Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vHWNS4aLr8RXRr8_bVG7tbQsg4w.roa
File: vHWNS4aLr8RXRr8_bVG7tbQsg4w.roa (raw, json)
Hash identifier: kkRkDS+16U20soS4R7P2Bt1eJENV2FZVdjq68/pXREw=
Subject key identifier: BC:75:8D:4B:86:8B:AF:C4:57:46:BF:3F:6D:51:BB:B5:B4:2C:83:8C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A02586F208C006D9435BA5E5206AF9C1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vHWNS4aLr8RXRr8_bVG7tbQsg4w.roa
Signing time: Tue 24 Jun 2025 04:15:03 +0000
ROA not before: Tue 24 Jun 2025 04:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 05:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:25:86:f2:08:c0:06:d9:43:5b:a5:e5:20:6a:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 04:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc758d4b868bafc45746bf3f6d51bbb5b42c838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:61:d3:a9:5b:01:18:10:61:c9:ef:4a:83:
cb:25:86:98:29:fe:a4:c6:df:84:b0:9e:ee:f5:06:
ee:8f:06:c4:ea:81:91:3f:d2:c5:98:5c:42:6b:9d:
0a:d4:67:9f:9d:74:f2:fd:ae:d7:b8:c0:ff:74:d5:
09:f5:b1:e7:28:3c:25:ae:79:1d:88:bf:b5:c8:09:
a8:56:4d:82:b2:8f:53:7f:99:63:5f:fe:c7:3f:49:
e9:19:b8:38:06:27:26:df:35:a8:b8:12:18:2a:39:
15:2f:ac:5e:50:f6:05:bb:1b:79:0e:77:3e:b1:3c:
1a:37:e3:a2:f1:3d:9e:39:a9:ae:60:f0:e2:1f:9e:
70:d3:9c:fb:47:0a:74:3f:ad:34:8a:fc:b4:f1:eb:
f5:c6:76:28:ec:49:fa:0b:34:a3:10:7a:2e:f2:e5:
c5:19:4e:21:d9:60:be:51:50:c7:5a:9a:b3:1e:0a:
d1:6b:5e:d9:f2:03:dc:98:51:a4:85:6e:35:9b:c3:
e8:ad:95:96:bc:4b:33:95:54:1b:a7:67:ba:78:21:
ae:1a:0f:a3:58:d0:d0:4a:59:cc:c7:35:07:f6:58:
7f:12:b2:5c:ec:2b:80:0d:71:86:fa:34:91:21:02:
01:ce:da:16:43:3b:05:13:f3:40:96:1b:ee:ca:04:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:8D:4B:86:8B:AF:C4:57:46:BF:3F:6D:51:BB:B5:B4:2C:83:8C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vHWNS4aLr8RXRr8_bVG7tbQsg4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
40:e1:46:c3:0d:ce:91:4c:32:45:8d:b6:19:06:20:58:50:fe:
52:3b:53:36:2e:df:29:6d:a3:5b:2e:51:bd:73:52:f8:84:e8:
92:d5:c5:0a:84:c7:9d:47:dc:6f:4d:f3:44:ea:b6:97:fb:12:
53:b5:0c:58:db:b4:22:20:72:9f:8e:6b:28:3f:34:24:96:a2:
11:41:39:92:e5:d3:b6:9b:24:44:30:63:6e:67:aa:88:d2:a5:
dc:2e:5d:50:a0:4d:72:e7:23:43:5e:12:15:1f:03:e4:e2:37:
ef:4c:76:a2:77:3b:65:96:5d:ec:16:9e:27:b9:a1:35:e0:ac:
a2:3a:67:1a:7b:64:60:65:61:b4:37:2d:63:c8:26:b1:d5:8e:
20:74:b9:a0:89:26:11:ca:f2:9b:23:7f:a9:c0:ac:5a:93:60:
a4:1e:49:5e:eb:7b:c9:94:91:44:02:9f:b8:16:c3:66:c5:07:
97:2b:c9:b0:c2:90:6d:0d:d7:c1:66:f8:17:1c:f2:af:e3:5e:
7c:fe:84:1f:3b:04:d9:88:68:61:20:ea:5d:2d:7f:ea:4b:32:
39:9b:95:38:b3:2e:9a:ab:72:e7:b8:51:ea:6b:48:3a:d0:5d:
ba:3d:77:34:c3:bc:67:87:d9:c9:e6:68:5f:c2:c3:e1:98:a9:
ac:3b:68:81
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZegJYbyCMAG2UNbpeUgavnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI0MDQxNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzc1OGQ0Yjg2OGJhZmM0NTc0NmJmM2Y2ZDUxYmJiNWI0MmM4MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Zh06lbARgQYcnvSoPLJYaYKf6k
xt+EsJ7u9QbujwbE6oGRP9LFmFxCa50K1GefnXTy/a7XuMD/dNUJ9bHnKDwlrnkd
iL+1yAmoVk2Cso9Tf5ljX/7HP0npGbg4Bicm3zWouBIYKjkVL6xeUPYFuxt5Dnc+
sTwaN+Oi8T2eOamuYPDiH55w05z7Rwp0P600ivy08ev1xnYo7En6CzSjEHou8uXF
GU4h2WC+UVDHWpqzHgrRa17Z8gPcmFGkhW41m8PorZWWvEszlVQbp2e6eCGuGg+j
WNDQSlnMxzUH9lh/ErJc7CuADXGG+jSRIQIBztoWQzsFE/NAlhvuygT3cwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLx1jUuGi6/EV0a/P21Ru7W0LIOMMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvdkhXTlM0YUxyOFJYUnI4X2JWRzd0YlFzZzR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAQOFGww3OkUwyRY22GQYgWFD+
UjtTNi7fKW2jWy5RvXNS+IToktXFCoTHnUfcb03zROq2l/sSU7UMWNu0IiByn45r
KD80JJaiEUE5kuXTtpskRDBjbmeqiNKl3C5dUKBNcucjQ14SFR8D5OI370x2onc7
ZZZd7BaeJ7mhNeCsojpnGntkYGVhtDctY8gmsdWOIHS5oIkmEcrymyN/qcCsWpNg
pB5JXut7yZSRRAKfuBbDZsUHlyvJsMKQbQ3XwWb4Fxzyr+NefP6EHzsE2YhoYSDq
XS1/6ksyOZuVOLMumqty57hR6mtIOtBduj13NMO8Z4fZyeZoX8LD4ZiprDtogQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:51:29 2025 by rpki-client