Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/clijYcz73vyiKHVSBi4VrrWwgvw.roa
File: clijYcz73vyiKHVSBi4VrrWwgvw.roa (raw, json)
Hash identifier: n3BDVmwOlBNCWLe/kUTA0uby8dTc9ZaPltXYz1biDjI=
Subject key identifier: 72:58:A3:61:CC:FB:DE:FC:A2:28:75:52:06:2E:15:AE:B5:B0:82:FC
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 019731FE97893939E5AC3017AEDDA0DABDBE
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/clijYcz73vyiKHVSBi4VrrWwgvw.roa
Signing time: Mon 02 Jun 2025 18:54:17 +0000
ROA not before: Mon 02 Jun 2025 18:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc5::/32 maxlen: 32
2a0e:4bc6::/32 maxlen: 32
2a0e:ccc1::/32 maxlen: 32
2a0e:ccc3::/32 maxlen: 32
2a0e:ffc1::/32 maxlen: 32
2a0f:4340::/32 maxlen: 32
2a0f:4346::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Jun 2025 17:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:fe:97:89:39:39:e5:ac:30:17:ae:dd:a0:da:bd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jun 2 18:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7258a361ccfbdefca2287552062e15aeb5b082fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:bd:bb:39:fd:02:7d:10:fa:b6:3f:32:ab:
65:27:6e:01:d2:55:d2:03:c0:0d:04:22:8f:62:a7:
42:d3:b7:f9:4b:2e:c9:12:2a:ac:50:5d:37:33:83:
0c:b6:0d:8d:44:a6:98:da:10:33:65:24:af:29:19:
0e:ef:64:2f:37:35:29:b6:d9:b2:ca:b5:dd:c2:13:
1c:2c:49:95:fc:ab:5f:fe:c8:46:e8:34:d2:37:af:
43:9e:33:00:4f:b9:cd:be:dc:a7:68:22:5c:8c:21:
42:6e:12:f8:9a:e9:fa:ca:1a:78:71:68:9a:35:dc:
33:53:49:98:5e:25:a4:66:1c:20:df:d2:f8:d0:32:
f7:f1:16:c1:fa:39:d5:6f:3b:a9:a3:aa:62:97:bb:
8f:bc:66:c9:e8:f5:2b:7f:90:ab:bf:a2:58:34:d7:
56:21:94:0f:99:88:89:e7:3e:ba:71:f1:36:26:95:
9b:68:c8:bb:5d:72:ba:8b:60:4a:86:3d:1f:de:30:
a2:be:84:8e:2c:79:48:99:35:15:d9:b4:60:23:1c:
f6:6c:a9:52:14:7f:c6:e7:ed:98:02:90:7a:68:dd:
66:6b:fe:36:34:d5:dc:b2:01:d8:d8:c2:20:9d:d8:
15:60:b5:d2:f2:09:4d:ca:62:5c:09:26:8a:0c:d7:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:A3:61:CC:FB:DE:FC:A2:28:75:52:06:2E:15:AE:B5:B0:82:FC
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/clijYcz73vyiKHVSBi4VrrWwgvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc5::-2a0e:4bc6:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ccc1::/32
2a0e:ccc3::/32
2a0e:ffc1::/32
2a0f:4340::/32
2a0f:4346::/32
Signature Algorithm: sha256WithRSAEncryption
9e:a9:4c:4f:0a:a9:e6:3f:44:49:d4:e6:f9:23:0a:5c:5c:0c:
fb:9b:de:77:c3:4f:4b:b5:57:79:9a:40:7c:a8:ed:eb:d5:ba:
36:f4:54:bb:17:19:84:5d:40:b0:f8:06:f8:58:92:dd:2d:19:
e7:a4:2c:ff:17:80:d9:0a:9c:63:43:13:6f:a3:7b:44:55:15:
50:cb:ae:1f:5d:9a:b3:8a:4e:f7:cf:19:c4:c5:be:c7:3c:36:
0b:a2:bd:ab:4b:12:08:71:29:54:cb:ec:51:f8:8a:61:32:23:
b9:a2:a4:99:6c:e8:19:0c:19:13:9a:5a:e4:08:5e:38:c5:0c:
64:0e:44:95:9d:07:2c:90:d2:1a:14:12:d2:a2:12:6a:bf:e6:
be:16:36:b0:d1:22:0c:df:df:c3:83:e4:b3:c2:42:bf:aa:90:
a9:cb:fe:f5:d8:a0:0e:02:3c:71:5c:25:22:46:b0:df:b7:f4:
f1:16:24:3e:f0:8c:9c:29:69:47:84:9b:1d:8f:d6:a5:8e:0a:
6c:81:d1:a7:39:cd:85:c2:1a:73:69:43:30:68:14:52:8d:af:
f5:2b:e8:3a:99:95:2c:ad:6f:06:6a:24:8a:32:ab:da:93:c0:
07:0f:cc:3c:6f:13:de:8a:97:ce:48:5a:52:00:78:6c:99:62:
56:9a:b2:7a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZcx/peJOTnlrDAXrt2g2r2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjUwNjAyMTg1NDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU4YTM2MWNjZmJkZWZjYTIyODc1NTIwNjJlMTVhZWI1YjA4MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ne9uzn9An0Q+rY/MqtlJ24B0lXS
A8ANBCKPYqdC07f5Sy7JEiqsUF03M4MMtg2NRKaY2hAzZSSvKRkO72QvNzUpttmy
yrXdwhMcLEmV/Ktf/shG6DTSN69DnjMAT7nNvtynaCJcjCFCbhL4mun6yhp4cWia
NdwzU0mYXiWkZhwg39L40DL38RbB+jnVbzupo6pil7uPvGbJ6PUrf5Crv6JYNNdW
IZQPmYiJ5z66cfE2JpWbaMi7XXK6i2BKhj0f3jCivoSOLHlImTUV2bRgIxz2bKlS
FH/G5+2YApB6aN1ma/42NNXcsgHY2MIgndgVYLXS8glNymJcCSaKDNfZhQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHJYo2HM+978oih1UgYuFa61sIL8MB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvY2xpalljejczdnlpS0hWU0JpNFZycld3Z3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAAjAzMA4DBQAqDkvF
AwUAKg5LxgMFACoOzMEDBQAqDszDAwUAKg7/wQMFACoPQ0ADBQAqD0NGMA0GCSqG
SIb3DQEBCwUAA4IBAQCeqUxPCqnmP0RJ1Ob5IwpcXAz7m953w09LtVd5mkB8qO3r
1bo29FS7FxmEXUCw+Ab4WJLdLRnnpCz/F4DZCpxjQxNvo3tEVRVQy64fXZqzik73
zxnExb7HPDYLor2rSxIIcSlUy+xR+IphMiO5oqSZbOgZDBkTmlrkCF44xQxkDkSV
nQcskNIaFBLSohJqv+a+Fjaw0SIM39/Dg+SzwkK/qpCpy/712KAOAjxxXCUiRrDf
t/TxFiQ+8IycKWlHhJsdj9aljgpsgdGnOc2FwhpzaUMwaBRSja/1K+g6mZUsrW8G
aiSKMqvak8AHD8w8bxPeipfOSFpSAHhsmWJWmrJ6
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:43:45 2025 by rpki-client