr1YFMm
+r0UEFzfuVTg5Ywn0yPNYmBKWTFc2vcBwOlDR62f1OuA/flSRM+gBpCd2Yg14TTi
wdo00GoQ7AqtfOoHZ2Ec8My5DL3PUFS2Ipgr7vG4DWk1whbbvqez1OsInUieqG8Q
HkrKbiCZf+szuQhth6yd6sTojKGhVIA/ppItbwJKgd1NsMFhaIow8amrCv/vqWrk
g8Wot/MciQNzNFu2XlMAPvNLVBapqipmUyRCmpEc3WMr4PlpyWCMiZS+fwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFCF8TIocBh1vB3M0Pwbgmz9AsnuQMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvSVh4TWlod0dIVzhIY3pRX0J1Q2JQMEN5ZTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAMFnytjXj2o3nO56UVIm92oS4
YsvyR5Jj0vzcdPa60f+Z/yUQeL24YJ29Uaj/cpzXSnNJXXLrZF1lLlPdM0hAu/By
CWI6K5OgIJUuNXvPGP33CVd++xKamWK/gxOsPr0MBSsMfu1M/BaWPXG7XiauTAQr
RbkzbGU0JVsr985YVL6UsHp632n61y7wwimTB0B3kho2Kptlgrz/im6G2thg5ufQ
qfQ9Pk8aeykACICZAPzMNRZpevp3WiwXszXmt7pwX/gz9aL2UviusiCbIcdpdx1O
/PFfjHKVpVva38dblTZo795/1Mfkig8lNF1Ilr+5FJZWoRJxk3DZsso79YPQZg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:27:07 2025 by rpki-client