Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mZxQdd7kYAqaK-Qh_eLH3iXSvV4.roa
File: mZxQdd7kYAqaK-Qh_eLH3iXSvV4.roa (raw, json)
Hash identifier: +YNWSkzTIr3e6veYHE9S0vprp7re0ZN5E0s/PU6TJxw=
Subject key identifier: 99:9C:50:75:DE:E4:60:0A:9A:2B:E4:21:FD:E2:C7:DE:25:D2:BD:5E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B077ACB64C6CF3AE4B33F25A9C78C66A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mZxQdd7kYAqaK-Qh_eLH3iXSvV4.roa
Signing time: Fri 27 Jun 2025 08:18:42 +0000
ROA not before: Fri 27 Jun 2025 08:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 09:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:77:ac:b6:4c:6c:f3:ae:4b:33:f2:5a:9c:78:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 08:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=999c5075dee4600a9a2be421fde2c7de25d2bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:64:4e:fc:5e:48:ce:c0:87:ad:37:4a:65:
16:e9:7b:d0:41:02:ad:45:a2:34:f7:d5:19:de:e0:
56:57:80:0c:b5:6c:65:ca:28:89:d9:dd:52:d0:74:
32:38:0e:9b:39:bd:cc:bb:3d:a4:cd:88:02:c7:8e:
2f:54:06:72:3d:ec:65:bc:fd:4b:84:4c:c3:95:11:
a7:86:c4:fb:75:e9:06:b8:23:69:7b:d9:f3:19:76:
d1:21:12:07:8f:7b:cb:a0:ab:81:13:a0:f7:41:c4:
27:fd:24:4a:a9:d2:35:da:b8:51:72:89:89:f0:ff:
ad:94:ac:46:d2:44:26:01:49:c0:4d:f8:1c:2c:29:
01:62:9e:fb:cc:bf:68:c7:cf:e2:27:1d:43:97:ec:
92:5f:d9:1a:fe:f7:9a:32:c2:82:2a:25:d3:57:18:
a4:a1:e1:70:cb:30:da:27:11:8e:33:5d:85:c0:2f:
ea:d8:db:66:d3:63:40:c8:72:22:9f:04:38:93:4b:
5f:6c:74:fa:4b:5d:96:73:06:bc:c7:ae:26:9c:4d:
2f:6d:fe:da:55:03:26:99:8c:a0:af:41:19:6c:f0:
06:e5:b5:bf:2b:a9:d0:62:eb:1c:f6:15:a3:0f:a0:
86:3c:7e:3e:bf:3a:11:8c:71:33:83:bd:ad:4c:4a:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:50:75:DE:E4:60:0A:9A:2B:E4:21:FD:E2:C7:DE:25:D2:BD:5E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mZxQdd7kYAqaK-Qh_eLH3iXSvV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
29:7d:08:a2:5c:6f:2a:f6:14:09:d2:25:a1:64:fb:fd:75:12:
9d:e3:27:d3:52:8d:01:7e:09:a2:b3:1e:71:25:97:e3:39:99:
6e:1c:71:f9:60:12:5b:cf:91:cd:a6:3e:37:b9:61:85:d4:a5:
dd:23:39:e2:b0:df:2d:ea:19:72:ad:9b:f6:66:ce:21:ec:c9:
48:a7:77:4c:d6:fd:01:07:27:99:d9:f5:79:b1:fe:ab:a4:20:
94:4e:28:38:12:40:b1:1e:ed:f5:8d:59:ae:cb:76:71:54:f5:
ec:3f:0f:fe:76:55:39:89:2c:7f:c7:a4:a0:c6:2b:e6:75:a6:
a0:18:00:86:25:3a:9c:82:fb:f7:c0:da:15:74:08:f7:6e:52:
72:80:e2:dd:1b:fe:18:f3:9d:62:20:d6:d7:7e:a0:83:31:38:
ef:6a:77:79:5c:f8:bd:26:b8:39:34:31:f8:87:87:a9:df:85:
8e:db:3c:d5:fa:6c:f0:6a:a3:28:af:36:9a:18:7c:9c:a0:e3:
ac:f3:e3:da:c6:09:71:c3:93:21:ee:76:f0:81:49:50:1d:06:
55:2c:54:3a:b4:5f:bb:ae:65:c9:7e:0d:7c:41:b8:9d:40:81:
4e:57:f3:19:b3:25:c4:fc:c4:5b:58:81:5a:c2:24:11:40:f9:
00:92:34:a1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZewd6y2TGzzrksz8lqceMZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI3MDgxODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTljNTA3NWRlZTQ2MDBhOWEyYmU0MjFmZGUyYzdkZTI1ZDJiZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxkTvxeSM7Ah603SmUW6XvQQQKt
RaI099UZ3uBWV4AMtWxlyiiJ2d1S0HQyOA6bOb3Muz2kzYgCx44vVAZyPexlvP1L
hEzDlRGnhsT7dekGuCNpe9nzGXbRIRIHj3vLoKuBE6D3QcQn/SRKqdI12rhRcomJ
8P+tlKxG0kQmAUnATfgcLCkBYp77zL9ox8/iJx1Dl+ySX9ka/veaMsKCKiXTVxik
oeFwyzDaJxGOM12FwC/q2Ntm02NAyHIinwQ4k0tfbHT6S12Wcwa8x64mnE0vbf7a
VQMmmYygr0EZbPAG5bW/K6nQYusc9hWjD6CGPH4+vzoRjHEzg72tTErqewIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJmcUHXe5GAKmivkIf3ix94l0r1eMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvbVp4UWRkN2tZQXFhSy1RaF9lTEgzaVhTdlY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAKX0IolxvKvYUCdIloWT7/XUS
neMn01KNAX4JorMecSWX4zmZbhxx+WASW8+RzaY+N7lhhdSl3SM54rDfLeoZcq2b
9mbOIezJSKd3TNb9AQcnmdn1ebH+q6QglE4oOBJAsR7t9Y1Zrst2cVT17D8P/nZV
OYksf8ekoMYr5nWmoBgAhiU6nIL798DaFXQI925ScoDi3Rv+GPOdYiDW136ggzE4
72p3eVz4vSa4OTQx+IeHqd+Fjts81fps8GqjKK82mhh8nKDjrPPj2sYJccOTIe52
8IFJUB0GVSxUOrRfu65lyX4NfEG4nUCBTlfzGbMlxPzEW1iBWsIkEUD5AJI0oQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:05 2025 by rpki-client