Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6t7GOB9HZ22Xow6Y4K0kAr1JWlg.roa
File: 6t7GOB9HZ22Xow6Y4K0kAr1JWlg.roa (raw, json)
Hash identifier: LZh7NFVep6Wj1bBXJ7rHA14rj5Cy3ypttY4eZoPfsyw=
Subject key identifier: EA:DE:C6:38:1F:47:67:6D:97:A3:0E:98:E0:AD:24:02:BD:49:5A:58
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196973BF61A3886F4F432FFA269CAB84999
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6t7GOB9HZ22Xow6Y4K0kAr1JWlg.roa
Signing time: Sat 03 May 2025 17:40:11 +0000
ROA not before: Sat 03 May 2025 17:40:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 2a06:de00:1f00::/44 maxlen: 48
2a06:de02:1a02::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 May 2025 18:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:3b:f6:1a:38:86:f4:f4:32:ff:a2:69:ca:b8:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 3 17:40:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eadec6381f47676d97a30e98e0ad2402bd495a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:81:e8:61:7a:32:46:5c:9a:fe:4c:1c:b1:
a9:e9:40:60:c4:59:dd:79:ce:d3:cb:8c:5a:ec:bb:
7f:99:59:38:3e:95:ca:4e:61:eb:50:9e:85:67:f3:
74:e0:ff:26:2a:39:83:65:c5:d1:69:f1:f5:8a:84:
b2:c8:17:92:5a:d5:11:3b:82:b7:67:ae:13:ae:11:
fc:9f:87:be:7f:9c:a9:b4:a3:b3:89:fb:6e:d2:cf:
58:32:5f:12:7f:2e:bd:24:17:2e:41:0e:32:e6:fc:
08:b3:91:6a:b5:fa:3a:55:32:a8:79:b5:16:b7:dd:
53:7e:9d:cf:e6:57:ef:72:d9:8a:cc:f7:35:56:25:
29:84:c3:8d:9a:be:82:a8:0e:40:0d:4f:24:d3:59:
83:c7:d9:45:a5:21:ec:a4:26:42:e4:0e:08:2f:04:
bd:40:2a:02:80:18:19:3f:5f:29:29:3d:55:da:23:
d1:5e:b9:b1:1c:18:41:4c:e4:a3:78:94:4f:e8:25:
96:8a:cc:6c:aa:01:cd:fa:42:4a:ed:bc:f7:28:8c:
f1:2c:ff:94:e6:c8:69:7e:a7:5d:fc:85:84:25:73:
f6:57:96:46:c6:e3:5a:3a:fe:4f:48:21:5c:56:4c:
6e:47:28:0c:9c:0d:76:e9:f6:74:aa:d4:50:f8:b7:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:C6:38:1F:47:67:6D:97:A3:0E:98:E0:AD:24:02:BD:49:5A:58
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6t7GOB9HZ22Xow6Y4K0kAr1JWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:1f00::/44
2a06:de02:1a02::/48
Signature Algorithm: sha256WithRSAEncryption
c4:44:3c:d4:80:85:61:48:07:c6:3b:e8:85:00:bd:c2:d1:b4:
72:57:30:df:c9:16:e7:29:98:84:dd:cd:f0:4c:d6:41:a0:63:
16:58:a3:86:21:3a:1b:12:76:29:cf:36:d8:71:8d:3e:f9:48:
99:eb:65:53:eb:35:79:af:81:1a:15:bb:41:db:e7:30:40:09:
e2:c3:4e:3c:10:9b:17:d0:64:b2:4d:e6:0c:8c:ea:d5:4c:9f:
fa:44:3c:57:d3:24:0b:c2:09:8f:72:bc:4f:3e:11:ee:b2:17:
50:c1:c7:a3:fb:d8:08:1e:ff:96:cd:58:a4:5b:d1:56:5f:16:
a6:14:02:47:59:ed:13:5b:42:d3:4a:bb:63:a2:68:a5:93:e5:
4d:0d:c7:80:d0:9f:10:a6:40:ab:3f:0b:7e:fa:d4:2a:ae:60:
a2:f2:bc:61:4b:a6:0a:84:b0:9c:d5:a8:19:3b:f8:99:aa:96:
90:0f:4d:99:dd:7a:9c:aa:19:25:02:5e:0f:97:1d:11:bf:d5:
3d:0d:c4:85:d1:51:6d:f0:74:ad:b0:d5:29:2a:8e:61:f9:36:
19:c8:4c:eb:5e:f6:04:cf:f2:43:6f:72:13:b5:30:b9:38:22:
15:0e:2e:2e:4b:06:41:36:1e:61:c5:50:68:c8:0f:09:ad:5e:
39:47:c1:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaXO/YaOIb09DL/omnKuEmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNTAzMTc0MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWRlYzYzODFmNDc2NzZkOTdhMzBlOThlMGFkMjQwMmJkNDk1YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv+B6GF6MkZcmv5MHLGp6UBgxFnd
ec7Ty4xa7Lt/mVk4PpXKTmHrUJ6FZ/N04P8mKjmDZcXRafH1ioSyyBeSWtURO4K3
Z64TrhH8n4e+f5yptKOziftu0s9YMl8Sfy69JBcuQQ4y5vwIs5Fqtfo6VTKoebUW
t91Tfp3P5lfvctmKzPc1ViUphMONmr6CqA5ADU8k01mDx9lFpSHspCZC5A4ILwS9
QCoCgBgZP18pKT1V2iPRXrmxHBhBTOSjeJRP6CWWisxsqgHN+kJK7bz3KIzxLP+U
5shpfqdd/IWEJXP2V5ZGxuNaOv5PSCFcVkxuRygMnA126fZ0qtRQ+LfEIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOrexjgfR2dtl6MOmOCtJAK9SVpYMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNnQ3R09COUhaMjJYb3c2WTRLMGtBcjFKV2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAB8A
AwcAKgbeAhoCMA0GCSqGSIb3DQEBCwUAA4IBAQDERDzUgIVhSAfGO+iFAL3C0bRy
VzDfyRbnKZiE3c3wTNZBoGMWWKOGITobEnYpzzbYcY0++UiZ62VT6zV5r4EaFbtB
2+cwQAniw048EJsX0GSyTeYMjOrVTJ/6RDxX0yQLwgmPcrxPPhHushdQwcej+9gI
Hv+WzVikW9FWXxamFAJHWe0TW0LTSrtjomilk+VNDceA0J8QpkCrPwt++tQqrmCi
8rxhS6YKhLCc1agZO/iZqpaQD02Z3XqcqhklAl4Plx0Rv9U9DcSF0VFt8HStsNUp
Ko5h+TYZyEzrXvYEz/JDb3ITtTC5OCIVDi4uSwZBNh5hxVBoyA8JrV45R8EZ
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:57:39 2025 by rpki-client