Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d5a1sqgwhTPo52xTrMMeu3thL3I.roa
File: d5a1sqgwhTPo52xTrMMeu3thL3I.roa (raw, json)
Hash identifier: 0QdsEQOfjst+SALX1oRIM5Yq/zrZ/xeKnE5tCSjKwxI=
Subject key identifier: 77:96:B5:B2:A8:30:85:33:E8:E7:6C:53:AC:C3:1E:BB:7B:61:2F:72
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197824F80F6BBBAE5B0BBA6AB8720101BEE
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d5a1sqgwhTPo52xTrMMeu3thL3I.roa
Signing time: Wed 18 Jun 2025 09:12:17 +0000
ROA not before: Wed 18 Jun 2025 09:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:4f:80:f6:bb:ba:e5:b0:bb:a6:ab:87:20:10:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 09:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7796b5b2a8308533e8e76c53acc31ebb7b612f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:48:4b:bf:9e:0f:3e:59:4b:c7:21:59:eb:
03:ee:37:41:eb:ec:a1:33:6b:33:88:ae:56:6a:b6:
ab:c6:c0:1a:01:88:28:88:5a:27:0c:0d:da:7e:4c:
c1:cb:67:e7:c3:f9:e1:c7:5e:20:99:66:7e:87:b5:
29:08:01:02:b6:c7:d8:2f:a8:86:14:ad:16:da:ef:
c1:41:92:57:00:60:75:cd:2a:b8:ad:5e:ab:b9:d8:
0c:91:99:63:ba:bd:2c:c4:9e:02:8e:b2:ab:c3:7e:
3b:89:2c:e9:33:04:bc:a4:16:b6:ec:a1:4f:fe:b5:
e0:09:37:bf:c5:38:55:b1:ac:c1:55:53:3b:6d:d4:
5c:b7:4c:d9:cc:ca:d9:0b:41:7c:04:c5:27:2d:06:
90:f5:84:84:65:2e:b9:17:f7:1f:5f:a4:81:11:e8:
02:88:15:11:77:d3:aa:04:d0:28:24:f2:cd:f9:1b:
06:f2:46:66:9f:16:f2:60:63:30:df:3f:c2:36:8e:
37:c3:b2:f3:78:dd:3e:56:83:56:7b:c2:24:cd:64:
7a:0d:c7:93:55:d1:d3:bc:82:57:1d:df:77:58:ff:
e5:12:67:08:aa:7e:bc:cf:e3:13:cd:f8:59:1a:fd:
43:5f:c4:12:ad:8d:29:b7:68:18:e9:46:91:aa:87:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:B5:B2:A8:30:85:33:E8:E7:6C:53:AC:C3:1E:BB:7B:61:2F:72
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d5a1sqgwhTPo52xTrMMeu3thL3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
26:b8:5a:50:81:4a:8d:cf:80:cb:cb:1a:85:aa:5f:b5:ac:2c:
f5:7b:0d:6a:c8:05:9b:1e:77:93:0a:61:8f:83:0b:b3:70:17:
21:cc:69:95:2c:f8:68:6c:eb:80:46:b8:d1:89:32:0c:78:a7:
cd:47:2a:0b:e3:ea:9c:84:50:94:00:0f:94:a1:67:a9:ed:34:
68:81:b0:c1:53:62:b2:ff:b7:4a:9b:1f:c4:93:fa:67:82:a5:
ce:a6:a2:fc:4f:38:9c:05:68:8a:c0:d7:b4:00:38:6a:5b:6e:
12:1d:d4:68:56:da:79:a4:ab:ff:7e:52:6e:5c:76:20:cf:b1:
96:e2:0f:29:ef:8b:b6:c6:c4:e3:e6:a9:9b:5d:6e:2b:df:57:
14:c2:7d:7d:2b:fa:d5:93:13:1f:f8:89:bb:a6:41:60:e0:e1:
5e:85:ee:80:28:0b:84:54:35:2d:82:c5:96:19:1a:c7:f7:6c:
2f:f8:83:6f:2a:37:2f:82:e7:bc:3e:87:f6:41:9f:23:b1:35:
8f:2e:f6:9e:8f:82:53:64:4c:37:33:58:ab:d8:63:fd:4e:8a:
7d:4f:a5:12:11:35:4d:44:e1:4f:ec:c7:32:93:8f:f8:cc:86:
f9:85:dd:b1:b8:be:aa:41:c1:5b:b5:1b:67:4a:2c:e4:80:a9:
c5:dc:3e:d1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZeCT4D2u7rlsLumq4cgEBvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE4MDkxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzk2YjViMmE4MzA4NTMzZThlNzZjNTNhY2MzMWViYjdiNjEyZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyBIS7+eDz5ZS8chWesD7jdB6+yh
M2sziK5WararxsAaAYgoiFonDA3afkzBy2fnw/nhx14gmWZ+h7UpCAECtsfYL6iG
FK0W2u/BQZJXAGB1zSq4rV6rudgMkZljur0sxJ4CjrKrw347iSzpMwS8pBa27KFP
/rXgCTe/xThVsazBVVM7bdRct0zZzMrZC0F8BMUnLQaQ9YSEZS65F/cfX6SBEegC
iBURd9OqBNAoJPLN+RsG8kZmnxbyYGMw3z/CNo43w7LzeN0+VoNWe8IkzWR6DceT
VdHTvIJXHd93WP/lEmcIqn68z+MTzfhZGv1DX8QSrY0pt2gY6UaRqocznwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHeWtbKoMIUz6OdsU6zDHrt7YS9yMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvZDVhMXNxZ3doVFBvNTJ4VHJNTWV1M3RoTDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAJrhaUIFKjc+Ay8sahapftaws
9XsNasgFmx53kwphj4MLs3AXIcxplSz4aGzrgEa40YkyDHinzUcqC+PqnIRQlAAP
lKFnqe00aIGwwVNisv+3SpsfxJP6Z4Klzqai/E84nAVoisDXtAA4altuEh3UaFba
eaSr/35Sblx2IM+xluIPKe+LtsbE4+apm11uK99XFMJ9fSv61ZMTH/iJu6ZBYODh
XoXugCgLhFQ1LYLFlhkax/dsL/iDbyo3L4LnvD6H9kGfI7E1jy72no+CU2RMNzNY
q9hj/U6KfU+lEhE1TUThT+zHMpOP+MyG+YXdsbi+qkHBW7UbZ0os5ICpxdw+0Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:04:45 2025 by rpki-client