Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/a0_xrQ3nowYGGrbdofzk0XuoZRY.roa
File: a0_xrQ3nowYGGrbdofzk0XuoZRY.roa (raw, json)
Hash identifier: ci4OYebyMfmQPIdAvigMceQVWkAUoy4wxRCWQzSsVYU=
Subject key identifier: 6B:4F:F1:AD:0D:E7:A3:06:06:1A:B6:DD:A1:FC:E4:D1:7B:A8:65:16
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977D973D2C89B48EAEFAD9576F9B5C56D0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/a0_xrQ3nowYGGrbdofzk0XuoZRY.roa
Signing time: Tue 17 Jun 2025 11:12:32 +0000
ROA not before: Tue 17 Jun 2025 11:12:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 12:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:97:3d:2c:89:b4:8e:ae:fa:d9:57:6f:9b:5c:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 17 11:12:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4ff1ad0de7a306061ab6dda1fce4d17ba86516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:07:ce:96:f8:a2:92:f4:21:e0:d8:20:9e:
fe:9b:a2:7f:65:96:0d:6f:ea:27:f1:9e:5b:92:9e:
38:53:a9:c2:a6:28:4b:0d:92:76:d2:d5:8e:7d:3e:
4c:99:f7:11:a8:5c:a8:27:9e:6b:4f:c2:e2:ef:cb:
dc:40:f3:7f:42:bb:4f:96:df:63:d4:23:e4:55:0b:
c1:49:9a:e7:ad:f5:a3:30:b7:4d:eb:9e:f8:2b:c2:
4f:e6:c6:83:d4:c1:cb:c7:39:2b:34:d6:f4:6a:a9:
08:e9:73:51:d9:1d:3b:3d:ae:5b:46:16:ae:95:a6:
f5:80:24:bc:60:3c:26:2f:46:fc:4c:5b:17:b7:3c:
5e:53:df:05:a0:13:c8:16:7c:e1:20:64:f1:e6:16:
41:51:ca:76:34:b0:7d:71:07:47:3c:f6:8f:cf:fd:
9c:c5:b7:be:fa:1a:df:32:56:8f:04:d7:44:c9:b2:
74:e3:26:90:f8:bc:9f:46:c8:ec:4e:15:c9:a2:9f:
84:65:79:58:fd:de:1c:91:95:bb:5c:ac:c0:a3:5e:
27:8f:f2:b4:83:5b:c8:bd:73:da:16:d5:02:25:7c:
b3:cc:a0:36:55:7b:ee:72:1d:b2:89:96:5e:1a:dc:
fb:2d:a5:8a:4d:e1:b8:84:83:54:7b:f7:0f:70:12:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:F1:AD:0D:E7:A3:06:06:1A:B6:DD:A1:FC:E4:D1:7B:A8:65:16
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/a0_xrQ3nowYGGrbdofzk0XuoZRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3f:8f:ab:bc:b1:73:1b:ce:f8:b2:26:6b:3c:a2:e9:74:07:a5:
83:51:d3:00:70:48:06:1c:95:91:27:11:c2:a1:9f:b9:87:63:
71:ef:64:ef:20:e3:be:14:6c:0c:9c:a8:bc:0f:3b:b0:25:9e:
1a:ac:9b:dc:8a:42:16:17:18:71:8e:a8:d4:33:62:40:a6:2d:
29:cc:7f:5a:c2:81:45:45:d8:ef:9b:4b:d5:9e:f6:fc:e5:97:
0a:85:0e:33:61:31:5b:3e:00:1b:b2:af:42:6d:6d:a7:5b:dc:
16:7f:21:ba:ac:21:76:12:08:83:4f:dc:cd:74:d5:53:73:36:
5c:93:62:1b:5d:bc:2f:d3:a8:c2:4c:bf:e3:c5:2f:d7:da:b1:
2d:e2:1a:e3:9f:03:3c:07:c9:92:f0:37:ac:ba:bd:cf:af:d7:
b8:cc:52:32:63:84:e6:09:2b:85:2f:31:bd:73:ea:26:0b:dc:
36:0f:70:70:b2:20:80:a2:50:b8:6e:a9:c7:0f:cc:57:d1:ee:
c0:b8:99:64:98:a7:ef:f8:c7:93:71:e1:70:3f:ef:d4:b5:29:
4f:e3:a3:50:e6:e3:78:02:a7:46:a0:06:08:12:e1:be:a2:58:
1e:3d:f4:c8:ad:c9:e5:f1:d9:58:c2:0f:34:83:79:d7:12:b2:
0a:98:0f:95
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZd9lz0sibSOrvrZV2+bXFbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE3MTExMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRmZjFhZDBkZTdhMzA2MDYxYWI2ZGRhMWZjZTRkMTdiYTg2NTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9kHzpb4opL0IeDYIJ7+m6J/ZZYN
b+on8Z5bkp44U6nCpihLDZJ20tWOfT5MmfcRqFyoJ55rT8Li78vcQPN/QrtPlt9j
1CPkVQvBSZrnrfWjMLdN6574K8JP5saD1MHLxzkrNNb0aqkI6XNR2R07Pa5bRhau
lab1gCS8YDwmL0b8TFsXtzxeU98FoBPIFnzhIGTx5hZBUcp2NLB9cQdHPPaPz/2c
xbe++hrfMlaPBNdEybJ04yaQ+LyfRsjsThXJop+EZXlY/d4ckZW7XKzAo14nj/K0
g1vIvXPaFtUCJXyzzKA2VXvuch2yiZZeGtz7LaWKTeG4hINUe/cPcBKDlQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGtP8a0N56MGBhq23aH85NF7qGUWMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvYTBfeHJRM25vd1lHR3JiZG9memswWHVvWlJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAP4+rvLFzG874siZrPKLpdAel
g1HTAHBIBhyVkScRwqGfuYdjce9k7yDjvhRsDJyovA87sCWeGqyb3IpCFhcYcY6o
1DNiQKYtKcx/WsKBRUXY75tL1Z72/OWXCoUOM2ExWz4AG7KvQm1tp1vcFn8huqwh
dhIIg0/czXTVU3M2XJNiG128L9Oowky/48Uv19qxLeIa458DPAfJkvA3rLq9z6/X
uMxSMmOE5gkrhS8xvXPqJgvcNg9wcLIggKJQuG6pxw/MV9HuwLiZZJin7/jHk3Hh
cD/v1LUpT+OjUObjeAKnRqAGCBLhvqJYHj30yK3J5fHZWMIPNIN51xKyCpgPlQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:16:22 2025 by rpki-client