Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oROi8g2U1ZfpBE3MAGrhtUlMAE4.roa
File: oROi8g2U1ZfpBE3MAGrhtUlMAE4.roa (raw, json)
Hash identifier: 7TK+gJd/RY0AdvTmDS7M0+J3f06yMsig1mOZz+qGuqk=
Subject key identifier: A1:13:A2:F2:0D:94:D5:97:E9:04:4D:CC:00:6A:E1:B5:49:4C:00:4E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197794C5FDD6F86D0118FEB94F756C0BFE2
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oROi8g2U1ZfpBE3MAGrhtUlMAE4.roa
Signing time: Mon 16 Jun 2025 15:12:17 +0000
ROA not before: Mon 16 Jun 2025 15:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:4c:5f:dd:6f:86:d0:11:8f:eb:94:f7:56:c0:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 15:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a113a2f20d94d597e9044dcc006ae1b5494c004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:05:51:b4:7d:e8:b2:06:5a:91:d3:77:35:
b3:d6:8c:92:df:05:84:9f:21:28:4d:d3:ca:54:7e:
36:f8:cb:6f:15:20:5c:bd:db:5e:70:a9:7a:68:1d:
5d:70:30:ca:47:0f:fa:ec:da:b0:b2:5c:c4:01:5b:
f4:6b:3e:6c:d6:46:84:c2:b3:da:38:58:c5:0d:a4:
c4:31:93:d4:b5:ec:89:36:2d:11:a3:a5:89:ca:55:
bd:7a:da:2d:18:b9:1b:24:b1:64:9c:ac:18:a0:dc:
c9:17:7c:c5:3e:d8:32:79:a3:fa:3c:5f:6c:f1:61:
4c:fd:fd:79:64:99:dd:44:f0:d9:68:df:9b:88:09:
ba:42:f0:a6:24:fc:36:f4:7c:65:45:7c:1c:8b:fd:
79:bd:6b:18:dc:e0:4a:f9:a1:f7:6d:d9:80:8a:fb:
25:84:6e:ac:d8:ec:17:5b:5c:cd:80:16:72:d1:03:
d4:6d:f4:c0:22:fc:46:38:f4:c8:61:6e:69:03:5d:
98:81:7f:6b:df:e3:1f:99:f1:ef:84:a4:4b:44:3e:
01:aa:f2:3a:4e:a3:cb:b8:d6:4f:e0:a8:41:16:e3:
7a:9a:ec:d4:2a:33:39:f1:c8:f5:76:b2:40:27:57:
3b:3b:ed:88:b8:25:dc:ef:00:37:60:7a:35:73:4f:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:A2:F2:0D:94:D5:97:E9:04:4D:CC:00:6A:E1:B5:49:4C:00:4E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oROi8g2U1ZfpBE3MAGrhtUlMAE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
47:05:17:54:18:67:05:4f:74:cc:fd:82:bb:60:3d:52:e8:57:
2d:16:98:71:bd:d8:31:35:f8:0b:fb:ac:82:cd:dc:75:7a:c5:
c9:d6:86:5c:ba:60:98:d7:c2:43:d4:57:4f:82:c0:1e:8a:0c:
d8:36:b2:51:10:b2:29:d6:c7:c3:59:9d:c8:ff:d5:c1:49:48:
a4:36:c7:7b:14:c4:c6:d9:9c:e2:f0:db:a2:b7:9a:a3:85:c8:
68:33:76:c0:14:01:8c:89:30:29:a1:2b:f0:bd:34:d2:44:3b:
8d:3c:38:01:65:c2:73:a1:48:30:f6:7b:7f:d6:e7:3f:76:2d:
12:7b:53:3b:b6:d8:4e:dc:70:18:93:a9:9f:29:f5:fb:c1:c5:
58:63:4a:7a:b9:ab:ec:b5:f1:45:f7:f5:df:7c:2a:bf:40:8a:
11:da:0e:16:8e:56:11:18:70:a2:84:86:40:af:5c:70:e8:99:
f6:2a:d4:58:52:86:11:3e:4a:9c:d4:7f:d1:91:dc:fe:b8:03:
e0:9a:fc:a6:15:a2:70:17:05:3d:c9:7c:aa:ee:a7:8c:19:b1:
b7:f5:87:96:db:d6:d7:48:46:7d:43:ab:83:9d:58:f8:99:27:
45:3f:34:b2:53:d2:1c:ff:15:a7:68:c5:9d:ce:14:db:ce:99:
aa:dd:3a:1f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZd5TF/db4bQEY/rlPdWwL/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE2MTUxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTEzYTJmMjBkOTRkNTk3ZTkwNDRkY2MwMDZhZTFiNTQ5NGMwMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAFUbR96LIGWpHTdzWz1oyS3wWE
nyEoTdPKVH42+MtvFSBcvdtecKl6aB1dcDDKRw/67NqwslzEAVv0az5s1kaEwrPa
OFjFDaTEMZPUteyJNi0Ro6WJylW9etotGLkbJLFknKwYoNzJF3zFPtgyeaP6PF9s
8WFM/f15ZJndRPDZaN+biAm6QvCmJPw29HxlRXwci/15vWsY3OBK+aH3bdmAivsl
hG6s2OwXW1zNgBZy0QPUbfTAIvxGOPTIYW5pA12YgX9r3+MfmfHvhKRLRD4BqvI6
TqPLuNZP4KhBFuN6muzUKjM58cj1drJAJ1c7O+2IuCXc7wA3YHo1c09OUwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKETovINlNWX6QRNzABq4bVJTABOMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvb1JPaThnMlUxWmZwQkUzTUFHcmh0VWxNQUU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEARwUXVBhnBU90zP2Cu2A9UuhX
LRaYcb3YMTX4C/usgs3cdXrFydaGXLpgmNfCQ9RXT4LAHooM2DayURCyKdbHw1md
yP/VwUlIpDbHexTExtmc4vDboreao4XIaDN2wBQBjIkwKaEr8L000kQ7jTw4AWXC
c6FIMPZ7f9bnP3YtEntTO7bYTtxwGJOpnyn1+8HFWGNKermr7LXxRff133wqv0CK
EdoOFo5WERhwooSGQK9ccOiZ9irUWFKGET5KnNR/0ZHc/rgD4Jr8phWicBcFPcl8
qu6njBmxt/WHltvW10hGfUOrg51Y+JknRT80slPSHP8Vp2jFnc4U286Zqt06Hw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:26:08 2025 by rpki-client