Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_CPbrJ2CzhUQd-a1eCYMAP8BLag.roa
File: _CPbrJ2CzhUQd-a1eCYMAP8BLag.roa (raw, json)
Hash identifier: xbgjqzOKewh5SK7ABZ+8BFNPbRKQ+fsEoH51gk6Q8kI=
Subject key identifier: FC:23:DB:AC:9D:82:CE:15:10:77:E6:B5:78:26:0C:00:FF:01:2D:A8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019704034F42F903962515D155D59CB05F70
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_CPbrJ2CzhUQd-a1eCYMAP8BLag.roa
Signing time: Sat 24 May 2025 20:36:55 +0000
ROA not before: Sat 24 May 2025 20:36:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209868
IP address blocks: 2a05:9a42::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:03:4f:42:f9:03:96:25:15:d1:55:d5:9c:b0:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:36:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc23dbac9d82ce151077e6b578260c00ff012da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:ec:50:f0:08:1e:3a:61:de:15:9b:a2:fd:
d6:10:2f:8b:d3:b9:71:cc:33:f9:85:0b:fa:d0:8a:
25:ea:4a:35:a8:d2:9a:13:b0:9a:be:56:b5:97:73:
61:f1:dc:0c:64:6b:fb:73:33:68:66:d6:5e:02:52:
4d:78:ee:54:87:ba:ce:c6:7e:9c:4b:b5:a1:12:83:
f4:21:9c:f2:90:27:bf:d8:1d:8b:82:e5:99:77:e6:
ae:85:a8:68:17:5f:25:fd:55:45:52:d8:c5:46:3d:
ef:24:38:72:dd:8f:06:61:db:ba:37:d1:3f:7a:78:
a3:06:54:65:58:5d:ba:e2:3d:b4:ef:3d:00:3d:74:
0c:2a:0e:c0:06:79:84:5e:61:8c:b1:55:2b:72:8a:
51:f6:be:9b:09:a0:bc:2a:0f:8b:b8:20:ac:9c:e7:
e2:ae:e4:15:3d:90:de:16:1f:f9:7c:90:f9:fe:3b:
27:bd:59:cb:2f:2e:89:3a:11:0a:f4:25:c7:bd:5d:
1c:0b:1a:3e:3b:87:ca:0d:47:e8:82:dd:55:22:55:
f6:be:dd:22:1c:6c:61:9a:72:0c:5c:07:67:51:18:
fc:e5:d2:fe:7e:00:a0:7b:ab:fc:41:7f:76:31:89:
25:71:7d:48:7b:07:13:81:88:11:0d:10:de:03:74:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:DB:AC:9D:82:CE:15:10:77:E6:B5:78:26:0C:00:FF:01:2D:A8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_CPbrJ2CzhUQd-a1eCYMAP8BLag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a42::/32
Signature Algorithm: sha256WithRSAEncryption
d6:3b:e6:85:cf:30:fa:d5:ca:ac:28:32:15:ae:2d:0c:ba:3f:
fa:7d:49:90:e8:3b:0f:22:67:af:07:7a:bc:73:e0:2f:b9:7a:
b2:2f:b0:b0:ba:22:58:20:1a:aa:39:34:8f:5e:fb:07:d5:01:
6f:6b:08:c4:1c:a5:c6:a1:9d:cc:26:26:f9:8d:38:fe:86:ab:
58:09:cd:08:ee:4d:d1:8b:e9:5f:61:4e:da:52:82:09:80:29:
92:a4:86:7d:08:26:c7:83:c7:8c:02:f9:e4:31:91:66:2e:d6:
e3:4a:49:3b:b3:eb:39:42:39:d0:d1:6f:eb:d0:0d:e9:e5:ae:
8d:8e:19:35:59:6c:86:bc:4c:33:7b:5f:21:33:2f:26:d3:e1:
fe:72:d3:f1:96:ed:ea:0c:59:fe:fc:15:19:80:68:23:3f:ac:
22:f6:a2:e3:df:4b:23:dd:90:b5:d5:40:b8:e3:73:85:85:fc:
a3:9b:db:d6:9f:78:bd:1a:51:63:c7:56:5b:3b:f8:da:91:f6:
2a:6b:b0:45:00:1d:44:ce:e0:49:6f:67:5c:8a:3e:1e:89:51:
2d:6a:31:67:45:fb:e7:8f:48:f2:f7:b1:36:01:b8:54:7b:91:
d7:5a:c4:7c:e0:70:7d:8e:60:6b:2d:88:43:c5:c8:99:33:b4:
f2:1c:46:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZcEA09C+QOWJRXRVdWcsF9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNTI0MjAzNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzIzZGJhYzlkODJjZTE1MTA3N2U2YjU3ODI2MGMwMGZmMDEyZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRXsUPAIHjph3hWbov3WEC+L07lx
zDP5hQv60Iol6ko1qNKaE7Cavla1l3Nh8dwMZGv7czNoZtZeAlJNeO5Uh7rOxn6c
S7WhEoP0IZzykCe/2B2LguWZd+auhahoF18l/VVFUtjFRj3vJDhy3Y8GYdu6N9E/
enijBlRlWF264j207z0APXQMKg7ABnmEXmGMsVUrcopR9r6bCaC8Kg+LuCCsnOfi
ruQVPZDeFh/5fJD5/jsnvVnLLy6JOhEK9CXHvV0cCxo+O4fKDUfogt1VIlX2vt0i
HGxhmnIMXAdnURj85dL+fgCge6v8QX92MYklcX1IewcTgYgRDRDeA3SrVwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPwj26ydgs4VEHfmtXgmDAD/AS2oMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvX0NQYnJKMkN6aFVRZC1hMWVDWU1BUDhCTGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgWaQjAN
BgkqhkiG9w0BAQsFAAOCAQEA1jvmhc8w+tXKrCgyFa4tDLo/+n1JkOg7DyJnrwd6
vHPgL7l6si+wsLoiWCAaqjk0j177B9UBb2sIxBylxqGdzCYm+Y04/oarWAnNCO5N
0YvpX2FO2lKCCYApkqSGfQgmx4PHjAL55DGRZi7W40pJO7PrOUI50NFv69AN6eWu
jY4ZNVlshrxMM3tfITMvJtPh/nLT8Zbt6gxZ/vwVGYBoIz+sIvai499LI92QtdVA
uONzhYX8o5vb1p94vRpRY8dWWzv42pH2KmuwRQAdRM7gSW9nXIo+HolRLWoxZ0X7
549I8vexNgG4VHuR11rEfOBwfY5gay2IQ8XImTO08hxGRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:19 2025 by rpki-client