Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LnTlg84s8NV9lm98UEWzPQ1AoPE.roa
File: LnTlg84s8NV9lm98UEWzPQ1AoPE.roa (raw, json)
Hash identifier: sRkS0YH//Ihn/9HtV/V82JpzYlRYHmZJW38hOSM9J9Y=
Subject key identifier: 2E:74:E5:83:CE:2C:F0:D5:7D:96:6F:7C:50:45:B3:3D:0D:40:A0:F1
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BA1A1AF1F5CD1E31CE6F808586D6D635
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LnTlg84s8NV9lm98UEWzPQ1AoPE.roa
Signing time: Sun 29 Jun 2025 05:12:42 +0000
ROA not before: Sun 29 Jun 2025 05:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 06:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:1a:1a:f1:f5:cd:1e:31:ce:6f:80:85:86:d6:d6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 05:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e74e583ce2cf0d57d966f7c5045b33d0d40a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:db:e7:ba:ad:19:63:c6:be:5c:f7:a9:9c:
50:cd:09:dc:cf:d5:18:52:7a:f8:21:2c:d8:74:18:
41:6a:98:b0:32:8c:f4:ff:28:c1:ff:cb:f6:fc:56:
a9:fb:fc:83:a9:b7:84:c5:68:76:15:4d:ab:c8:91:
92:39:bc:22:31:5c:c7:ed:16:12:90:e9:68:e9:ac:
0a:fe:86:c1:33:74:9d:73:16:f7:97:f4:4d:07:a4:
b4:34:e7:42:21:01:f8:21:5c:df:1d:2e:e0:24:ac:
9f:9a:1c:37:6b:e1:96:a6:58:a7:bc:15:89:87:09:
42:58:28:da:89:51:4d:c5:f0:96:3b:4d:04:d8:13:
cb:fe:c2:2e:e8:8d:3f:90:4d:ed:92:92:7f:e9:1f:
fd:61:e6:ba:78:7c:55:3f:e7:80:36:25:8d:0a:18:
ef:e8:f2:eb:4f:0f:1e:9f:fd:05:c9:70:d7:4e:1a:
58:ae:1e:4a:3d:f4:c4:31:8a:a6:59:22:65:65:70:
0f:e0:53:96:b4:f6:9c:3c:44:55:17:0f:b6:75:58:
82:9a:7e:6c:bc:28:3d:9d:4c:98:56:78:80:6c:d8:
54:33:2a:b2:c7:9d:ca:25:9d:fa:30:52:a4:e0:3c:
55:6d:7a:da:a1:6d:8b:f6:85:f9:67:f5:ad:69:0e:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:E5:83:CE:2C:F0:D5:7D:96:6F:7C:50:45:B3:3D:0D:40:A0:F1
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LnTlg84s8NV9lm98UEWzPQ1AoPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2e:e8:d0:f8:56:0f:f5:f4:35:29:ef:cb:55:ef:c0:c5:fd:7f:
b1:57:4c:2e:bc:62:ff:f6:3e:3f:73:af:23:c6:cd:a6:56:91:
af:ad:e0:1d:bc:3d:6f:f0:00:84:d6:44:eb:ef:17:3c:73:5f:
4f:6a:eb:42:3a:b3:22:f8:7f:bd:82:bf:0b:bb:2a:70:9b:8a:
22:49:da:a6:48:b9:e5:02:bc:c5:5e:2e:cf:36:d9:fc:da:c3:
08:a6:4c:e8:1f:22:fa:5d:4c:c0:bb:65:44:85:81:5a:51:22:
4c:1c:dc:bf:82:ac:3a:0d:b6:d3:67:76:db:43:cc:70:2d:83:
87:a6:09:e8:65:2f:ba:38:32:ae:16:cb:52:1a:e6:32:13:e5:
3c:5c:41:81:a4:25:10:2a:74:87:af:e5:66:0f:55:74:4b:fb:
04:05:c1:d3:e6:31:fd:0d:e8:0c:26:9a:b8:d7:64:84:82:3c:
ec:a8:7b:65:43:9f:56:60:11:de:80:b6:2b:f9:a7:43:a2:e8:
99:ec:cc:5a:58:cf:83:15:d8:70:fd:c9:f6:0d:c4:e7:66:4f:
f4:64:ea:e3:fd:2a:3c:10:7c:84:89:71:c7:3e:a3:fe:37:41:
bc:c3:03:5c:6f:34:98:45:a3:6a:51:45:b8:04:c2:24:94:de:
26:19:fc:1d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZe6Ghrx9c0eMc5vgIWG1tY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI5MDUxMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTc0ZTU4M2NlMmNmMGQ1N2Q5NjZmN2M1MDQ1YjMzZDBkNDBhMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zrb57qtGWPGvlz3qZxQzQncz9UY
Unr4ISzYdBhBapiwMoz0/yjB/8v2/Fap+/yDqbeExWh2FU2ryJGSObwiMVzH7RYS
kOlo6awK/obBM3Sdcxb3l/RNB6S0NOdCIQH4IVzfHS7gJKyfmhw3a+GWplinvBWJ
hwlCWCjaiVFNxfCWO00E2BPL/sIu6I0/kE3tkpJ/6R/9Yea6eHxVP+eANiWNChjv
6PLrTw8en/0FyXDXThpYrh5KPfTEMYqmWSJlZXAP4FOWtPacPERVFw+2dViCmn5s
vCg9nUyYVniAbNhUMyqyx53KJZ36MFKk4DxVbXraoW2L9oX5Z/WtaQ46YQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFC505YPOLPDVfZZvfFBFsz0NQKDxMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvTG5UbGc4NHM4TlY5bG05OFVFV3pQUTFBb1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEALujQ+FYP9fQ1Ke/LVe/Axf1/
sVdMLrxi//Y+P3OvI8bNplaRr63gHbw9b/AAhNZE6+8XPHNfT2rrQjqzIvh/vYK/
C7sqcJuKIknapki55QK8xV4uzzbZ/NrDCKZM6B8i+l1MwLtlRIWBWlEiTBzcv4Ks
Og2202d220PMcC2Dh6YJ6GUvujgyrhbLUhrmMhPlPFxBgaQlECp0h6/lZg9VdEv7
BAXB0+Yx/Q3oDCaauNdkhII87Kh7ZUOfVmAR3oC2K/mnQ6LomezMWljPgxXYcP3J
9g3E52ZP9GTq4/0qPBB8hIlxxz6j/jdBvMMDXG80mEWjalFFuATCJJTeJhn8HQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:07:24 2025 by rpki-client