Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vH_iSXrvvxCoCdxB2JVUWotnEys.roa
File: vH_iSXrvvxCoCdxB2JVUWotnEys.roa (raw, json)
Hash identifier: P0yRACWCEqOPG5FQLtV0nC2xKrfZWzXStKLD09svAOQ=
Subject key identifier: BC:7F:E2:49:7A:EF:BF:10:A8:09:DC:41:D8:95:54:5A:8B:67:13:2B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B9085E8C3563ADE01542DC9CCCE57A84
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vH_iSXrvvxCoCdxB2JVUWotnEys.roa
Signing time: Sun 29 Jun 2025 00:13:42 +0000
ROA not before: Sun 29 Jun 2025 00:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 01:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:08:5e:8c:35:63:ad:e0:15:42:dc:9c:cc:e5:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 00:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc7fe2497aefbf10a809dc41d895545a8b67132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:b9:2c:28:c5:69:1e:70:55:96:b6:8b:dc:
7f:15:ba:5b:4e:da:19:b8:7a:62:51:fe:31:4f:34:
ec:bb:61:de:c2:88:8f:0b:81:42:f1:9e:ae:46:b0:
b5:4a:50:f8:5c:e9:d2:fb:4b:ca:ef:3c:4b:99:06:
c0:00:90:38:fd:ba:88:59:fa:38:a3:60:7d:74:90:
e0:14:69:3b:ff:c4:88:19:89:78:fc:f0:ee:a2:08:
b6:3a:13:0f:f6:7c:4e:0e:38:a7:a9:b4:a8:a8:1f:
86:c4:d1:7e:ff:69:65:42:67:8f:f8:49:39:de:90:
f8:30:28:a5:07:04:55:77:5b:6f:dc:a5:f3:68:dc:
8e:4f:ff:d4:ee:ea:4a:36:44:86:7c:39:ab:21:c4:
42:e5:a5:23:bb:61:58:58:39:47:a8:7e:c8:3d:65:
20:1a:3c:2e:69:87:fd:81:ce:70:d1:14:07:21:c4:
84:1b:17:ce:61:75:ce:27:53:ad:ca:6d:c9:72:88:
18:2b:80:4d:31:c2:c8:ed:d0:82:8a:38:62:eb:73:
44:27:a4:52:53:56:6d:8a:9a:d4:ae:1b:b3:ba:cd:
70:e9:bd:ad:5a:32:b6:89:17:be:1b:e5:5b:48:de:
ca:55:da:88:33:fe:11:79:b9:34:86:23:ab:4e:83:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:E2:49:7A:EF:BF:10:A8:09:DC:41:D8:95:54:5A:8B:67:13:2B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vH_iSXrvvxCoCdxB2JVUWotnEys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
65:68:74:e3:12:29:ca:44:8a:cf:f4:72:fa:82:c7:ed:f4:26:
ba:ff:bf:e0:23:9f:5c:d7:06:f1:71:53:bf:97:8b:d7:61:99:
17:5f:83:91:97:a5:1d:89:b7:8e:46:54:fa:4d:4a:4c:21:af:
a3:01:ab:04:3c:c6:b5:d4:2b:6d:61:18:35:b5:c0:21:af:80:
76:5b:7e:e0:00:45:5d:20:70:dd:62:c5:84:c7:08:92:d5:74:
00:09:ff:c6:4f:e9:5e:77:22:e8:3d:5f:55:1a:d9:67:09:d0:
b5:01:fc:09:43:f1:99:f7:07:22:f7:40:b1:e1:93:fe:98:5a:
fc:21:e6:c2:bc:fb:a1:d4:08:73:e4:1a:bd:69:72:43:a8:1c:
f7:f6:26:22:31:a1:c8:cf:17:f2:86:0f:f6:f1:73:83:fa:82:
14:a4:88:7e:38:9a:94:5c:ac:54:73:1f:68:43:f1:5a:7a:e2:
12:c7:dc:c6:6c:3c:43:bf:69:98:70:1f:73:7f:59:d4:aa:ef:
16:03:bd:77:07:7d:58:42:4a:13:73:8d:e6:14:5c:b8:b2:d2:
85:3d:da:91:7a:75:49:f2:ca:71:34:6a:ea:5f:c2:b7:ad:6f:
9d:86:5e:2e:7a:68:5c:ba:7e:c7:e3:a8:ee:23:b3:c4:c7:0f:
ac:18:b0:c8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZe5CF6MNWOt4BVC3JzM5XqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI5MDAxMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzdmZTI0OTdhZWZiZjEwYTgwOWRjNDFkODk1NTQ1YThiNjcxMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HS5LCjFaR5wVZa2i9x/FbpbTtoZ
uHpiUf4xTzTsu2HewoiPC4FC8Z6uRrC1SlD4XOnS+0vK7zxLmQbAAJA4/bqIWfo4
o2B9dJDgFGk7/8SIGYl4/PDuogi2OhMP9nxODjinqbSoqB+GxNF+/2llQmeP+Ek5
3pD4MCilBwRVd1tv3KXzaNyOT//U7upKNkSGfDmrIcRC5aUju2FYWDlHqH7IPWUg
GjwuaYf9gc5w0RQHIcSEGxfOYXXOJ1Otym3JcogYK4BNMcLI7dCCijhi63NEJ6RS
U1ZtiprUrhuzus1w6b2tWjK2iRe+G+VbSN7KVdqIM/4Rebk0hiOrToPm7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLx/4kl6778QqAncQdiVVFqLZxMrMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvdkhfaVNYcnZ2eENvQ2R4QjJKVlVXb3RuRXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAZWh04xIpykSKz/Ry+oLH7fQm
uv+/4COfXNcG8XFTv5eL12GZF1+DkZelHYm3jkZU+k1KTCGvowGrBDzGtdQrbWEY
NbXAIa+Adlt+4ABFXSBw3WLFhMcIktV0AAn/xk/pXnci6D1fVRrZZwnQtQH8CUPx
mfcHIvdAseGT/pha/CHmwrz7odQIc+QavWlyQ6gc9/YmIjGhyM8X8oYP9vFzg/qC
FKSIfjialFysVHMfaEPxWnriEsfcxmw8Q79pmHAfc39Z1KrvFgO9dwd9WEJKE3ON
5hRcuLLShT3akXp1SfLKcTRq6l/Ct61vnYZeLnpoXLp+x+Oo7iOzxMcPrBiwyA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:07:42 2025 by rpki-client