Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-qV98WNNjdqb4nzKh_fy65CnBKA.roa
File: 1-qV98WNNjdqb4nzKh_fy65CnBKA.roa (raw, json)
Hash identifier: 1/UldYcsdKXRG/HCMTS4FGZiijoVSYkPI5rLcJAg+oY=
Subject key identifier: FA:A5:7D:F1:63:4D:8D:DA:9B:E2:7C:CA:87:F7:F2:EB:90:A7:04:A0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197699B0A53C4C7280B1434D807ECFA6395
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-qV98WNNjdqb4nzKh_fy65CnBKA.roa
Signing time: Fri 13 Jun 2025 14:04:17 +0000
ROA not before: Fri 13 Jun 2025 14:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:699a:e25f/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 14:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:9b:0a:53:c4:c7:28:0b:14:34:d8:07:ec:fa:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 14:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faa57df1634d8dda9be27cca87f7f2eb90a704a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:70:28:17:af:38:54:8d:7c:37:3a:51:dc:
3b:48:ab:fc:ab:69:19:ca:79:e6:43:db:67:00:f9:
63:5d:bf:1a:e1:fb:45:d3:c3:bb:33:96:99:53:46:
45:26:60:c3:5c:ca:5e:3f:50:f7:ab:a4:6d:01:51:
f7:4d:48:b8:4f:b2:d9:09:36:fd:7a:87:54:68:e8:
d7:e5:b0:41:26:40:72:2e:70:d8:f7:a0:f3:ee:46:
d7:4a:ed:36:41:8d:09:b5:6f:c8:61:89:16:61:38:
00:07:9c:46:69:cc:4f:ee:8b:75:c3:c0:66:0e:24:
23:33:66:05:db:f0:1e:e2:e0:6a:98:78:7f:f7:c0:
a5:80:ce:22:e7:43:dc:16:ae:f1:72:33:59:0e:d8:
00:2d:54:32:cc:7e:5c:71:8b:f6:92:db:cb:d3:17:
e8:90:7e:03:c4:a3:02:69:a0:df:50:97:d6:9a:db:
55:04:ea:74:44:b9:0e:6d:9f:4d:f1:43:9a:73:e2:
b7:46:a8:68:ae:bc:3a:22:31:5a:17:91:3d:6f:5a:
7b:43:b8:c3:3d:4f:38:d4:06:43:06:7f:de:59:41:
ca:8e:7b:f8:6a:d9:80:96:2f:18:27:05:7f:49:9e:
6c:6a:16:76:d3:0a:6f:ef:98:22:a0:a8:fe:29:3f:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:7D:F1:63:4D:8D:DA:9B:E2:7C:CA:87:F7:F2:EB:90:A7:04:A0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-qV98WNNjdqb4nzKh_fy65CnBKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:699a:e25f/128
Signature Algorithm: sha256WithRSAEncryption
71:7c:4a:d2:03:6a:8a:95:d3:2d:5a:11:b0:99:14:d7:1e:5f:
52:d2:7f:f5:44:6e:4d:60:16:42:25:0c:c2:a3:00:2c:35:bd:
35:52:09:41:b9:41:91:7e:04:4b:92:fa:6f:d4:73:5d:dc:ff:
a7:fb:c3:f8:d7:4a:0a:ab:43:6d:77:4f:2e:a5:27:2c:43:0b:
5a:a0:33:1a:ee:ab:69:96:76:79:80:9d:de:03:57:b9:e2:95:
5d:75:62:d2:d1:18:9b:e0:26:a6:4a:b0:cb:f4:6b:1d:12:79:
cf:94:83:f2:20:65:4a:f3:1b:d3:f3:bf:63:20:53:94:2b:73:
d7:bc:30:81:ca:70:09:40:aa:3d:94:08:11:e7:48:b2:ba:bb:
bc:b4:8e:a6:93:41:e2:4d:9a:6d:3d:25:80:d3:63:1e:9a:1f:
24:e9:56:11:92:d6:24:d7:2a:82:f4:63:9d:7b:2e:b6:c0:9b:
8b:3b:ad:b8:4f:9f:0a:96:3a:2b:49:36:e0:c5:cd:39:ba:e7:
0b:bb:7a:eb:5c:be:30:f5:1a:1c:61:01:61:5d:13:f9:b8:39:
da:ff:88:5d:05:21:6c:ff:02:16:c1:d4:67:3a:0e:d3:f6:47:
9c:99:57:5d:a9:a8:a5:50:11:d1:ad:87:95:62:07:ea:70:2c:
16:e6:d9:25
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZdpmwpTxMcoCxQ02Afs+mOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjEzMTQwNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWE1N2RmMTYzNGQ4ZGRhOWJlMjdjY2E4N2Y3ZjJlYjkwYTcwNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJVwKBevOFSNfDc6Udw7SKv8q2kZ
ynnmQ9tnAPljXb8a4ftF08O7M5aZU0ZFJmDDXMpeP1D3q6RtAVH3TUi4T7LZCTb9
eodUaOjX5bBBJkByLnDY96Dz7kbXSu02QY0JtW/IYYkWYTgAB5xGacxP7ot1w8Bm
DiQjM2YF2/Ae4uBqmHh/98ClgM4i50PcFq7xcjNZDtgALVQyzH5ccYv2ktvL0xfo
kH4DxKMCaaDfUJfWmttVBOp0RLkObZ9N8UOac+K3Rqhorrw6IjFaF5E9b1p7Q7jD
PU841AZDBn/eWUHKjnv4atmAli8YJwV/SZ5sahZ20wpv75gioKj+KT+dUwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPqlffFjTY3am+J8yof38uuQpwSgMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvMS1xVjk4V05OamRxYjRuektoX2Z5NjVDbkJLQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTYvYWUwNDlhLTA3OGItNDJlZC1hMjhmLTZhYTQ0MzUyOGNl
NS8xL1RoUFF3S2NENEp6YVpNRXJDTjJpdDBtZ1Fwdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMRACABBnwA
ZP//AAABl2hReJwDEQAgAQZ8AGT//wAAAZdpmuJfMA0GCSqGSIb3DQEBCwUAA4IB
AQBxfErSA2qKldMtWhGwmRTXHl9S0n/1RG5NYBZCJQzCowAsNb01UglBuUGRfgRL
kvpv1HNd3P+n+8P410oKq0Ntd08upScsQwtaoDMa7qtplnZ5gJ3eA1e54pVddWLS
0Rib4CamSrDL9GsdEnnPlIPyIGVK8xvT879jIFOUK3PXvDCBynAJQKo9lAgR50iy
uru8tI6mk0HiTZptPSWA02Memh8k6VYRktYk1yqC9GOdey62wJuLO624T58Kljor
STbgxc05uucLu3rrXL4w9RocYQFhXRP5uDna/4hdBSFs/wIWwdRnOg7T9kecmVdd
qailUBHRrYeVYgfqcCwW5tkl
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:06 2025 by rpki-client