Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UG8REJob__qmAfZ5fVz0lePLa9Q.roa
File: UG8REJob__qmAfZ5fVz0lePLa9Q.roa (raw, json)
Hash identifier: Xvadk+zqxPHBRt0oDQYY4En3hSdA4iS87ma90oIgfuo=
Subject key identifier: 50:6F:11:10:9A:1B:FF:FA:A6:01:F6:79:7D:5C:F4:95:E3:CB:6B:D4
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197978E6F201D79493134AD8497F0EA1140
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UG8REJob__qmAfZ5fVz0lePLa9Q.roa
Signing time: Sun 22 Jun 2025 12:13:03 +0000
ROA not before: Sun 22 Jun 2025 12:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 13:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:97:8e:6f:20:1d:79:49:31:34:ad:84:97:f0:ea:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 12:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506f11109a1bfffaa601f6797d5cf495e3cb6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:c8:bd:0d:67:b6:ac:9e:65:58:2b:d0:78:
fe:86:6f:79:71:b8:9b:99:0d:01:75:65:e7:bb:60:
72:54:dd:90:34:fe:19:01:52:05:55:23:55:16:16:
8c:28:87:ed:17:9f:1d:35:6c:3e:b6:4c:b6:52:d9:
d4:82:9e:8e:ae:e3:49:cc:a0:c4:73:df:a7:1d:45:
58:6d:b9:8e:4a:c2:a6:a9:aa:be:5c:09:f1:f7:ba:
46:60:54:1b:1c:75:76:0f:4a:2f:1e:f9:a7:99:ac:
40:7d:de:d5:df:12:5d:2a:08:b0:c1:23:d2:c5:15:
ea:09:1b:05:53:99:ff:b8:30:38:d6:fd:1e:47:f9:
3b:5e:dd:7c:6c:44:db:b2:b8:5b:da:da:59:d5:2e:
23:b4:43:7c:1f:63:d1:d7:57:46:78:00:e7:5b:a2:
94:9d:6b:b2:8c:a5:a4:ca:fc:c7:f5:0e:f1:fd:13:
63:6f:90:18:57:b3:00:68:f1:fd:63:2b:7d:79:82:
7f:d6:7f:92:39:6a:c7:01:73:bc:54:e5:10:81:54:
db:ea:71:28:f0:d0:ba:c3:c3:67:95:55:f7:c7:98:
57:92:20:e6:88:7b:13:5e:00:46:14:6b:10:97:37:
47:19:2e:d9:8e:a8:d2:4b:b9:f6:43:17:b5:1e:0d:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:11:10:9A:1B:FF:FA:A6:01:F6:79:7D:5C:F4:95:E3:CB:6B:D4
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UG8REJob__qmAfZ5fVz0lePLa9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2e:cc:aa:e5:55:b7:db:9d:bd:7e:c8:24:da:47:3a:93:13:eb:
4d:c1:74:91:16:34:13:6c:c8:f9:01:0e:f0:08:31:ab:e8:c7:
4d:ee:cc:b4:d2:1f:d4:3b:ad:a2:d9:3d:12:26:e7:5f:d6:9f:
a9:44:ed:fb:4f:cc:e4:60:cd:6c:13:2b:ed:cb:07:d7:eb:02:
56:65:12:44:95:07:a1:c4:8a:02:26:8d:ac:44:85:c0:b8:79:
cd:37:65:af:8b:c4:d2:da:d9:11:aa:f5:22:ea:9c:4b:d3:df:
20:ac:15:65:d7:93:c2:10:90:37:14:ad:99:28:bc:92:82:d2:
c8:ba:c9:57:67:9e:0e:5a:8f:a8:b3:c8:e9:33:2e:25:60:11:
78:1b:58:7c:44:37:78:6f:3d:f7:89:fa:ca:17:b3:ca:ac:64:
7a:33:52:72:fe:29:06:9a:a4:c7:1c:10:6e:0b:a8:82:ef:d1:
bf:41:1e:08:06:ff:ec:70:95:72:7a:3d:fc:0c:8b:8b:1c:9c:
a5:9c:42:9e:1c:66:99:c6:22:12:12:a8:00:ab:6c:04:8e:00:
b1:99:d8:59:a0:0c:97:04:bb:ba:6d:59:4d:39:a8:f3:b1:75:
c1:06:d8:f1:26:d3:00:30:f2:6f:e8:d9:cc:e9:b7:45:a8:84:
c7:e3:ed:dd
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeXjm8gHXlJMTSthJfw6hFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjIyMTIxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZmMTExMDlhMWJmZmZhYTYwMWY2Nzk3ZDVjZjQ5NWUzY2I2YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIzIvQ1ntqyeZVgr0Hj+hm95cbib
mQ0BdWXnu2ByVN2QNP4ZAVIFVSNVFhaMKIftF58dNWw+tky2UtnUgp6OruNJzKDE
c9+nHUVYbbmOSsKmqaq+XAnx97pGYFQbHHV2D0ovHvmnmaxAfd7V3xJdKgiwwSPS
xRXqCRsFU5n/uDA41v0eR/k7Xt18bETbsrhb2tpZ1S4jtEN8H2PR11dGeADnW6KU
nWuyjKWkyvzH9Q7x/RNjb5AYV7MAaPH9Yyt9eYJ/1n+SOWrHAXO8VOUQgVTb6nEo
8NC6w8NnlVX3x5hXkiDmiHsTXgBGFGsQlzdHGS7ZjqjSS7n2Qxe1Hg0waQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFBvERCaG//6pgH2eX1c9JXjy2vUMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvVUc4UkVKb2JfX3FtQWZaNWZWejBsZVBMYTlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEALsyq5VW32529fsgk2kc6kxPr
TcF0kRY0E2zI+QEO8Agxq+jHTe7MtNIf1Dutotk9EibnX9afqUTt+0/M5GDNbBMr
7csH1+sCVmUSRJUHocSKAiaNrESFwLh5zTdlr4vE0trZEar1IuqcS9PfIKwVZdeT
whCQNxStmSi8koLSyLrJV2eeDlqPqLPI6TMuJWAReBtYfEQ3eG8994n6yhezyqxk
ejNScv4pBpqkxxwQbguogu/Rv0EeCAb/7HCVcno9/AyLixycpZxCnhxmmcYiEhKo
AKtsBI4AsZnYWaAMlwS7um1ZTTmo87F1wQbY8SbTADDyb+jZzOm3RaiEx+Pt3Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:15:25 2025 by rpki-client