Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VBBPZz2Clmq9JQ9D1jJY9HQ50qs.roa
File: VBBPZz2Clmq9JQ9D1jJY9HQ50qs.roa (raw, json)
Hash identifier: gk3nUUVigHcZonMDdgzXZscs9W+bga6UT9YBjSWqBBE=
Subject key identifier: 54:10:4F:67:3D:82:96:6A:BD:25:0F:43:D6:32:58:F4:74:39:D2:AB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01987BA8FC6D1B3CFFA8C3CA49F09900F8C7
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VBBPZz2Clmq9JQ9D1jJY9HQ50qs.roa
Signing time: Tue 05 Aug 2025 19:15:28 +0000
ROA not before: Tue 05 Aug 2025 19:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:198:55a3:fcb4/128 maxlen: 128
2001:67c:64:ffff:0:198:5ff0:79dc/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 05 Aug 2025 20:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:a8:fc:6d:1b:3c:ff:a8:c3:ca:49:f0:99:00:f8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Aug 5 19:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54104f673d82966abd250f43d63258f47439d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:bb:da:09:c9:3a:9f:bd:cf:9f:05:ee:3c:
f3:30:0d:66:95:c5:20:d6:f3:e3:90:8c:c5:cb:25:
d2:ba:29:2a:5a:4d:dc:a4:95:85:d7:89:4e:3d:d4:
64:fd:f9:9c:e4:49:63:6c:06:af:74:25:36:cb:b7:
1e:16:f6:43:8f:3a:39:cd:38:fb:c4:a4:1f:89:25:
34:c4:85:e6:f6:9d:fa:df:14:ea:6f:7a:87:08:1e:
1f:56:ad:1e:2e:77:fc:84:4d:a3:f4:c7:e9:06:dd:
9a:c8:1a:70:76:bf:af:dd:e1:23:60:ed:ad:17:01:
20:96:38:a7:fb:b7:a6:ad:84:89:99:df:30:31:86:
c2:8d:b3:89:b8:4a:8e:ec:5b:14:bb:ba:70:f5:d1:
b1:6a:13:94:d3:10:13:20:2b:81:db:a1:d0:99:f4:
f9:f7:c2:0f:87:11:18:68:ba:7a:b4:d6:46:df:50:
5f:f3:c6:6b:80:47:fa:31:c2:ba:64:d7:46:dc:4a:
40:22:a8:4a:a8:67:ae:77:97:de:f2:f9:17:59:7f:
c4:0e:a6:a5:1e:a5:6f:b4:9f:5d:1c:04:5c:a1:41:
39:e9:d2:55:64:84:88:bf:18:e0:fd:7b:d5:48:7d:
91:32:c8:fd:7d:59:b2:e2:f6:70:0b:a2:d3:3a:ca:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:4F:67:3D:82:96:6A:BD:25:0F:43:D6:32:58:F4:74:39:D2:AB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VBBPZz2Clmq9JQ9D1jJY9HQ50qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:198:55a3:fcb4/128
2001:67c:64:ffff:0:198:5ff0:79dc/128
Signature Algorithm: sha256WithRSAEncryption
24:7b:14:f6:00:30:cb:be:2a:fa:2a:16:54:aa:86:82:e8:59:
2e:9f:62:68:2a:90:1d:4a:80:bc:9f:26:8a:9c:eb:53:02:d8:
3d:4b:3f:bc:02:af:cd:e1:a1:ae:dd:9c:a9:b4:24:5a:be:2f:
3e:c9:7f:16:98:b5:82:43:e1:16:89:16:b4:3e:d0:56:18:9d:
a1:7c:aa:13:96:d3:cc:6d:6d:cd:59:66:4d:94:e2:ef:9e:17:
6b:1f:86:f6:bb:ac:c6:9b:b6:7c:21:bc:d3:93:9b:36:eb:c9:
05:b8:f0:5e:e2:32:3f:5a:b6:22:1e:87:75:84:a1:d4:b5:46:
82:aa:49:ce:d7:01:9d:d9:0c:68:41:73:91:46:56:63:bd:74:
f9:40:ff:12:1e:e2:0d:c1:75:2e:4c:54:07:13:d3:35:68:a2:
d0:7b:2e:a3:27:47:4e:3a:33:da:d2:45:f4:a8:90:ff:62:02:
7f:e0:4e:44:1b:6f:14:54:e6:0c:d6:26:8e:71:c1:26:df:43:
aa:cc:32:2b:dc:94:6b:9a:0c:b3:de:6d:4f:c3:aa:7e:c5:d1:
b4:81:f4:f1:4b:a2:6e:14:a3:f6:8a:e7:e1:b7:dd:35:51:6e:
d0:3b:f1:76:f2:d9:99:42:0e:08:c4:5f:43:90:73:51:28:73:
18:de:28:e6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZh7qPxtGzz/qMPKSfCZAPjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwODA1MTkxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDEwNGY2NzNkODI5NjZhYmQyNTBmNDNkNjMyNThmNDc0MzlkMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/u72gnJOp+9z58F7jzzMA1mlcUg
1vPjkIzFyyXSuikqWk3cpJWF14lOPdRk/fmc5EljbAavdCU2y7ceFvZDjzo5zTj7
xKQfiSU0xIXm9p363xTqb3qHCB4fVq0eLnf8hE2j9MfpBt2ayBpwdr+v3eEjYO2t
FwEgljin+7emrYSJmd8wMYbCjbOJuEqO7FsUu7pw9dGxahOU0xATICuB26HQmfT5
98IPhxEYaLp6tNZG31Bf88ZrgEf6McK6ZNdG3EpAIqhKqGeud5fe8vkXWX/EDqal
HqVvtJ9dHARcoUE56dJVZISIvxjg/XvVSH2RMsj9fVmy4vZwC6LTOsqSsQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFQQT2c9gpZqvSUPQ9YyWPR0OdKrMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvVkJCUFp6MkNsbXE5SlE5RDFqSlk5SFE1MHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGYVaP8tAMRACABBnwAZP//AAABmF/wedwwDQYJKoZIhvcNAQELBQADggEB
ACR7FPYAMMu+KvoqFlSqhoLoWS6fYmgqkB1KgLyfJoqc61MC2D1LP7wCr83hoa7d
nKm0JFq+Lz7JfxaYtYJD4RaJFrQ+0FYYnaF8qhOW08xtbc1ZZk2U4u+eF2sfhva7
rMabtnwhvNOTmzbryQW48F7iMj9atiIeh3WEodS1RoKqSc7XAZ3ZDGhBc5FGVmO9
dPlA/xIe4g3BdS5MVAcT0zVootB7LqMnR046M9rSRfSokP9iAn/gTkQbbxRU5gzW
Jo5xwSbfQ6rMMivclGuaDLPebU/Dqn7F0bSB9PFLom4Uo/aK5+G33TVRbtA78Xby
2ZlCDgjEX0OQc1EocxjeKOY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:21 2025 by rpki-client