Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rqtBfIA_-EL6OJpyl4yVDb0WomY.roa
File: rqtBfIA_-EL6OJpyl4yVDb0WomY.roa (raw, json)
Hash identifier: 0I5t4konvKbVqiCjEzrm5vp/p46O+1hvJyG8/NxdERI=
Subject key identifier: AE:AB:41:7C:80:3F:F8:42:FA:38:9A:72:97:8C:95:0D:BD:16:A2:66
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977802CADC870CE13120D131F705029790
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rqtBfIA_-EL6OJpyl4yVDb0WomY.roa
Signing time: Mon 16 Jun 2025 09:12:17 +0000
ROA not before: Mon 16 Jun 2025 09:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:02:ca:dc:87:0c:e1:31:20:d1:31:f7:05:02:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 09:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeab417c803ff842fa389a72978c950dbd16a266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:81:ce:a5:45:4b:ab:d0:f8:ff:22:68:cb:
28:46:c0:f9:be:a5:6d:68:68:6b:96:74:db:3c:61:
93:9a:a1:9c:7f:40:99:da:fa:09:fb:fb:07:94:f5:
3c:e4:91:57:ab:d9:e6:bc:45:77:85:67:63:0b:61:
c9:e2:01:5d:de:dc:12:58:e3:00:79:56:23:e0:b6:
0f:19:26:13:cd:46:a7:c7:1d:6b:09:e6:6f:ec:a2:
ae:fe:08:db:21:c4:84:fc:85:e1:3f:ea:97:30:18:
6a:12:03:58:25:9c:41:fd:92:be:a1:80:a7:c5:0e:
9f:22:cc:ea:17:26:2d:fc:82:d9:5f:70:f9:49:65:
cd:26:93:16:0b:a7:05:2f:5c:08:98:b6:6f:9f:dc:
22:10:4d:6c:ef:44:f7:cb:81:77:de:72:e9:bd:1c:
ca:01:32:41:98:e7:c4:35:e7:f0:50:5f:93:60:80:
43:87:1f:bf:a3:ce:cd:a8:59:86:bf:57:3f:69:2b:
73:e1:42:4c:e6:fd:4a:3f:3d:d8:ce:7f:72:28:17:
55:e1:01:d1:d9:04:f6:c3:6f:10:8c:c7:48:dd:f5:
aa:d2:81:d5:2f:c5:ec:55:69:80:dd:5d:31:e0:a7:
1f:5f:f5:25:64:c4:94:70:14:77:db:f2:e2:f1:a0:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:41:7C:80:3F:F8:42:FA:38:9A:72:97:8C:95:0D:BD:16:A2:66
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rqtBfIA_-EL6OJpyl4yVDb0WomY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0c:59:3a:62:15:13:7e:9f:a1:7c:68:5b:39:80:62:cb:3d:d6:
76:72:bf:82:69:5e:9c:b6:25:bb:f9:81:3f:fc:1f:b9:cc:86:
bd:ee:ac:52:23:58:68:ed:86:26:fd:bc:6c:d3:85:4b:d1:23:
1c:ff:1a:32:49:b5:3d:a8:e7:a6:b3:31:64:2e:9d:a1:59:c9:
0e:5c:ba:bb:aa:ae:f0:75:9a:9e:d7:1f:07:aa:f0:c6:9d:f6:
80:ba:22:42:29:ba:33:15:8a:e8:ab:9d:46:77:42:5b:9d:9e:
9b:f4:01:8c:51:bf:32:b4:eb:9a:fe:b3:17:e0:0b:3a:72:55:
74:cf:a4:48:00:52:ac:3a:c6:cc:38:c6:fb:27:3f:c8:1d:8e:
24:bf:52:1a:46:aa:fe:88:fa:79:99:06:c8:a1:27:15:65:f8:
3a:09:be:90:77:05:82:42:19:38:a9:9c:15:28:97:a6:e5:a6:
1e:e9:70:ab:4a:71:83:09:ba:11:5b:84:ba:3a:44:17:a3:37:
90:5e:9c:fa:36:5e:a4:f4:f4:68:e2:06:37:7d:58:76:43:a0:
12:21:a5:1c:8f:fb:1e:20:d9:52:04:59:d6:86:75:e8:96:72:
ba:9b:ff:66:7d:99:16:67:6a:1e:23:db:d3:1b:df:ff:f4:1b:
fd:f3:40:d4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZd4AsrchwzhMSDRMfcFApeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE2MDkxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWFiNDE3YzgwM2ZmODQyZmEzODlhNzI5NzhjOTUwZGJkMTZhMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoGBzqVFS6vQ+P8iaMsoRsD5vqVt
aGhrlnTbPGGTmqGcf0CZ2voJ+/sHlPU85JFXq9nmvEV3hWdjC2HJ4gFd3twSWOMA
eVYj4LYPGSYTzUanxx1rCeZv7KKu/gjbIcSE/IXhP+qXMBhqEgNYJZxB/ZK+oYCn
xQ6fIszqFyYt/ILZX3D5SWXNJpMWC6cFL1wImLZvn9wiEE1s70T3y4F33nLpvRzK
ATJBmOfENefwUF+TYIBDhx+/o87NqFmGv1c/aStz4UJM5v1KPz3Yzn9yKBdV4QHR
2QT2w28QjMdI3fWq0oHVL8XsVWmA3V0x4KcfX/UlZMSUcBR32/Li8aB57wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFK6rQXyAP/hC+jiacpeMlQ29FqJmMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvcnF0QmZJQV8tRUw2T0pweWw0eVZEYjBXb21ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEADFk6YhUTfp+hfGhbOYBiyz3W
dnK/gmlenLYlu/mBP/wfucyGve6sUiNYaO2GJv28bNOFS9EjHP8aMkm1PajnprMx
ZC6doVnJDly6u6qu8HWantcfB6rwxp32gLoiQim6MxWK6KudRndCW52em/QBjFG/
MrTrmv6zF+ALOnJVdM+kSABSrDrGzDjG+yc/yB2OJL9SGkaq/oj6eZkGyKEnFWX4
Ogm+kHcFgkIZOKmcFSiXpuWmHulwq0pxgwm6EVuEujpEF6M3kF6c+jZepPT0aOIG
N31YdkOgEiGlHI/7HiDZUgRZ1oZ16JZyupv/Zn2ZFmdqHiPb0xvf//Qb/fNA1A==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:29:24 2025 by rpki-client