Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MXzqJ5eia7KmTVK572a44pUsrgs.roa
File: MXzqJ5eia7KmTVK572a44pUsrgs.roa (raw, json)
Hash identifier: DMeHvv1Xw7onNhrsX6zBX4QqKRjtNoCzJ0V7y2Xoo04=
Subject key identifier: 31:7C:EA:27:97:A2:6B:B2:A6:4D:52:B9:EF:66:B8:E2:95:2C:AE:0B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B184D71C097B2E93CBF68328EF6E926B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MXzqJ5eia7KmTVK572a44pUsrgs.roa
Signing time: Fri 27 Jun 2025 13:12:42 +0000
ROA not before: Fri 27 Jun 2025 13:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 14:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:84:d7:1c:09:7b:2e:93:cb:f6:83:28:ef:6e:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 13:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=317cea2797a26bb2a64d52b9ef66b8e2952cae0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:93:c3:89:18:b8:b8:42:0f:d6:77:e8:22:
0a:45:21:85:0b:4d:fc:55:de:99:3b:3b:e0:ac:ef:
19:db:fe:66:f2:35:ba:98:84:70:98:e2:12:90:f3:
4b:2d:d9:92:ba:22:b5:85:1f:3b:6f:47:9e:dc:bb:
66:0e:ec:3b:1c:42:22:e4:f8:d6:e7:00:9d:2c:0f:
85:2b:7d:57:ca:09:ff:b4:ef:e5:b8:9e:8f:2d:85:
9d:82:4c:dc:a5:0b:8d:bb:75:0d:31:1f:37:fa:58:
0f:da:3c:23:3b:92:67:d2:5e:ce:a6:0b:31:ab:81:
4a:90:92:f1:37:c2:69:fb:4f:9b:b1:e0:7d:4c:a7:
8d:2e:91:32:a0:ce:ed:e0:40:f9:f7:31:d3:ae:fa:
9c:0b:59:b5:1c:81:bc:3f:6a:47:fe:e1:65:39:33:
35:56:ee:e7:19:fb:49:a0:53:d4:6a:30:9b:b3:93:
c0:c1:ce:bd:e7:e4:99:ca:a6:8f:e4:09:b4:ab:98:
b8:82:b7:0a:d6:7a:83:21:49:30:1c:0a:01:05:bc:
8c:ee:22:98:03:b7:21:cb:79:35:12:da:bd:ef:92:
48:5d:8d:02:d6:12:9f:56:2c:67:fd:ca:26:d4:e2:
98:71:40:30:82:6a:13:01:e1:d3:49:c5:d7:19:5d:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:EA:27:97:A2:6B:B2:A6:4D:52:B9:EF:66:B8:E2:95:2C:AE:0B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MXzqJ5eia7KmTVK572a44pUsrgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
28:b3:d9:bd:d5:f7:92:31:28:c3:92:78:93:67:dc:3b:e8:54:
18:eb:04:b6:d1:75:0a:e0:38:c0:6a:6b:2e:8c:1b:52:98:d4:
40:54:9f:6c:e7:4a:2e:9c:d1:98:9f:1c:38:af:96:be:4e:58:
4a:dc:23:e3:d7:62:49:35:7e:a3:80:60:92:2a:a4:9f:be:52:
08:63:05:27:f7:7e:68:b6:7a:00:18:37:1b:15:87:a0:20:b6:
e8:90:02:2e:19:f4:7a:38:94:a7:c2:28:d4:19:6f:c3:17:b3:
4c:e8:86:84:94:a9:ab:be:66:41:b1:7c:78:9d:5f:89:42:9e:
82:4b:18:04:0c:a3:53:70:84:86:90:11:28:40:03:ef:ec:b6:
2d:2a:e4:fa:a7:c2:fc:4b:65:1a:d8:85:80:fc:4b:b6:48:63:
52:e6:7e:f9:d1:05:1d:9f:8c:b0:cb:f6:6e:b0:33:dd:35:46:
7f:8f:f1:f6:8d:30:12:c7:dc:f8:fc:2a:c5:ca:c5:f5:6a:37:
78:e4:10:cf:ca:19:86:05:02:30:ca:d1:37:7a:f2:8b:85:98:
a7:5d:66:46:8a:9c:4e:ec:aa:b9:53:96:23:e3:42:4e:95:c7:
ff:e0:25:8d:f0:b3:e9:66:56:e3:86:67:dc:18:15:c2:98:7d:
6c:71:f4:53
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZexhNccCXsuk8v2gyjvbpJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI3MTMxMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTdjZWEyNzk3YTI2YmIyYTY0ZDUyYjllZjY2YjhlMjk1MmNhZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlKTw4kYuLhCD9Z36CIKRSGFC038
Vd6ZOzvgrO8Z2/5m8jW6mIRwmOISkPNLLdmSuiK1hR87b0ee3LtmDuw7HEIi5PjW
5wCdLA+FK31Xygn/tO/luJ6PLYWdgkzcpQuNu3UNMR83+lgP2jwjO5Jn0l7Opgsx
q4FKkJLxN8Jp+0+bseB9TKeNLpEyoM7t4ED59zHTrvqcC1m1HIG8P2pH/uFlOTM1
Vu7nGftJoFPUajCbs5PAwc695+SZyqaP5Am0q5i4grcK1nqDIUkwHAoBBbyM7iKY
A7chy3k1Etq975JIXY0C1hKfVixn/com1OKYcUAwgmoTAeHTScXXGV1a9QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDF86ieXomuypk1Sue9muOKVLK4LMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvTVh6cUo1ZWlhN0ttVFZLNTcyYTQ0cFVzcmdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAKLPZvdX3kjEow5J4k2fcO+hU
GOsEttF1CuA4wGprLowbUpjUQFSfbOdKLpzRmJ8cOK+Wvk5YStwj49diSTV+o4Bg
kiqkn75SCGMFJ/d+aLZ6ABg3GxWHoCC26JACLhn0ejiUp8Io1BlvwxezTOiGhJSp
q75mQbF8eJ1fiUKegksYBAyjU3CEhpARKEAD7+y2LSrk+qfC/EtlGtiFgPxLtkhj
UuZ++dEFHZ+MsMv2brAz3TVGf4/x9o0wEsfc+PwqxcrF9Wo3eOQQz8oZhgUCMMrR
N3ryi4WYp11mRoqcTuyquVOWI+NCTpXH/+AljfCz6WZW44Zn3BgVwph9bHH0Uw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:28:04 2025 by rpki-client