Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rpm89z3BV6Wec0YYhuZzEJnO_CI.roa
File: Rpm89z3BV6Wec0YYhuZzEJnO_CI.roa (raw, json)
Hash identifier: n02Rq3txTSkJRjVuKvtnglE0POZOzFWxSkp5FDh6Fm4=
Subject key identifier: 46:99:BC:F7:3D:C1:57:A5:9E:73:46:18:86:E6:73:10:99:CE:FC:22
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C5EDC219007941E596B1F8D704F8B1F8
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rpm89z3BV6Wec0YYhuZzEJnO_CI.roa
Signing time: Tue 01 Jul 2025 12:19:42 +0000
ROA not before: Tue 01 Jul 2025 12:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 13:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:ed:c2:19:00:79:41:e5:96:b1:f8:d7:04:f8:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 12:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4699bcf73dc157a59e73461886e6731099cefc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:be:41:80:99:46:67:b5:67:88:88:be:a7:
4d:0f:45:f9:73:e4:e6:eb:f2:9c:7e:12:0e:34:77:
81:f8:0c:f6:33:13:bd:f3:0b:20:e7:90:95:40:66:
57:f2:7c:e5:d5:7b:d8:8b:d0:f2:14:14:c9:f2:cc:
8d:4d:5c:bd:95:a9:a5:f4:98:a7:d0:81:15:6e:44:
74:35:58:e7:74:f0:50:bb:7c:78:59:98:a2:8c:c3:
f9:52:24:38:61:dd:f8:7e:6d:66:dc:a5:68:75:9a:
f1:04:e4:7d:46:5a:4b:74:aa:bc:dc:ae:d9:e2:67:
7e:bc:bb:0d:f5:22:d5:40:16:57:cc:c7:22:45:74:
01:96:ed:bd:c4:85:e6:41:eb:71:7c:5e:c5:a2:4e:
94:2d:a8:75:35:02:5e:b6:de:c2:f2:50:3a:ed:5b:
57:98:9e:28:24:ee:69:75:d5:cd:bc:0d:f1:b4:02:
c9:3e:6e:08:61:99:d8:43:60:c1:f5:fc:5c:bf:8f:
38:a2:a1:ee:52:66:e9:e3:58:71:c5:69:a0:7d:60:
4d:85:58:05:22:58:12:9e:8d:90:45:1d:db:f4:25:
2d:98:6b:ed:3c:6e:e3:33:25:c6:8f:17:59:e1:fe:
8d:8a:3f:1a:1f:3a:c6:19:35:e7:33:f8:bb:36:1a:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:BC:F7:3D:C1:57:A5:9E:73:46:18:86:E6:73:10:99:CE:FC:22
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rpm89z3BV6Wec0YYhuZzEJnO_CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
54:77:59:2d:ac:70:61:6c:ce:27:c9:82:b3:79:7f:4c:fd:a5:
13:15:eb:0d:1f:2f:47:da:0d:db:22:a2:b9:f8:a8:87:93:a9:
34:f9:8e:22:15:40:7c:32:34:7a:11:d2:67:66:a3:49:c9:7f:
2a:e1:69:85:fb:10:2b:b9:5e:9c:ff:df:a1:03:42:03:89:9c:
f4:44:39:42:20:e8:7b:6f:34:41:26:43:b7:1e:32:98:2c:a4:
79:25:c3:fc:42:0f:5a:38:2f:a6:9e:e1:4a:66:3f:14:64:ad:
05:ba:9f:cb:23:3d:53:54:ff:a8:c0:9c:98:2a:0f:ea:63:1d:
e1:bc:d4:db:5b:d0:fb:59:b7:26:9e:ba:26:de:95:02:3d:5a:
56:97:32:9b:f2:cc:fc:e2:48:61:15:45:2f:ce:90:c1:b3:8c:
11:a2:b8:da:fa:6c:64:a8:58:e2:3d:e8:58:9c:ca:12:62:b4:
fa:09:db:f9:90:bc:c2:9b:a1:af:9c:9b:0e:89:76:3c:a7:df:
de:8d:35:1a:29:a1:13:57:23:c3:8d:8d:9b:ea:cf:1c:1f:8b:
b1:96:bb:7b:15:f5:99:21:17:b9:e8:b3:16:9c:02:27:d7:6b:
85:f4:da:a2:2b:13:63:cf:f5:53:bf:53:24:6e:cc:2b:6d:46:
90:f1:b1:c0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZfF7cIZAHlB5Zax+NcE+LH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNzAxMTIxOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njk5YmNmNzNkYzE1N2E1OWU3MzQ2MTg4NmU2NzMxMDk5Y2VmYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0By+QYCZRme1Z4iIvqdND0X5c+Tm
6/KcfhIONHeB+Az2MxO98wsg55CVQGZX8nzl1XvYi9DyFBTJ8syNTVy9laml9Jin
0IEVbkR0NVjndPBQu3x4WZiijMP5UiQ4Yd34fm1m3KVodZrxBOR9RlpLdKq83K7Z
4md+vLsN9SLVQBZXzMciRXQBlu29xIXmQetxfF7Fok6ULah1NQJett7C8lA67VtX
mJ4oJO5pddXNvA3xtALJPm4IYZnYQ2DB9fxcv484oqHuUmbp41hxxWmgfWBNhVgF
IlgSno2QRR3b9CUtmGvtPG7jMyXGjxdZ4f6Nij8aHzrGGTXnM/i7Nhp1SQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEaZvPc9wVelnnNGGIbmcxCZzvwiMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvUnBtODl6M0JWNldlYzBZWWh1WnpFSm5PX0NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAVHdZLaxwYWzOJ8mCs3l/TP2l
ExXrDR8vR9oN2yKiufioh5OpNPmOIhVAfDI0ehHSZ2ajScl/KuFphfsQK7lenP/f
oQNCA4mc9EQ5QiDoe280QSZDtx4ymCykeSXD/EIPWjgvpp7hSmY/FGStBbqfyyM9
U1T/qMCcmCoP6mMd4bzU21vQ+1m3Jp66Jt6VAj1aVpcym/LM/OJIYRVFL86QwbOM
EaK42vpsZKhY4j3oWJzKEmK0+gnb+ZC8wpuhr5ybDol2PKff3o01GimhE1cjw42N
m+rPHB+LsZa7exX1mSEXueizFpwCJ9drhfTaoisTY8/1U79TJG7MK21GkPGxwA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:26:08 2025 by rpki-client