Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/up3Cw8og409-8031zDXQrDecX8w.roa
File: up3Cw8og409-8031zDXQrDecX8w.roa (raw, json)
Hash identifier: Tlqwx6k8SL41+srZxbQ/k0YVbvLQNxpq8nrsU2UG4PM=
Subject key identifier: BA:9D:C2:C3:CA:20:E3:4F:7E:F3:4D:F5:CC:35:D0:AC:37:9C:5F:CC
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A4A7A866DBD280743B1DF258D444404A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/up3Cw8og409-8031zDXQrDecX8w.roa
Signing time: Wed 25 Jun 2025 01:15:40 +0000
ROA not before: Wed 25 Jun 2025 01:15:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 02:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a4:a7:a8:66:db:d2:80:74:3b:1d:f2:58:d4:44:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 01:15:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9dc2c3ca20e34f7ef34df5cc35d0ac379c5fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:db:64:51:6c:47:59:c7:26:2d:d1:7e:0c:
f7:bc:d8:4e:c6:1c:48:49:d5:35:ac:c9:c1:30:53:
64:95:2a:58:60:11:40:18:25:04:a3:f9:1b:4b:73:
34:a5:a3:1b:05:78:25:e0:5a:4a:13:f7:b3:3a:37:
8d:45:50:f4:c7:cf:91:e5:58:a4:dd:37:b2:21:9a:
bd:68:c7:82:fd:62:e7:fb:5a:7a:e7:59:20:c2:70:
e6:2d:23:e6:5e:52:64:53:e1:7d:a4:ed:a6:ee:e1:
42:25:28:d0:97:15:89:25:92:c5:c6:14:4e:2b:c3:
6a:1a:7b:e0:d0:b6:24:43:57:1c:1d:ec:4a:bd:e0:
60:7c:33:1a:42:f8:3e:b2:dd:28:5e:53:2c:70:d5:
1c:9d:59:d2:ae:48:73:e1:4b:7c:7c:5b:7d:e0:26:
eb:a1:e1:dc:c6:4d:00:5b:c9:ed:cd:46:c3:5b:4d:
db:72:60:c9:52:e0:bd:f0:48:8a:ef:19:02:da:84:
79:be:17:07:57:4d:e7:9c:d6:b4:1c:28:c0:c4:2c:
e6:98:5e:f6:0f:51:e3:4c:79:9b:92:0b:7e:ab:c7:
79:c9:6f:d9:f9:95:9c:2b:6c:93:64:1f:e0:bb:dd:
a3:1f:00:84:36:9f:8a:2f:b4:94:aa:74:cb:74:b8:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:C2:C3:CA:20:E3:4F:7E:F3:4D:F5:CC:35:D0:AC:37:9C:5F:CC
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/up3Cw8og409-8031zDXQrDecX8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
57:e6:5c:7c:d4:28:33:6f:7e:c4:c9:49:9e:ba:ff:8d:a9:2d:
22:f0:74:f7:1c:41:1e:ae:07:13:19:d5:81:b4:4a:3c:3e:2b:
da:8d:1a:73:f0:e0:2c:25:2b:e2:0e:6d:45:d9:2b:d3:4e:b2:
5d:ac:97:45:e5:d1:d8:65:ac:ae:83:f7:0a:d0:c0:45:83:da:
d1:8d:6f:39:7b:e8:e2:73:e5:1a:d5:d5:bd:b0:3b:3e:b2:73:
72:1a:76:09:22:d8:e1:65:fe:49:80:2a:94:13:93:5a:2d:27:
a6:5d:8d:b9:69:26:96:43:c4:5d:60:87:a0:62:52:bb:3c:00:
f6:86:0c:2f:8e:8f:a5:3b:b5:07:a5:9e:a8:89:af:2f:10:c4:
f1:73:db:88:9b:c4:cf:4b:48:1d:f7:63:49:fa:a1:04:5d:4f:
08:53:08:35:de:8f:b7:55:a9:b2:b1:f0:d3:a3:36:45:ef:c5:
2f:b7:4a:61:99:de:cb:d0:09:eb:3b:aa:01:fb:84:53:aa:8a:
aa:cc:e9:6c:02:58:0c:28:12:08:77:15:51:be:11:34:a0:51:
6d:75:d9:da:7b:92:1c:37:a6:3a:93:38:70:96:3e:33:78:aa:
5b:d6:7d:48:f1:ff:03:f8:99:2c:b5:87:4d:c8:f7:94:df:1f:
fa:5a:1f:19
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZekp6hm29KAdDsd8ljUREBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI1MDExNTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTlkYzJjM2NhMjBlMzRmN2VmMzRkZjVjYzM1ZDBhYzM3OWM1ZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQjbZFFsR1nHJi3Rfgz3vNhOxhxI
SdU1rMnBMFNklSpYYBFAGCUEo/kbS3M0paMbBXgl4FpKE/ezOjeNRVD0x8+R5Vik
3TeyIZq9aMeC/WLn+1p651kgwnDmLSPmXlJkU+F9pO2m7uFCJSjQlxWJJZLFxhRO
K8NqGnvg0LYkQ1ccHexKveBgfDMaQvg+st0oXlMscNUcnVnSrkhz4Ut8fFt94Cbr
oeHcxk0AW8ntzUbDW03bcmDJUuC98EiK7xkC2oR5vhcHV03nnNa0HCjAxCzmmF72
D1HjTHmbkgt+q8d5yW/Z+ZWcK2yTZB/gu92jHwCENp+KL7SUqnTLdLjuwwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLqdwsPKIONPfvNN9cw10Kw3nF/MMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvdXAzQ3c4b2c0MDktODAzMXpEWFFyRGVjWDh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAV+ZcfNQoM29+xMlJnrr/jakt
IvB09xxBHq4HExnVgbRKPD4r2o0ac/DgLCUr4g5tRdkr006yXayXReXR2GWsroP3
CtDARYPa0Y1vOXvo4nPlGtXVvbA7PrJzchp2CSLY4WX+SYAqlBOTWi0npl2NuWkm
lkPEXWCHoGJSuzwA9oYML46PpTu1B6WeqImvLxDE8XPbiJvEz0tIHfdjSfqhBF1P
CFMINd6Pt1WpsrHw06M2Re/FL7dKYZney9AJ6zuqAfuEU6qKqszpbAJYDCgSCHcV
Ub4RNKBRbXXZ2nuSHDemOpM4cJY+M3iqW9Z9SPH/A/iZLLWHTcj3lN8f+lofGQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:26:09 2025 by rpki-client