Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WpfYWzhIZXxWAqyz1X2ztbVY378.roa
File: WpfYWzhIZXxWAqyz1X2ztbVY378.roa (raw, json)
Hash identifier: E8BIR/gcKyWU7dNMTFCYW7wNMb/AkotJ4HKk9HjG6fI=
Subject key identifier: 5A:97:D8:5B:38:48:65:7C:56:02:AC:B3:D5:7D:B3:B5:B5:58:DF:BF
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A99633B727412207BAB08BEE2C731141
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WpfYWzhIZXxWAqyz1X2ztbVY378.roa
Signing time: Thu 26 Jun 2025 00:14:42 +0000
ROA not before: Thu 26 Jun 2025 00:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 01:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a9:96:33:b7:27:41:22:07:ba:b0:8b:ee:2c:73:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 00:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a97d85b3848657c5602acb3d57db3b5b558dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:28:29:07:97:83:45:e0:64:1b:cf:22:78:
db:aa:e6:f5:c5:2d:9f:09:25:de:c9:5e:28:16:d8:
d0:9d:36:e5:15:7e:c0:0c:33:05:83:b8:ee:23:f6:
12:ba:27:fb:bc:96:f7:8a:ae:7f:bb:54:73:62:20:
c6:e7:97:be:28:0a:84:94:72:cc:bf:88:10:e7:44:
6d:0d:2f:1b:08:e9:f8:ae:3a:fe:7d:ec:a8:f2:39:
bc:fa:18:12:0c:64:29:ff:59:38:df:2b:ea:75:81:
9c:de:fe:bf:b4:ef:42:d7:0c:11:14:80:4c:46:6b:
74:9a:3f:2c:48:6b:85:4a:37:4c:1d:4f:a3:7e:93:
32:7b:c8:2e:a5:46:87:3d:a5:61:0c:8b:1c:f4:54:
68:37:80:9e:d8:d2:d1:d1:d3:10:6d:8c:4c:84:2f:
cf:84:79:e6:3b:8c:1f:39:48:5a:01:c1:c6:88:59:
b2:2f:47:77:88:2a:f6:b1:6e:c7:12:f9:f3:1c:47:
1d:ef:99:7b:84:9b:8d:e3:77:bb:a4:ee:3b:4b:6e:
f3:f6:b9:b2:fe:9d:4f:bd:2c:f0:72:e8:48:79:07:
e5:16:58:f6:0f:12:35:83:d2:bb:fd:fd:35:0f:37:
03:28:39:72:d3:e1:42:6b:bf:cd:52:34:a0:0f:b6:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:D8:5B:38:48:65:7C:56:02:AC:B3:D5:7D:B3:B5:B5:58:DF:BF
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WpfYWzhIZXxWAqyz1X2ztbVY378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
52:e5:b6:f8:a1:f7:a1:64:d8:37:25:c8:62:7e:d1:97:81:0c:
91:bb:48:f8:95:b3:60:ab:51:42:dc:19:4e:75:29:1b:95:78:
e2:3e:e1:3c:5d:e9:d4:ff:78:2a:6d:cc:ec:aa:b2:79:3d:c4:
75:fe:fc:5f:02:c7:f9:42:26:14:00:3e:89:7b:f5:cb:a7:34:
a1:e0:4c:42:8b:43:83:08:84:37:0d:15:3c:2d:23:34:82:3a:
5c:18:e1:e3:ea:25:d9:11:f1:80:29:b4:ee:60:db:a6:d5:d6:
ed:d3:11:62:5c:53:f8:a8:0b:6d:92:e6:96:46:d6:d3:d4:9d:
b5:17:6b:35:81:15:95:c8:48:42:03:33:6f:07:33:88:6d:c0:
db:bb:b3:81:1a:1c:19:e2:4e:3b:b2:8f:fb:3e:f0:69:f5:ab:
c6:9d:12:ef:46:6d:b8:17:25:25:0a:c4:33:bf:4c:ef:b6:6f:
e7:0e:a0:2b:f7:f9:b8:a7:c0:d2:55:05:ac:b2:99:25:6f:30:
89:d2:25:ad:33:d5:32:ed:16:12:6a:95:56:ce:0a:6f:2b:d3:
40:08:38:3d:d2:e9:97:02:33:f6:1c:12:62:4e:b3:1d:21:99:
b5:65:59:39:78:e1:2d:ca:18:47:1c:34:25:99:83:9a:f4:3d:
2a:07:da:9c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZepljO3J0EiB7qwi+4scxFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI2MDAxNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk3ZDg1YjM4NDg2NTdjNTYwMmFjYjNkNTdkYjNiNWI1NThkZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JEoKQeXg0XgZBvPInjbqub1xS2f
CSXeyV4oFtjQnTblFX7ADDMFg7juI/YSuif7vJb3iq5/u1RzYiDG55e+KAqElHLM
v4gQ50RtDS8bCOn4rjr+feyo8jm8+hgSDGQp/1k43yvqdYGc3v6/tO9C1wwRFIBM
Rmt0mj8sSGuFSjdMHU+jfpMye8gupUaHPaVhDIsc9FRoN4Ce2NLR0dMQbYxMhC/P
hHnmO4wfOUhaAcHGiFmyL0d3iCr2sW7HEvnzHEcd75l7hJuN43e7pO47S27z9rmy
/p1PvSzwcuhIeQflFlj2DxI1g9K7/f01DzcDKDly0+FCa7/NUjSgD7bniwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFqX2Fs4SGV8VgKss9V9s7W1WN+/MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvV3BmWVd6aElaWHhXQXF5ejFYMnp0YlZZMzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAUuW2+KH3oWTYNyXIYn7Rl4EM
kbtI+JWzYKtRQtwZTnUpG5V44j7hPF3p1P94Km3M7KqyeT3Edf78XwLH+UImFAA+
iXv1y6c0oeBMQotDgwiENw0VPC0jNII6XBjh4+ol2RHxgCm07mDbptXW7dMRYlxT
+KgLbZLmlkbW09SdtRdrNYEVlchIQgMzbwcziG3A27uzgRocGeJOO7KP+z7wafWr
xp0S70ZtuBclJQrEM79M77Zv5w6gK/f5uKfA0lUFrLKZJW8widIlrTPVMu0WEmqV
Vs4KbyvTQAg4PdLplwIz9hwSYk6zHSGZtWVZOXjhLcoYRxw0JZmDmvQ9KgfanA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:07:23 2025 by rpki-client