Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N3apMCVKPxY62UDlcSiA4_lfA7M.roa
File: N3apMCVKPxY62UDlcSiA4_lfA7M.roa (raw, json)
Hash identifier: RNcwisWiLLcR+MYuRCxSZ6UQ/RERSnF4EDIToWyJ2YE=
Subject key identifier: 37:76:A9:30:25:4A:3F:16:3A:D9:40:E5:71:28:80:E3:F9:5F:03:B3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978C9CEA9B536D309208820DE91189E231
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N3apMCVKPxY62UDlcSiA4_lfA7M.roa
Signing time: Fri 20 Jun 2025 09:13:03 +0000
ROA not before: Fri 20 Jun 2025 09:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 10:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:9c:ea:9b:53:6d:30:92:08:82:0d:e9:11:89:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 09:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3776a930254a3f163ad940e5712880e3f95f03b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:c1:cc:87:dd:bf:32:89:8f:13:a7:de:db:
b5:eb:19:bb:e4:03:6d:bd:31:51:fb:d9:e4:52:ef:
87:3f:fd:fe:7d:1e:82:c6:5f:16:fa:38:94:c5:36:
6e:a0:0d:6f:89:8f:c9:62:df:7e:8b:a3:3c:4b:e2:
61:ef:8d:aa:e1:67:92:d8:4f:46:de:3c:24:cb:5f:
ca:1c:8f:91:fd:4a:a7:b5:d2:50:9f:cd:c9:48:11:
74:57:d0:80:12:74:c3:d0:44:a7:32:c9:74:a2:74:
ee:65:e0:a6:e5:e1:73:8a:c5:9b:c3:e4:66:2c:3c:
4e:43:00:13:5e:82:2a:cf:07:94:fa:19:39:c0:05:
8d:d3:47:b4:2a:17:ef:cc:c2:e2:57:98:57:aa:76:
e7:7b:f9:44:14:7f:85:0b:e1:69:8f:b9:02:bd:2c:
9a:8d:ae:bd:b9:ab:bc:df:5a:dd:64:9b:57:86:16:
80:00:90:52:5a:f5:66:25:0d:96:dc:5c:cf:77:7a:
8b:59:6b:b7:64:50:7b:ff:19:ee:19:8e:90:40:53:
3a:c7:9f:64:cb:91:75:2d:71:18:10:7f:db:59:0c:
61:72:65:80:c3:55:f4:ad:65:e2:70:fc:d5:ad:ef:
0e:57:f1:a1:ee:d3:b6:2e:f3:48:1b:17:f1:0a:95:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:76:A9:30:25:4A:3F:16:3A:D9:40:E5:71:28:80:E3:F9:5F:03:B3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N3apMCVKPxY62UDlcSiA4_lfA7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
51:25:55:b4:d2:2f:3a:8f:dd:ca:00:a5:78:f8:4d:8f:24:98:
fa:66:66:58:f7:62:04:cf:7e:59:6d:12:43:c7:b8:9d:bd:fa:
18:3a:4a:f4:92:81:2a:0d:c8:01:59:7c:13:25:34:05:78:77:
ef:b1:f4:79:d6:51:96:4a:73:73:02:83:7b:c2:fc:b9:ad:96:
33:b9:8f:39:e0:a9:b1:d3:1d:09:60:a6:55:f6:e5:0c:4b:63:
72:85:bd:b4:fd:7c:a5:9f:20:3e:97:5f:0f:7d:46:93:df:e8:
64:86:c2:d7:44:e4:25:14:5f:40:05:00:c7:ea:2e:e3:6e:c7:
92:7d:22:fe:ba:f0:f9:18:8d:c6:18:9a:1c:ee:fa:c1:5f:a5:
60:32:ee:3d:3a:01:7c:62:08:91:f6:1c:fb:47:0d:07:59:c6:
1a:7c:36:db:fd:54:85:8b:16:d3:ff:ee:e8:99:d8:53:02:8f:
71:e9:b0:95:f5:31:ef:ed:0c:15:b3:df:50:2d:94:6c:c2:04:
e7:55:9f:18:bc:3f:8c:e1:9e:6c:ea:91:a2:ac:56:31:ae:24:
15:24:05:8d:36:46:67:ee:94:31:9d:86:64:c8:c9:44:e0:76:
fd:a0:4e:fc:9e:4f:1a:75:e3:77:f8:7d:29:24:57:9d:87:0a:
93:91:4a:8b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeMnOqbU20wkgiCDekRieIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIwMDkxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzc2YTkzMDI1NGEzZjE2M2FkOTQwZTU3MTI4ODBlM2Y5NWYwM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwafBzIfdvzKJjxOn3tu16xm75ANt
vTFR+9nkUu+HP/3+fR6Cxl8W+jiUxTZuoA1viY/JYt9+i6M8S+Jh742q4WeS2E9G
3jwky1/KHI+R/UqntdJQn83JSBF0V9CAEnTD0ESnMsl0onTuZeCm5eFzisWbw+Rm
LDxOQwATXoIqzweU+hk5wAWN00e0KhfvzMLiV5hXqnbne/lEFH+FC+Fpj7kCvSya
ja69uau831rdZJtXhhaAAJBSWvVmJQ2W3FzPd3qLWWu3ZFB7/xnuGY6QQFM6x59k
y5F1LXEYEH/bWQxhcmWAw1X0rWXicPzVre8OV/Gh7tO2LvNIGxfxCpWqPwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDd2qTAlSj8WOtlA5XEogOP5XwOzMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvTjNhcE1DVktQeFk2MlVEbGNTaUE0X2xmQTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAUSVVtNIvOo/dygClePhNjySY
+mZmWPdiBM9+WW0SQ8e4nb36GDpK9JKBKg3IAVl8EyU0BXh377H0edZRlkpzcwKD
e8L8ua2WM7mPOeCpsdMdCWCmVfblDEtjcoW9tP18pZ8gPpdfD31Gk9/oZIbC10Tk
JRRfQAUAx+ou427Hkn0i/rrw+RiNxhiaHO76wV+lYDLuPToBfGIIkfYc+0cNB1nG
Gnw22/1UhYsW0//u6JnYUwKPcemwlfUx7+0MFbPfUC2UbMIE51WfGLw/jOGebOqR
oqxWMa4kFSQFjTZGZ+6UMZ2GZMjJROB2/aBO/J5PGnXjd/h9KSRXnYcKk5FKiw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:01:05 2025 by rpki-client