Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_cUE8_45pVT0vdHjEJL6rdGwt8M.roa
File: _cUE8_45pVT0vdHjEJL6rdGwt8M.roa (raw, json)
Hash identifier: R5ymGpKiDeynfvroPr2qRT5dhepXDijq3yfHuzdGxbI=
Subject key identifier: FD:C5:04:F3:FE:39:A5:54:F4:BD:D1:E3:10:92:FA:AD:D1:B0:B7:C3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977794EB47F149F192EC84106DDEA78CDF
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_cUE8_45pVT0vdHjEJL6rdGwt8M.roa
Signing time: Mon 16 Jun 2025 07:12:17 +0000
ROA not before: Mon 16 Jun 2025 07:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 08:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:94:eb:47:f1:49:f1:92:ec:84:10:6d:de:a7:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 07:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc504f3fe39a554f4bdd1e31092faadd1b0b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:22:68:70:1a:8f:99:02:d6:81:ca:3c:2d:
d3:26:f0:e8:30:da:37:22:2d:ab:14:ae:71:ed:2c:
43:ab:6e:a8:64:cf:ef:61:58:0e:2b:21:37:df:00:
b0:60:dc:42:87:2b:0c:a6:fd:76:d3:88:fc:09:b5:
b7:ff:0a:27:a3:fe:47:e6:33:f1:9f:9b:19:67:78:
95:b8:f5:92:ad:cc:7b:1c:96:72:ba:8e:5e:bd:4b:
67:75:eb:bd:1a:4d:e8:63:2b:f2:41:f4:54:2b:90:
fb:fc:78:6c:95:40:d1:0c:65:ab:2a:5e:ce:24:8b:
72:27:3a:0c:59:14:80:48:ef:93:72:87:02:ec:93:
b4:b0:9b:1a:65:cd:06:b7:ee:1e:eb:eb:d0:60:32:
08:f3:c1:7e:e9:8b:c9:ea:7c:3d:ec:ec:6e:11:76:
d0:70:a4:62:c2:b4:1d:cd:9f:f8:e0:3e:58:1f:b4:
3e:3b:59:42:64:27:92:22:e1:e9:55:05:af:90:61:
a7:cd:a3:c2:5b:b1:34:ad:18:3a:ab:fd:ba:36:b0:
25:a8:43:eb:2d:61:f9:a7:ad:af:c9:57:0b:cb:21:
96:bb:f6:26:78:35:e5:58:97:f7:73:69:f1:47:e3:
29:03:5c:f0:1a:85:d5:9d:fd:9a:c2:74:d2:a3:de:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:04:F3:FE:39:A5:54:F4:BD:D1:E3:10:92:FA:AD:D1:B0:B7:C3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_cUE8_45pVT0vdHjEJL6rdGwt8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3e:b8:ed:a3:e5:df:c6:14:52:08:aa:79:60:08:53:c4:f8:a6:
03:7f:62:4b:ac:32:36:e7:3c:8a:04:87:56:a9:7a:cc:cd:45:
06:a1:30:ae:8b:5e:e7:34:4c:74:90:9b:02:02:dc:03:8f:46:
b7:cf:e2:8e:2a:6d:f0:b3:28:41:cb:be:d1:5a:79:3f:7a:b4:
f7:f2:bc:61:f8:9d:76:64:20:6b:18:dd:28:78:e6:d6:dd:7f:
b2:44:29:58:38:43:fd:d2:7c:03:d8:bc:e6:9e:8b:7e:5d:0a:
1e:d7:56:ee:12:c6:0a:5f:6c:92:15:3f:aa:f4:fd:46:34:92:
83:25:53:53:2e:d2:fe:ba:90:1d:d1:e7:91:ce:b7:02:d7:8b:
b5:18:ea:cb:75:f8:7f:38:9c:f1:ea:ef:d0:5d:9e:63:7f:f4:
6d:79:9c:13:85:85:01:8a:3f:64:9a:01:1e:2c:8f:6f:d9:f2:
90:56:cc:64:f9:dc:15:b0:a6:be:4c:b5:75:27:7a:b2:45:53:
7f:55:df:39:22:d3:e2:51:6d:9e:fb:f7:03:50:d4:7f:12:78:
2d:40:7e:47:27:dd:43:dd:29:e5:c2:73:17:b1:0a:b0:ed:a8:
22:3d:62:18:d3:e0:22:66:96:ae:bf:a7:68:ea:d5:56:6c:37:
be:0b:19:27
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZd3lOtH8UnxkuyEEG3ep4zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE2MDcxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGM1MDRmM2ZlMzlhNTU0ZjRiZGQxZTMxMDkyZmFhZGQxYjBiN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1QiaHAaj5kC1oHKPC3TJvDoMNo3
Ii2rFK5x7SxDq26oZM/vYVgOKyE33wCwYNxChysMpv1204j8CbW3/wono/5H5jPx
n5sZZ3iVuPWSrcx7HJZyuo5evUtndeu9Gk3oYyvyQfRUK5D7/HhslUDRDGWrKl7O
JItyJzoMWRSASO+TcocC7JO0sJsaZc0Gt+4e6+vQYDII88F+6YvJ6nw97OxuEXbQ
cKRiwrQdzZ/44D5YH7Q+O1lCZCeSIuHpVQWvkGGnzaPCW7E0rRg6q/26NrAlqEPr
LWH5p62vyVcLyyGWu/YmeDXlWJf3c2nxR+MpA1zwGoXVnf2awnTSo95oTQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFP3FBPP+OaVU9L3R4xCS+q3RsLfDMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvX2NVRThfNDVwVlQwdmRIakVKTDZyZEd3dDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAPrjto+XfxhRSCKp5YAhTxPim
A39iS6wyNuc8igSHVql6zM1FBqEwrote5zRMdJCbAgLcA49Gt8/ijipt8LMoQcu+
0Vp5P3q09/K8YfiddmQgaxjdKHjm1t1/skQpWDhD/dJ8A9i85p6Lfl0KHtdW7hLG
Cl9skhU/qvT9RjSSgyVTUy7S/rqQHdHnkc63AteLtRjqy3X4fzic8erv0F2eY3/0
bXmcE4WFAYo/ZJoBHiyPb9nykFbMZPncFbCmvky1dSd6skVTf1XfOSLT4lFtnvv3
A1DUfxJ4LUB+RyfdQ90p5cJzF7EKsO2oIj1iGNPgImaWrr+naOrVVmw3vgsZJw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:05 2025 by rpki-client