Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lxkHR894JjWVOAW3dYwNCW1lej4.roa
File: lxkHR894JjWVOAW3dYwNCW1lej4.roa (raw, json)
Hash identifier: TBPxxkxEuP2DMzVPnEshMZ3AHv3g7GHbEdoMIyt7gAc=
Subject key identifier: 97:19:07:47:CF:78:26:35:95:38:05:B7:75:8C:0D:09:6D:65:7A:3E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C2795BA303030B4B423AEB50426DB80F
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lxkHR894JjWVOAW3dYwNCW1lej4.roa
Signing time: Mon 30 Jun 2025 20:13:42 +0000
ROA not before: Mon 30 Jun 2025 20:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:79:5b:a3:03:03:0b:4b:42:3a:eb:50:42:6d:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 20:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97190747cf782635953805b7758c0d096d657a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:0d:93:73:96:f0:53:21:0a:d9:58:b0:56:
f6:d0:4f:e3:5b:35:e0:23:7e:e9:3b:e1:1b:df:5b:
21:00:57:e3:9e:c3:d4:40:1b:d4:a9:9e:4d:5e:ca:
f1:90:f6:55:b4:d9:46:78:2e:eb:95:49:c3:68:7b:
a9:81:26:33:fc:a5:39:62:84:3c:46:8d:4b:23:31:
9a:70:74:5c:64:6a:4e:41:3c:00:3f:ff:f9:0e:60:
ca:a2:4b:55:80:ed:eb:c0:10:47:40:38:7e:29:2a:
9a:4d:3d:ed:a1:23:0b:ce:b8:1d:08:e8:ef:c7:9c:
ea:69:c7:3b:59:a4:39:cd:e5:c4:13:65:32:52:a5:
df:73:11:4a:99:06:cd:9e:db:5b:94:35:3f:d7:66:
c1:7e:9f:ac:be:9d:d3:d0:96:31:aa:93:9c:fa:a4:
2e:7a:4a:ad:a2:e6:26:84:77:ae:e2:65:c8:44:6f:
66:b7:71:57:05:94:39:c4:32:46:98:9e:78:9a:fb:
bf:e9:ee:20:99:f2:1c:6c:c1:54:d2:5b:b0:3d:a6:
a3:21:fd:d6:24:55:2f:46:25:f7:bd:b3:f6:50:b3:
0f:27:e5:a5:1c:02:3b:12:94:20:f2:9f:54:9a:3e:
50:e1:14:e1:c2:cb:ee:bf:34:75:ad:df:17:b5:5e:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:07:47:CF:78:26:35:95:38:05:B7:75:8C:0D:09:6D:65:7A:3E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lxkHR894JjWVOAW3dYwNCW1lej4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5b:0d:f8:90:90:28:c4:65:1c:a2:bb:e2:35:19:1b:15:ff:ed:
17:f2:c5:c6:27:93:4e:2e:b5:fa:13:6e:a0:85:b6:46:49:c1:
e4:b5:e6:72:0c:d5:25:cc:11:ea:cf:bc:10:5f:48:61:3b:5e:
70:dd:9a:ef:ad:b9:f8:cb:5c:da:3c:c6:1c:fe:f5:7b:77:b9:
e2:02:ed:1b:c8:93:ae:b0:e3:d2:92:e6:ae:23:46:90:2a:45:
3d:74:80:fc:ed:76:92:be:4d:4f:2d:89:36:c5:1f:38:50:86:
e1:e6:2e:0c:fd:83:ee:e8:65:20:6f:88:81:71:23:cd:2e:b9:
51:2c:3e:bb:4f:0e:ad:c4:ef:5f:85:07:a9:78:58:d3:34:a8:
c4:2b:8d:d0:ac:f7:a4:fb:c8:ff:81:e5:ef:6e:20:d9:58:6b:
7d:bc:34:89:f0:a3:68:ce:8c:5b:d7:c2:d9:f1:88:e2:ad:79:
0f:bf:8d:47:4e:28:1f:c6:72:fb:26:cf:69:83:52:14:a4:eb:
eb:6b:7a:3e:37:9e:d7:5a:57:6c:4f:ab:f5:a2:63:f4:ad:52:
c8:45:a2:2f:20:bc:a7:98:ce:20:0d:46:ff:9d:39:44:d5:4e:
50:3d:81:9e:3d:6d:32:96:fb:3e:be:21:39:4d:a3:29:31:35:
5c:b3:03:c1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZfCeVujAwMLS0I661BCbbgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjMwMjAxMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE5MDc0N2NmNzgyNjM1OTUzODA1Yjc3NThjMGQwOTZkNjU3YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZQNk3OW8FMhCtlYsFb20E/jWzXg
I37pO+Eb31shAFfjnsPUQBvUqZ5NXsrxkPZVtNlGeC7rlUnDaHupgSYz/KU5YoQ8
Ro1LIzGacHRcZGpOQTwAP//5DmDKoktVgO3rwBBHQDh+KSqaTT3toSMLzrgdCOjv
x5zqacc7WaQ5zeXEE2UyUqXfcxFKmQbNnttblDU/12bBfp+svp3T0JYxqpOc+qQu
ekqtouYmhHeu4mXIRG9mt3FXBZQ5xDJGmJ54mvu/6e4gmfIcbMFU0luwPaajIf3W
JFUvRiX3vbP2ULMPJ+WlHAI7EpQg8p9Umj5Q4RThwsvuvzR1rd8XtV6uCwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJcZB0fPeCY1lTgFt3WMDQltZXo+MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvbHhrSFI4OTRKaldWT0FXM2RZd05DVzFsZWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAWw34kJAoxGUcorviNRkbFf/t
F/LFxieTTi61+hNuoIW2RknB5LXmcgzVJcwR6s+8EF9IYTtecN2a7625+Mtc2jzG
HP71e3e54gLtG8iTrrDj0pLmriNGkCpFPXSA/O12kr5NTy2JNsUfOFCG4eYuDP2D
7uhlIG+IgXEjzS65USw+u08OrcTvX4UHqXhY0zSoxCuN0Kz3pPvI/4Hl724g2Vhr
fbw0ifCjaM6MW9fC2fGI4q15D7+NR04oH8Zy+ybPaYNSFKTr62t6Pjee11pXbE+r
9aJj9K1SyEWiLyC8p5jOIA1G/505RNVOUD2Bnj1tMpb7Pr4hOU2jKTE1XLMDwQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:25:32 2025 by rpki-client