Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4OpjQ0kogKsdzR8nxA2rRh3lSw0.roa
File: 4OpjQ0kogKsdzR8nxA2rRh3lSw0.roa (raw, json)
Hash identifier: Zx1czuW6CtTENmVi4oRSZ8twRgHMf/i15CLUgxt9TBM=
Subject key identifier: E0:EA:63:43:49:28:80:AB:1D:CD:1F:27:C4:0D:AB:46:1D:E5:4B:0D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019703FFA5035B45225E012723EC267D2088
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4OpjQ0kogKsdzR8nxA2rRh3lSw0.roa
Signing time: Sat 24 May 2025 20:32:54 +0000
ROA not before: Sat 24 May 2025 20:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206560
IP address blocks: 2a06:5fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:ff:a5:03:5b:45:22:5e:01:27:23:ec:26:7d:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0ea6343492880ab1dcd1f27c40dab461de54b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:f2:2a:d8:e6:2d:22:80:46:65:f5:f7:05:
cb:3d:19:2f:42:2c:9e:5d:e3:4e:a7:e9:c6:17:28:
ff:f6:bf:41:f6:76:98:18:44:a3:ea:22:17:0c:3f:
be:ca:b2:78:1e:f3:71:53:1c:d4:9d:44:45:17:67:
2b:2a:f6:b6:f5:ae:08:76:6d:36:68:93:ca:c4:34:
a7:a2:eb:78:28:67:38:7d:71:bf:16:fa:4d:aa:7a:
f6:97:02:9d:25:40:6e:6a:f8:d4:07:a1:08:fe:78:
f1:b2:83:08:a5:91:ec:06:ee:40:02:29:14:c0:c3:
bd:94:60:f8:f8:5f:13:f2:f8:a3:86:ea:cb:60:f4:
5a:71:1e:8f:a7:a4:01:38:e6:76:fa:d6:d6:46:82:
9e:44:f9:7c:8f:75:b1:34:d6:b6:ef:27:14:b3:2c:
41:6d:8c:f5:58:39:2d:8c:71:5f:0c:4c:eb:0b:1d:
7c:f3:64:b7:98:56:1e:01:2f:03:d0:4b:c4:e1:3a:
12:f3:f1:4d:c0:a9:27:29:d4:2d:0f:38:8f:aa:d6:
06:fd:30:2c:4b:f3:ff:88:32:97:fe:e2:98:65:93:
df:58:5c:8c:ab:08:24:3f:bc:5b:87:25:48:a9:d6:
51:01:09:99:47:b9:10:ee:15:3f:4a:98:d7:de:22:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:63:43:49:28:80:AB:1D:CD:1F:27:C4:0D:AB:46:1D:E5:4B:0D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4OpjQ0kogKsdzR8nxA2rRh3lSw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:3f:52:ea:c4:97:7a:e2:4d:06:85:11:8a:9e:32:da:aa:1e:
f8:e6:0c:c1:f9:cc:cd:be:c8:39:58:5f:0a:8a:22:47:5b:58:
2f:7d:96:7c:cc:4e:88:42:5e:f7:d8:6b:40:e6:a9:76:a8:61:
e0:87:0b:9a:60:2b:7d:24:f1:3b:6c:53:b3:c1:cd:d5:09:c1:
48:e3:47:b2:02:a2:64:4b:62:25:3e:1f:4b:7b:5f:a4:62:37:
58:f1:89:5b:0b:75:b9:1d:33:ea:78:85:eb:1b:a7:ba:0b:c0:
1c:40:08:b9:e3:a3:0e:e7:07:fb:fc:c2:88:fb:2a:f5:23:ed:
54:a0:99:fe:fa:c2:c5:f6:f4:cc:65:6c:b9:96:10:42:cd:5c:
75:25:45:2d:1d:7e:81:43:86:cb:d2:0b:cc:5a:39:90:79:30:
44:a4:a5:59:5a:31:a1:40:5f:30:3b:7c:f9:7c:4f:c3:94:79:
2a:3b:e1:33:c6:26:99:2e:c3:63:15:89:af:1b:25:79:36:2c:
d3:de:0e:b5:05:67:b7:fc:d5:d9:96:8f:33:e4:10:16:1c:24:
e4:9f:8f:b9:0c:65:85:c5:cb:83:f3:42:a7:52:0e:eb:be:5e:
04:11:79:8e:73:66:66:2f:75:93:0a:ce:07:b4:50:45:cd:05:
54:51:a7:b0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZcD/6UDW0UiXgEnI+wmfSCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNTI0MjAzMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGVhNjM0MzQ5Mjg4MGFiMWRjZDFmMjdjNDBkYWI0NjFkZTU0YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqzyKtjmLSKARmX19wXLPRkvQiye
XeNOp+nGFyj/9r9B9naYGESj6iIXDD++yrJ4HvNxUxzUnURFF2crKva29a4Idm02
aJPKxDSnout4KGc4fXG/FvpNqnr2lwKdJUBuavjUB6EI/njxsoMIpZHsBu5AAikU
wMO9lGD4+F8T8vijhurLYPRacR6Pp6QBOOZ2+tbWRoKeRPl8j3WxNNa27ycUsyxB
bYz1WDktjHFfDEzrCx1882S3mFYeAS8D0EvE4ToS8/FNwKknKdQtDziPqtYG/TAs
S/P/iDKX/uKYZZPfWFyMqwgkP7xbhyVIqdZRAQmZR7kQ7hU/SpjX3iLMJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFODqY0NJKICrHc0fJ8QNq0Yd5UsNMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvNE9walEwa29nS3NkelI4bnhBMnJSaDNsU3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgZfwDAN
BgkqhkiG9w0BAQsFAAOCAQEAtD9S6sSXeuJNBoURip4y2qoe+OYMwfnMzb7IOVhf
CooiR1tYL32WfMxOiEJe99hrQOapdqhh4IcLmmArfSTxO2xTs8HN1QnBSONHsgKi
ZEtiJT4fS3tfpGI3WPGJWwt1uR0z6niF6xunugvAHEAIueOjDucH+/zCiPsq9SPt
VKCZ/vrCxfb0zGVsuZYQQs1cdSVFLR1+gUOGy9ILzFo5kHkwRKSlWVoxoUBfMDt8
+XxPw5R5KjvhM8YmmS7DYxWJrxsleTYs094OtQVnt/zV2ZaPM+QQFhwk5J+PuQxl
hcXLg/NCp1IO675eBBF5jnNmZi91kwrOB7RQRc0FVFGnsA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:53:37 2025 by rpki-client