Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oZiX0W7FWYgUYgvZHH_sc5n9hoM.roa
File: oZiX0W7FWYgUYgvZHH_sc5n9hoM.roa (raw, json)
Hash identifier: K/FbBkb+RQVMR7AV4aNl38M/xriREz6ovorbhYaE5Zo=
Subject key identifier: A1:98:97:D1:6E:C5:59:88:14:62:0B:D9:1C:7F:EC:73:99:FD:86:83
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B7BEC65E7D473D43DECC930504A55B71
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oZiX0W7FWYgUYgvZHH_sc5n9hoM.roa
Signing time: Sat 28 Jun 2025 18:13:42 +0000
ROA not before: Sat 28 Jun 2025 18:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 19:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:be:c6:5e:7d:47:3d:43:de:cc:93:05:04:a5:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 18:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19897d16ec5598814620bd91c7fec7399fd8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:2b:82:22:80:ad:75:d5:1e:f5:05:0b:52:
b7:58:2b:a8:f3:d2:ef:6c:ee:b5:06:a5:f6:e0:cf:
aa:83:1c:71:84:7b:7d:db:18:d6:5a:bb:78:06:a6:
cc:b0:35:59:05:84:40:dd:4b:95:6e:be:d7:89:eb:
98:af:da:7a:07:13:8a:4c:1e:8f:0e:73:5d:df:b9:
a0:e6:1a:6a:d6:b9:40:f9:8f:86:d2:ce:ad:7d:42:
d4:94:81:ea:df:95:3b:ec:ec:08:e4:24:1d:02:c4:
21:12:4e:e5:90:a6:3c:1e:a3:01:cf:0d:ff:bf:29:
0c:7e:0c:55:c0:f1:db:20:30:e3:b4:f4:e7:19:f2:
0e:69:37:9e:45:d4:8b:d5:d1:d3:86:5a:62:bb:5c:
05:6d:cb:2c:ee:99:38:a3:df:3e:12:15:d9:7b:8d:
9b:f8:7d:48:7c:35:ad:32:7b:69:8f:fd:0a:11:39:
ca:f5:62:b0:fe:bb:f8:c8:af:c9:96:52:99:78:78:
dd:73:f0:d8:51:56:73:47:bb:b4:f7:93:7f:71:db:
d1:36:c7:37:40:f4:e7:ec:29:1d:40:03:57:b1:0e:
ae:aa:0a:bd:b5:df:0b:98:c3:a9:50:e5:dd:a8:26:
a1:26:6f:e8:26:d9:2c:0e:80:18:c6:61:0a:de:2e:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:97:D1:6E:C5:59:88:14:62:0B:D9:1C:7F:EC:73:99:FD:86:83
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/oZiX0W7FWYgUYgvZHH_sc5n9hoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
80:11:96:5d:1a:c5:21:94:28:bd:5c:7e:63:ca:ac:9f:1a:d6:
b7:38:63:8f:0a:6c:14:40:cf:d2:6a:c8:c3:0d:d3:02:48:17:
a2:4f:72:27:55:85:77:3d:e7:cc:f5:64:66:f8:36:f3:f4:ed:
81:96:4b:33:85:92:3a:8c:7d:aa:25:8b:d7:b9:de:36:d1:ef:
c4:80:31:33:60:01:25:dc:98:53:f2:a9:49:ee:70:d0:fd:b2:
4c:75:ba:20:52:f9:c7:f2:9d:6e:66:35:1d:2c:83:a5:45:ec:
83:97:0e:e1:f0:a3:46:c6:a2:d3:e7:aa:50:61:42:58:d4:02:
00:a7:ee:fc:f0:5e:4b:c1:df:47:0d:05:c0:d3:18:64:6b:e3:
76:c5:8b:f3:aa:0d:aa:49:38:50:c4:2c:62:21:7c:aa:b0:9e:
9f:1b:84:ca:8b:9b:93:0a:3e:87:20:d3:22:7b:e7:28:00:e1:
7c:bc:6e:8a:0c:06:8a:b3:97:ee:f2:6b:3b:f6:3c:b6:78:af:
dc:bc:73:7f:f8:c5:37:0d:13:41:4e:b9:91:6a:f9:2f:00:05:
12:4c:f0:10:ad:13:21:98:35:0f:2a:5b:ec:ce:94:f6:ae:cd:
00:b8:26:17:5d:4c:01:ca:68:c4:99:09:68:b6:06:04:23:9c:
bd:10:d4:a8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZe3vsZefUc9Q97MkwUEpVtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI4MTgxMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTk4OTdkMTZlYzU1OTg4MTQ2MjBiZDkxYzdmZWM3Mzk5ZmQ4NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGgrgiKArXXVHvUFC1K3WCuo89Lv
bO61BqX24M+qgxxxhHt92xjWWrt4BqbMsDVZBYRA3UuVbr7XieuYr9p6BxOKTB6P
DnNd37mg5hpq1rlA+Y+G0s6tfULUlIHq35U77OwI5CQdAsQhEk7lkKY8HqMBzw3/
vykMfgxVwPHbIDDjtPTnGfIOaTeeRdSL1dHThlpiu1wFbcss7pk4o98+EhXZe42b
+H1IfDWtMntpj/0KETnK9WKw/rv4yK/JllKZeHjdc/DYUVZzR7u095N/cdvRNsc3
QPTn7CkdQANXsQ6uqgq9td8LmMOpUOXdqCahJm/oJtksDoAYxmEK3i6VtwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKGYl9FuxVmIFGIL2Rx/7HOZ/YaDMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvb1ppWDBXN0ZXWWdVWWd2WkhIX3NjNW45aG9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAgBGWXRrFIZQovVx+Y8qsnxrW
tzhjjwpsFEDP0mrIww3TAkgXok9yJ1WFdz3nzPVkZvg28/TtgZZLM4WSOox9qiWL
17neNtHvxIAxM2ABJdyYU/KpSe5w0P2yTHW6IFL5x/KdbmY1HSyDpUXsg5cO4fCj
Rsai0+eqUGFCWNQCAKfu/PBeS8HfRw0FwNMYZGvjdsWL86oNqkk4UMQsYiF8qrCe
nxuEyoubkwo+hyDTInvnKADhfLxuigwGirOX7vJrO/Y8tniv3Lxzf/jFNw0TQU65
kWr5LwAFEkzwEK0TIZg1Dypb7M6U9q7NALgmF11MAcpoxJkJaLYGBCOcvRDUqA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:39:32 2025 by rpki-client