Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-RU5Am9GvfCrbkvUSEC8wXVRElg.roa
File: 1-RU5Am9GvfCrbkvUSEC8wXVRElg.roa (raw, json)
Hash identifier: 0T9SCVD4N1y2Zcv3bgvLYdZZTZLZUSDQc6/K8CdB31w=
Subject key identifier: F9:15:39:02:6F:46:BD:F0:AB:6E:4B:D4:48:40:BC:C1:75:51:12:58
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976B91AA5661ED27BD4D01E0AD40B1C58A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-RU5Am9GvfCrbkvUSEC8wXVRElg.roa
Signing time: Fri 13 Jun 2025 23:13:17 +0000
ROA not before: Fri 13 Jun 2025 23:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 00:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:91:aa:56:61:ed:27:bd:4d:01:e0:ad:40:b1:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 23:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91539026f46bdf0ab6e4bd44840bcc175511258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:88:5a:f1:27:3d:ea:42:8a:8b:a1:76:5a:
76:0d:a3:5b:ee:31:d3:db:61:0f:f6:22:24:ab:e0:
8e:cb:13:aa:c5:44:c3:8e:1f:5e:79:0c:22:fe:b8:
75:79:ba:5a:9d:87:ed:0c:9b:1b:cd:86:cc:0f:d8:
ee:06:c9:77:08:9b:e7:f9:72:53:48:ba:9d:d8:d1:
66:7b:97:bf:f5:3e:6c:52:71:f3:7a:61:ce:a3:5c:
1f:8f:ad:76:d3:2d:0e:ef:e3:ea:38:f7:38:c6:94:
0a:a8:10:c6:d3:0e:3e:f6:9f:b1:ea:c5:82:bf:cc:
34:70:4b:64:4a:ae:52:0b:0e:26:c8:b4:6b:21:ee:
eb:09:b0:21:e8:5f:bd:a1:93:98:74:c0:db:f6:10:
63:b6:e1:86:a4:54:79:9a:f0:7d:f9:2c:2b:f0:3a:
93:1d:f0:71:72:99:33:6e:48:5a:09:c6:e5:29:97:
8c:d7:e1:76:ad:45:41:fc:d1:60:f7:cc:d5:88:4c:
54:1d:6b:30:1c:e0:44:eb:bf:bb:8d:76:d7:35:87:
3d:88:3a:7d:64:d0:dc:2d:dc:54:4a:48:1b:b6:cb:
59:5b:ed:de:01:6e:07:9a:2d:ff:0c:ba:22:64:bc:
cc:92:f5:2c:2d:3e:d0:58:c1:4d:cc:6c:a6:ca:1f:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:39:02:6F:46:BD:F0:AB:6E:4B:D4:48:40:BC:C1:75:51:12:58
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-RU5Am9GvfCrbkvUSEC8wXVRElg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
68:71:29:2d:75:2c:a5:d8:60:ca:9d:06:24:c0:41:dc:bb:0f:
1e:0b:9d:eb:33:64:12:af:a3:72:46:9a:92:52:c8:92:9b:ca:
94:fb:bf:f3:bd:1b:e7:7c:0f:2f:29:6e:dd:08:44:37:15:37:
17:a5:83:03:d4:d1:ff:1a:86:29:d6:de:07:51:fb:31:5f:41:
80:ea:d6:1c:89:ce:6d:02:80:88:42:fe:79:1f:4f:a8:ee:40:
6f:62:df:be:ec:9a:e1:d7:e4:9a:f5:da:a5:e2:c1:fa:52:6a:
ab:46:e2:f5:6f:1d:a9:f9:12:ce:18:a8:77:fb:82:5a:c9:2c:
a9:81:51:70:66:84:b5:c6:86:01:09:cf:d2:0f:0f:b1:43:43:
bb:d2:4e:d5:29:6e:e8:f2:37:d2:3a:7b:8f:61:3a:c1:8c:fe:
3a:15:fc:dc:92:01:0f:67:1b:8a:d6:1a:30:8f:c6:33:e2:7d:
90:1f:06:67:b7:76:47:39:f0:9f:2c:28:b5:92:8c:08:e0:a6:
64:ba:2b:6a:4a:78:24:97:3a:ac:27:49:56:83:6d:bf:c2:a4:
5b:2b:f8:c7:6b:7f:48:d4:89:80:66:fd:61:01:db:3a:f4:57:
0c:e8:1e:47:c6:97:12:3c:16:e9:e4:72:f0:b1:60:59:3b:78:
6e:5c:84:23
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZdrkapWYe0nvU0B4K1AscWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjEzMjMxMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTE1MzkwMjZmNDZiZGYwYWI2ZTRiZDQ0ODQwYmNjMTc1NTExMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaGIWvEnPepCiouhdlp2DaNb7jHT
22EP9iIkq+COyxOqxUTDjh9eeQwi/rh1ebpanYftDJsbzYbMD9juBsl3CJvn+XJT
SLqd2NFme5e/9T5sUnHzemHOo1wfj6120y0O7+PqOPc4xpQKqBDG0w4+9p+x6sWC
v8w0cEtkSq5SCw4myLRrIe7rCbAh6F+9oZOYdMDb9hBjtuGGpFR5mvB9+Swr8DqT
HfBxcpkzbkhaCcblKZeM1+F2rUVB/NFg98zViExUHWswHOBE67+7jXbXNYc9iDp9
ZNDcLdxUSkgbtstZW+3eAW4Hmi3/DLoiZLzMkvUsLT7QWMFNzGymyh9aBwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPkVOQJvRr3wq25L1EhAvMF1URJYMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvMS1SVTVBbTlHdmZDcmJrdlVTRUM4d1hWUkVsZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTYvYWUwNDlhLTA3OGItNDJlZC1hMjhmLTZhYTQ0MzUyOGNl
NS8xL1RoUFF3S2NENEp6YVpNRXJDTjJpdDBtZ1Fwdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACABBnwA
ZP//AAABl2hReJwwDQYJKoZIhvcNAQELBQADggEBAGhxKS11LKXYYMqdBiTAQdy7
Dx4LneszZBKvo3JGmpJSyJKbypT7v/O9G+d8Dy8pbt0IRDcVNxelgwPU0f8ahinW
3gdR+zFfQYDq1hyJzm0CgIhC/nkfT6juQG9i377smuHX5Jr12qXiwfpSaqtG4vVv
Han5Es4YqHf7glrJLKmBUXBmhLXGhgEJz9IPD7FDQ7vSTtUpbujyN9I6e49hOsGM
/joV/NySAQ9nG4rWGjCPxjPifZAfBme3dkc58J8sKLWSjAjgpmS6K2pKeCSXOqwn
SVaDbb/CpFsr+Mdrf0jUiYBm/WEB2zr0VwzoHkfGlxI8FunkcvCxYFk7eG5chCM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:43 2025 by rpki-client