Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ptncwihozxvFO_RA3UUm3MhiLqs.roa
File: ptncwihozxvFO_RA3UUm3MhiLqs.roa (raw, json)
Hash identifier: 7ltnrbs+fLVfx4pKf6mSeVZ2/kn7wWQ8yxFEp9BIIkg=
Subject key identifier: A6:D9:DC:C2:28:68:CF:1B:C5:3B:F4:40:DD:45:26:DC:C8:62:2E:AB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C6210621122B92393708F619F9218E55
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ptncwihozxvFO_RA3UUm3MhiLqs.roa
Signing time: Tue 01 Jul 2025 13:15:42 +0000
ROA not before: Tue 01 Jul 2025 13:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 14:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:21:06:21:12:2b:92:39:37:08:f6:19:f9:21:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 13:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d9dcc22868cf1bc53bf440dd4526dcc8622eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:6b:22:de:1e:7f:ec:ca:4b:88:6d:20:7f:
0e:85:65:41:46:5d:a0:63:c6:26:37:ec:d8:f1:df:
2e:8b:ca:f3:6c:b1:e5:35:d8:97:a6:97:61:d7:34:
93:51:6a:7b:2f:fd:5f:23:be:2c:14:ca:00:8f:e7:
a0:c8:01:7b:61:d8:61:ff:d7:f9:0d:55:ba:47:f5:
e6:3a:12:78:db:c3:a7:a6:9e:02:7b:b0:af:a0:25:
9d:86:be:d7:6f:f7:69:1e:f3:55:ff:8f:06:89:0e:
04:28:04:e0:1b:37:d9:3b:de:7f:83:87:c0:ce:05:
3c:55:d8:91:2d:7f:ff:53:a4:30:d5:4e:55:cf:be:
40:ea:aa:41:d2:c4:6c:4d:7c:a4:b4:44:a1:53:43:
44:5c:11:1c:7f:c4:fe:28:09:48:42:e4:c8:55:fe:
e0:b7:ff:8b:85:72:c9:ce:be:08:7f:4f:e4:89:70:
24:b0:36:04:11:53:62:14:b8:3b:08:1e:e7:e5:37:
c0:36:5e:31:23:9e:05:47:5b:12:c5:3e:49:21:5f:
65:7a:d9:9e:d0:fe:f4:76:82:0b:f8:bf:d9:e0:8d:
ac:52:ce:ad:6d:ec:8d:9d:17:79:96:96:6b:72:27:
f9:4e:2c:90:2b:81:6f:18:ba:0c:2a:19:1e:24:08:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D9:DC:C2:28:68:CF:1B:C5:3B:F4:40:DD:45:26:DC:C8:62:2E:AB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ptncwihozxvFO_RA3UUm3MhiLqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
74:c7:ed:05:20:45:59:f2:79:cd:66:cb:bd:3d:dd:fb:cb:56:
8e:f3:39:73:81:63:2f:5f:e9:2d:f1:6e:dc:07:9e:56:d0:ca:
c7:b6:0a:65:71:62:5a:fe:91:54:d4:c1:2c:94:2c:af:6f:5b:
12:00:09:e9:a8:f9:de:04:9d:36:78:4e:77:98:36:16:30:6c:
50:83:e7:08:ff:8b:d8:28:ea:81:b2:d6:84:8d:59:88:9b:2b:
f4:50:02:c5:07:72:69:d1:ed:bc:5d:54:1e:f3:2a:96:e4:1e:
ea:d4:ef:e6:f4:1c:fe:c0:92:ad:d0:36:e7:83:f8:c9:40:00:
0f:35:d4:a2:43:43:49:96:f1:f5:5a:11:8d:c2:69:98:38:c2:
90:84:bd:43:e0:ac:1f:ea:a7:7a:4d:88:a9:25:50:44:b1:c5:
df:f4:4c:76:f9:0c:d9:7a:f9:e5:09:3e:6f:90:79:4c:ed:71:
e0:11:49:15:88:5e:42:69:f5:c7:12:a8:24:c2:0f:1b:88:6b:
f7:21:5c:29:c7:66:39:ff:be:58:1a:f3:a1:9b:8e:b6:62:b3:
27:19:0d:e4:fa:4a:b1:b6:1c:6e:e4:c3:2b:a4:75:2b:74:63:
46:21:ab:30:05:04:62:57:55:4e:f9:1a:02:45:99:b8:87:33:
74:cd:e4:bc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZfGIQYhEiuSOTcI9hn5IY5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNzAxMTMxNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ5ZGNjMjI4NjhjZjFiYzUzYmY0NDBkZDQ1MjZkY2M4NjIyZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyNrIt4ef+zKS4htIH8OhWVBRl2g
Y8YmN+zY8d8ui8rzbLHlNdiXppdh1zSTUWp7L/1fI74sFMoAj+egyAF7Ydhh/9f5
DVW6R/XmOhJ428Onpp4Ce7CvoCWdhr7Xb/dpHvNV/48GiQ4EKATgGzfZO95/g4fA
zgU8VdiRLX//U6Qw1U5Vz75A6qpB0sRsTXyktEShU0NEXBEcf8T+KAlIQuTIVf7g
t/+LhXLJzr4If0/kiXAksDYEEVNiFLg7CB7n5TfANl4xI54FR1sSxT5JIV9letme
0P70doIL+L/Z4I2sUs6tbeyNnRd5lpZrcif5TiyQK4FvGLoMKhkeJAiHcwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKbZ3MIoaM8bxTv0QN1FJtzIYi6rMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvcHRuY3dpaG96eHZGT19SQTNVVW0zTWhpTHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAdMftBSBFWfJ5zWbLvT3d+8tW
jvM5c4FjL1/pLfFu3AeeVtDKx7YKZXFiWv6RVNTBLJQsr29bEgAJ6aj53gSdNnhO
d5g2FjBsUIPnCP+L2CjqgbLWhI1ZiJsr9FACxQdyadHtvF1UHvMqluQe6tTv5vQc
/sCSrdA254P4yUAADzXUokNDSZbx9VoRjcJpmDjCkIS9Q+CsH+qnek2IqSVQRLHF
3/RMdvkM2Xr55Qk+b5B5TO1x4BFJFYheQmn1xxKoJMIPG4hr9yFcKcdmOf++WBrz
oZuOtmKzJxkN5PpKsbYcbuTDK6R1K3RjRiGrMAUEYldVTvkaAkWZuIczdM3kvA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:01 2025 by rpki-client