Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wgyHnn0FVwC9D0YqbCta6bt9yDY.roa
File: wgyHnn0FVwC9D0YqbCta6bt9yDY.roa (raw, json)
Hash identifier: FvLVgoCLcP0tdjeBwBTEfBZz4bV/qzkEVNqNcC+9WkM=
Subject key identifier: C2:0C:87:9E:7D:05:57:00:BD:0F:46:2A:6C:2B:5A:E9:BB:7D:C8:36
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BB63B224AC346D66BA9D3DB92F07E6E6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wgyHnn0FVwC9D0YqbCta6bt9yDY.roa
Signing time: Sun 29 Jun 2025 11:12:42 +0000
ROA not before: Sun 29 Jun 2025 11:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 12:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:63:b2:24:ac:34:6d:66:ba:9d:3d:b9:2f:07:e6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 11:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c20c879e7d055700bd0f462a6c2b5ae9bb7dc836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:e5:a9:cb:67:db:9c:ff:73:18:f6:50:d5:
c3:0d:97:14:6b:c3:0e:70:3a:f2:c7:0f:d2:32:9a:
d8:31:8b:97:1e:d1:77:91:b9:c2:03:c4:d3:64:36:
17:b8:05:c6:21:b1:75:df:2c:3d:ee:8f:38:9b:bb:
a5:61:9e:7e:bf:87:46:c3:a9:db:b6:61:09:85:6e:
e3:1b:92:8f:9d:2c:5e:60:30:c0:39:88:68:27:91:
83:3c:67:85:e9:76:fe:3b:35:7a:06:fe:94:a5:fe:
39:57:a6:ed:74:d2:dd:fa:0c:5f:23:93:68:fb:85:
62:74:34:1d:ed:12:ee:db:8e:78:ce:e3:3b:91:84:
62:a1:ad:2d:b5:f0:34:b4:27:c5:a6:76:0e:4d:32:
04:92:85:f3:c8:fe:1f:4e:da:f4:fc:00:2b:42:d8:
e3:37:ae:95:be:77:4a:73:4b:d8:86:8a:17:7a:94:
c5:76:49:1d:3c:67:81:da:fa:88:b5:51:ca:67:8d:
60:52:bb:e7:c3:18:48:92:cf:f8:3a:c8:e7:05:08:
6d:ca:dd:97:2a:d7:5a:3c:41:bf:b0:c1:ca:b8:ba:
08:78:4e:cf:34:c3:0c:67:a6:48:73:06:7b:d6:c0:
dc:5d:9b:02:f3:d9:86:d8:b0:94:2d:4d:fe:37:27:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:87:9E:7D:05:57:00:BD:0F:46:2A:6C:2B:5A:E9:BB:7D:C8:36
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wgyHnn0FVwC9D0YqbCta6bt9yDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
51:c0:18:79:d0:a5:74:a7:b1:ee:09:af:25:da:3b:9a:a2:2b:
65:a9:72:54:34:fd:29:a2:c8:0d:53:54:c3:14:59:04:6f:63:
9f:93:91:60:27:4c:c4:d3:52:f7:c4:32:10:8c:51:8e:b1:51:
44:13:df:7b:cd:e0:9b:84:6f:5c:45:c4:e0:56:e0:0b:23:b5:
96:16:ef:e7:4d:e2:e6:29:03:f9:8a:d5:b4:6a:33:34:48:21:
cd:d5:cc:d8:b8:63:44:21:23:83:1f:d6:9d:86:cc:c4:09:d8:
b3:c5:8c:82:a8:d7:76:65:33:de:e1:e1:a3:a6:22:fe:c5:a1:
4d:de:ff:b4:99:37:3b:4d:2d:4a:a2:ce:67:5f:13:f5:96:a1:
23:9f:41:0d:92:c3:cd:b0:20:6b:c2:95:f0:a3:e6:47:dd:ed:
f7:2c:45:7b:a5:46:60:36:82:c2:0d:18:b6:5b:02:1c:06:e3:
c8:b8:19:e7:1f:34:c9:a7:b1:2a:33:81:a7:c4:dc:5f:23:2d:
69:76:a4:2e:cb:cf:38:04:8e:39:0d:5a:0f:58:db:3b:58:97:
1e:b2:7b:37:c2:7a:e2:dd:b8:3b:b5:72:2c:38:f9:ae:aa:c0:
f5:e0:3e:12:16:05:6d:c4:2c:73:c8:3d:4d:d2:c7:1c:dd:9e:
37:1b:fa:61
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZe7Y7IkrDRtZrqdPbkvB+bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI5MTExMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjBjODc5ZTdkMDU1NzAwYmQwZjQ2MmE2YzJiNWFlOWJiN2RjODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFPlqctn25z/cxj2UNXDDZcUa8MO
cDryxw/SMprYMYuXHtF3kbnCA8TTZDYXuAXGIbF13yw97o84m7ulYZ5+v4dGw6nb
tmEJhW7jG5KPnSxeYDDAOYhoJ5GDPGeF6Xb+OzV6Bv6Upf45V6btdNLd+gxfI5No
+4VidDQd7RLu2454zuM7kYRioa0ttfA0tCfFpnYOTTIEkoXzyP4fTtr0/AArQtjj
N66VvndKc0vYhooXepTFdkkdPGeB2vqItVHKZ41gUrvnwxhIks/4OsjnBQhtyt2X
KtdaPEG/sMHKuLoIeE7PNMMMZ6ZIcwZ71sDcXZsC89mG2LCULU3+NycmeQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMIMh559BVcAvQ9GKmwrWum7fcg2MB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvd2d5SG5uMEZWd0M5RDBZcWJDdGE2YnQ5eURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAUcAYedCldKex7gmvJdo7mqIr
ZalyVDT9KaLIDVNUwxRZBG9jn5ORYCdMxNNS98QyEIxRjrFRRBPfe83gm4RvXEXE
4FbgCyO1lhbv503i5ikD+YrVtGozNEghzdXM2LhjRCEjgx/WnYbMxAnYs8WMgqjX
dmUz3uHho6Yi/sWhTd7/tJk3O00tSqLOZ18T9ZahI59BDZLDzbAga8KV8KPmR93t
9yxFe6VGYDaCwg0YtlsCHAbjyLgZ5x80yaexKjOBp8TcXyMtaXakLsvPOASOOQ1a
D1jbO1iXHrJ7N8J64t24O7VyLDj5rqrA9eA+EhYFbcQsc8g9TdLHHN2eNxv6YQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:53 2025 by rpki-client