Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7O-G6EAQWyXT93fZlEXtBSQ84Iw.roa
File: 7O-G6EAQWyXT93fZlEXtBSQ84Iw.roa (raw, json)
Hash identifier: LBkvdN3tEQ1fPbCYZV+yA5eqf827MTM6yhWvNJ9WPM8=
Subject key identifier: EC:EF:86:E8:40:10:5B:25:D3:F7:77:D9:94:45:ED:05:24:3C:E0:8C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976D7F21D4A149FFACC4F021BEC0EB6A07
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7O-G6EAQWyXT93fZlEXtBSQ84Iw.roa
Signing time: Sat 14 Jun 2025 08:12:17 +0000
ROA not before: Sat 14 Jun 2025 08:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 09:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:7f:21:d4:a1:49:ff:ac:c4:f0:21:be:c0:eb:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 08:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecef86e840105b25d3f777d99445ed05243ce08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:7e:47:c4:9c:84:13:aa:be:52:52:b6:16:
24:98:c6:96:1b:4b:7b:1a:9c:39:dd:8e:d9:97:bb:
83:b7:54:45:2e:26:f5:ec:ba:89:14:e5:6d:71:f7:
c0:9d:f8:ee:cc:60:11:ce:43:f8:e1:4f:f5:e5:e9:
b8:ff:2a:ed:1e:6a:10:a1:6e:34:26:3b:3c:bb:1e:
24:a6:0f:92:cf:07:63:9a:d4:9b:74:2e:1d:50:6d:
2d:37:76:fa:df:3f:f9:37:47:10:3f:b9:54:39:bc:
d9:1b:05:0b:cd:b5:d0:fa:21:6d:21:b7:1e:d2:c6:
69:9e:86:c0:68:30:e2:43:ef:ce:5a:ee:4c:06:a5:
87:30:83:02:48:3e:74:d0:17:1e:43:4d:b8:2a:3c:
fe:cd:6a:99:f5:62:9e:bf:99:98:46:68:5f:90:4f:
dc:cc:81:11:6f:ea:f0:7b:2b:60:d6:d9:41:82:b9:
f4:1e:fe:b5:fd:83:18:cf:c0:88:82:28:e5:bb:56:
ff:9c:43:2b:ba:ae:fe:ce:e0:ef:0c:25:33:56:bc:
9c:d0:cc:3e:23:da:7c:da:84:66:c3:5d:bb:15:3b:
47:58:7c:cf:76:7a:79:1b:b3:7d:51:1b:0c:e2:3d:
78:df:54:6d:82:13:22:b9:03:aa:54:d8:6e:72:84:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:86:E8:40:10:5B:25:D3:F7:77:D9:94:45:ED:05:24:3C:E0:8C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7O-G6EAQWyXT93fZlEXtBSQ84Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2b:d5:5f:c2:95:c8:ca:e1:da:fd:aa:69:a7:3e:52:26:7d:18:
10:f3:e8:14:f9:76:5b:08:d7:e8:35:23:57:2c:05:63:ad:7a:
bc:99:46:46:24:52:73:17:bd:6e:fc:8b:16:2f:ac:54:c3:ac:
59:28:95:68:e8:2d:57:f4:13:19:c5:ae:b7:86:77:c3:5b:4b:
89:71:14:f1:c4:e7:a6:1a:71:14:d3:ed:f0:ba:43:46:ad:3f:
93:74:87:94:f1:c4:72:b9:3f:e0:54:bb:87:f0:3d:25:48:2d:
0b:25:0b:4a:6e:2a:04:c5:61:10:25:e5:cb:25:07:45:8e:fc:
c6:26:de:95:8e:50:c4:2d:7b:dd:c0:7d:b9:8d:36:ca:cf:42:
be:48:ac:43:2a:e4:21:e2:a2:29:c1:d8:6c:39:7b:db:dd:35:
9f:64:97:9a:5a:72:95:42:7c:62:ab:03:e8:c3:36:a9:d0:86:
49:15:d8:be:af:f3:60:0d:a5:ea:92:b0:88:e6:ec:0e:7a:83:
51:69:fd:8f:1d:eb:3e:92:20:bf:47:d0:51:97:52:63:18:dc:
69:36:64:8d:2d:c9:a4:60:46:30:df:00:22:cd:9d:e0:b0:1a:
f5:8e:3c:a2:41:20:54:05:cc:c5:9b:8d:5b:c6:73:00:2f:c7:
63:16:fd:0c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZdtfyHUoUn/rMTwIb7A62oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjE0MDgxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2VmODZlODQwMTA1YjI1ZDNmNzc3ZDk5NDQ1ZWQwNTI0M2NlMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY9+R8SchBOqvlJSthYkmMaWG0t7
Gpw53Y7Zl7uDt1RFLib17LqJFOVtcffAnfjuzGARzkP44U/15em4/yrtHmoQoW40
Jjs8ux4kpg+SzwdjmtSbdC4dUG0tN3b63z/5N0cQP7lUObzZGwULzbXQ+iFtIbce
0sZpnobAaDDiQ+/OWu5MBqWHMIMCSD500BceQ024Kjz+zWqZ9WKev5mYRmhfkE/c
zIERb+rweytg1tlBgrn0Hv61/YMYz8CIgijlu1b/nEMruq7+zuDvDCUzVryc0Mw+
I9p82oRmw127FTtHWHzPdnp5G7N9URsM4j1431RtghMiuQOqVNhucoTkQwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOzvhuhAEFsl0/d32ZRF7QUkPOCMMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvN08tRzZFQVFXeVhUOTNmWmxFWHRCU1E4NEl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGXaFF4nDANBgkqhkiG9w0BAQsFAAOCAQEAK9VfwpXIyuHa/apppz5SJn0Y
EPPoFPl2WwjX6DUjVywFY616vJlGRiRScxe9bvyLFi+sVMOsWSiVaOgtV/QTGcWu
t4Z3w1tLiXEU8cTnphpxFNPt8LpDRq0/k3SHlPHEcrk/4FS7h/A9JUgtCyULSm4q
BMVhECXlyyUHRY78xibelY5QxC173cB9uY02ys9CvkisQyrkIeKiKcHYbDl72901
n2SXmlpylUJ8YqsD6MM2qdCGSRXYvq/zYA2l6pKwiObsDnqDUWn9jx3rPpIgv0fQ
UZdSYxjcaTZkjS3JpGBGMN8AIs2d4LAa9Y48okEgVAXMxZuNW8ZzAC/HYxb9DA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:19:03 2025 by rpki-client