Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBYqrq4ZhiQxH3rsmQQLX0cQ4X8.roa
File: cBYqrq4ZhiQxH3rsmQQLX0cQ4X8.roa (raw, json)
Hash identifier: vei2xJ1DxanxCsSXXRVasq4mheiBns6e120dAkpHBkU=
Subject key identifier: 70:16:2A:AE:AE:19:86:24:31:1F:7A:EC:99:04:0B:5F:47:10:E1:7F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE08959847A94ED2443B20A21650F045
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBYqrq4ZhiQxH3rsmQQLX0cQ4X8.roa
Signing time: Wed 14 May 2025 09:03:10 +0000
ROA not before: Wed 14 May 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213705
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a10:3c84::/32 maxlen: 32
2a10:3f80::/32 maxlen: 32
2a13:c244::/33 maxlen: 33
Validation: Failed, certificate revoked on Sat 24 May 2025 20:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:08:95:98:47:a9:4e:d2:44:3b:20:a2:16:50:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70162aaeae198624311f7aec99040b5f4710e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:15:91:f1:36:67:b4:87:58:9e:d3:86:1b:
1e:70:68:8b:a5:5c:ae:b1:09:10:42:ef:a5:ea:04:
dc:3f:c5:82:fb:ee:58:05:b0:e5:cd:f8:73:41:21:
d3:99:26:8c:16:93:b8:f2:1a:7c:cf:fb:ad:00:07:
e4:74:11:f5:43:18:2d:33:16:5d:8e:48:a1:93:e0:
ba:15:f8:b0:d1:97:b8:0b:75:b4:7d:d6:3d:a9:71:
16:12:ac:4b:82:09:2b:91:08:ce:ee:10:45:93:92:
ec:69:d6:bc:7a:19:44:75:d2:47:ee:30:db:14:80:
71:b5:5e:28:69:4c:79:60:0a:d3:f5:62:7f:40:3d:
50:2b:93:57:cb:f1:82:15:80:80:98:a4:bf:41:0c:
85:d8:5b:d7:35:84:93:b2:d9:d6:c5:5e:04:4c:25:
34:ff:63:bd:9a:d5:76:76:44:f7:9d:87:cb:c5:22:
aa:37:45:49:9d:da:85:9c:ac:6a:26:a7:b6:c2:92:
2d:81:78:6b:ec:5f:56:f5:c8:69:5e:6e:96:6d:56:
f3:8d:39:84:dc:98:dc:45:29:2b:22:fe:c7:95:1f:
db:7b:75:4d:bc:13:41:b7:c0:db:86:c0:a2:e8:67:
80:20:8a:bc:64:3b:95:82:fc:e7:e0:6f:d6:06:27:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:2A:AE:AE:19:86:24:31:1F:7A:EC:99:04:0B:5F:47:10:E1:7F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cBYqrq4ZhiQxH3rsmQQLX0cQ4X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a10:3c84::/32
2a10:3f80::/32
2a13:c244::/33
Signature Algorithm: sha256WithRSAEncryption
c6:4d:94:45:8b:24:18:b4:48:a9:b9:2f:96:44:7d:94:52:4e:
c2:22:f5:69:b2:fb:99:5b:60:fa:04:31:bf:a7:30:ea:4d:60:
00:49:b5:24:4c:30:a8:d9:07:ce:f4:d0:c9:15:1d:8c:93:71:
02:6f:07:b5:fc:61:46:91:b1:fb:f7:4e:79:e4:a2:6e:8c:ca:
1d:0a:3b:b4:cb:c4:71:9f:1e:85:70:25:4d:3c:2b:a0:ce:6a:
5c:3a:07:c8:ee:aa:28:4e:67:ba:30:16:78:05:68:97:79:60:
81:48:94:69:fc:10:7f:a4:03:c0:44:da:d9:88:af:62:e1:ce:
5d:da:17:4e:cf:f5:68:be:83:0e:b2:5f:50:aa:23:fd:b5:3d:
9e:7f:eb:d9:53:3d:d2:4f:7f:09:ea:be:23:cd:96:2d:fb:0c:
34:c8:13:3b:95:96:fd:bd:77:86:13:9c:a8:82:2f:23:13:c9:
03:d0:20:3a:9c:20:14:21:0f:26:ad:5d:07:de:6d:45:e6:be:
31:24:17:40:d4:cc:c7:47:bb:0a:ca:10:bc:9b:4a:cc:b7:89:
b7:25:dd:1a:8c:7c:78:a4:b5:f2:02:52:84:f5:53:96:4f:e2:
31:2b:2f:5c:d5:d0:f7:9f:4d:38:ff:2d:3a:1a:5f:47:d2:d8:
bb:5d:bb:2d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZbOCJWYR6lO0kQ7IKIWUPBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNTE0MDkwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDE2MmFhZWFlMTk4NjI0MzExZjdhZWM5OTA0MGI1ZjQ3MTBlMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hAVkfE2Z7SHWJ7ThhsecGiLpVyu
sQkQQu+l6gTcP8WC++5YBbDlzfhzQSHTmSaMFpO48hp8z/utAAfkdBH1QxgtMxZd
jkihk+C6Ffiw0Ze4C3W0fdY9qXEWEqxLggkrkQjO7hBFk5Lsada8ehlEddJH7jDb
FIBxtV4oaUx5YArT9WJ/QD1QK5NXy/GCFYCAmKS/QQyF2FvXNYSTstnWxV4ETCU0
/2O9mtV2dkT3nYfLxSKqN0VJndqFnKxqJqe2wpItgXhr7F9W9chpXm6WbVbzjTmE
3JjcRSkrIv7HlR/be3VNvBNBt8DbhsCi6GeAIIq8ZDuVgvzn4G/WBieSXQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHAWKq6uGYYkMR967JkEC19HEOF/MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvY0JZcXJxNFpoaVF4SDNyc21RUUxYMGNRNFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwUDKgZfwAMF
ACoQPIQDBQAqED+AAwYHKhPCRAAwDQYJKoZIhvcNAQELBQADggEBAMZNlEWLJBi0
SKm5L5ZEfZRSTsIi9Wmy+5lbYPoEMb+nMOpNYABJtSRMMKjZB8700MkVHYyTcQJv
B7X8YUaRsfv3Tnnkom6Myh0KO7TLxHGfHoVwJU08K6DOalw6B8juqihOZ7owFngF
aJd5YIFIlGn8EH+kA8BE2tmIr2Lhzl3aF07P9Wi+gw6yX1CqI/21PZ5/69lTPdJP
fwnqviPNli37DDTIEzuVlv29d4YTnKiCLyMTyQPQIDqcIBQhDyatXQfebUXmvjEk
F0DUzMdHuwrKELybSsy3ibcl3RqMfHiktfICUoT1U5ZP4jErL1zV0PefTTj/LToa
X0fS2Ltduy0=
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:51:29 2025 by rpki-client