Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/irqt6GDrSaDnMtNMevxp6HDz-64.roa
File: irqt6GDrSaDnMtNMevxp6HDz-64.roa (raw, json)
Hash identifier: iKyKCaDowPiZk2n4ozdNPlznC/FrTOdWFzk/+2bi59k=
Subject key identifier: 8A:BA:AD:E8:60:EB:49:A0:E7:32:D3:4C:7A:FC:69:E8:70:F3:FB:AE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019A51CAE63A4DC60C7CC81B71748F1B97D1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/irqt6GDrSaDnMtNMevxp6HDz-64.roa
Signing time: Wed 05 Nov 2025 02:14:03 +0000
ROA not before: Wed 05 Nov 2025 02:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:198:55a3:fcb4/128 maxlen: 128
2001:67c:64:ffff:0:198:5ff0:79dc/128 maxlen: 128
2001:67c:64:ffff:0:198:ad2f:c10a/128 maxlen: 128
2001:67c:64:ffff:0:199:70e1:b209/128 maxlen: 128
2001:67c:64:ffff:0:199:7262:3881/128 maxlen: 128
2001:67c:64:ffff:0:199:befc:c22a/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 05 Nov 2025 03:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:ca:e6:3a:4d:c6:0c:7c:c8:1b:71:74:8f:1b:97:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Nov 5 02:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8abaade860eb49a0e732d34c7afc69e870f3fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d8:51:34:f4:e7:38:5b:6b:de:e3:70:26:8d:
0c:33:20:4b:47:ab:e7:16:cc:f3:8e:46:81:46:25:
2d:3d:a0:1f:7e:8a:fc:31:1e:e7:ff:da:6b:da:15:
82:e7:2c:9a:c3:50:3c:82:6c:1d:5f:c6:49:14:9c:
5b:3a:f7:ae:11:04:f4:7b:8e:da:be:31:a4:23:c6:
95:1d:86:08:cc:53:c1:d6:1c:ba:f3:5b:5f:a4:99:
9c:86:a3:24:4d:2e:5e:f1:c1:5e:29:15:a9:b7:c2:
89:6c:61:f7:c5:f0:fa:f4:83:9b:11:67:3f:10:ba:
6a:2a:c6:dc:86:f1:88:e9:e6:44:ca:21:fd:6f:f3:
4b:35:fe:5e:f3:31:55:5a:0d:d8:1e:97:0b:d8:76:
ef:ab:d5:49:b5:ec:c4:45:33:62:22:14:79:fa:4a:
6a:a7:9b:eb:05:77:29:66:96:26:e1:03:d7:5a:27:
46:8a:7b:4a:65:93:f4:a3:a1:04:4c:c2:40:1b:cc:
d3:5b:ab:cc:43:55:ad:28:ef:ba:db:89:ff:96:ee:
16:2e:d1:a0:a6:c1:3e:72:ea:11:2d:a3:8c:87:30:
e5:3e:70:1e:0e:ba:dc:de:4b:c3:28:4e:b2:f1:2f:
f7:87:76:c4:bc:f3:b5:1c:e0:78:d6:99:f1:1d:5a:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:AD:E8:60:EB:49:A0:E7:32:D3:4C:7A:FC:69:E8:70:F3:FB:AE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/irqt6GDrSaDnMtNMevxp6HDz-64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:198:55a3:fcb4/128
2001:67c:64:ffff:0:198:5ff0:79dc/128
2001:67c:64:ffff:0:198:ad2f:c10a/128
2001:67c:64:ffff:0:199:70e1:b209/128
2001:67c:64:ffff:0:199:7262:3881/128
2001:67c:64:ffff:0:199:befc:c22a/128
Signature Algorithm: sha256WithRSAEncryption
2c:57:24:39:6d:a0:4f:94:70:7a:a4:1e:49:b1:b5:0b:b9:b1:
34:32:b3:8e:ae:31:24:68:d9:b7:d9:71:5f:d2:f3:45:a9:a9:
25:d4:50:9a:b0:a7:38:ec:91:01:a5:0d:24:55:90:0a:28:3f:
09:2d:cc:24:90:09:9f:66:aa:28:50:4d:b2:93:b0:90:99:1c:
6e:72:d1:6a:b4:d6:99:94:2d:bc:e4:2d:f2:f4:3d:e6:25:49:
de:01:c6:1e:5d:4b:88:75:9b:a0:06:ad:b1:fa:ac:dc:23:c1:
ff:c6:fa:b1:62:d4:4c:05:79:d7:83:54:87:93:bc:c7:f3:8c:
5b:92:4a:b9:c4:36:04:c2:b9:12:1b:b8:d0:dd:0d:ad:1e:51:
08:8f:ed:e6:5f:9f:4b:8e:86:9a:1b:5c:41:a6:fc:12:cd:3a:
3d:fd:20:85:f5:b2:24:7d:c0:01:64:b1:7b:db:d1:c2:6f:45:
5b:92:58:66:c9:59:8c:26:b6:58:65:d9:1e:32:cf:cf:f4:e1:
bf:e9:16:91:63:86:f8:6a:fb:e8:da:42:1b:2d:d9:cf:d4:d0:
d5:9e:aa:d1:04:f5:3b:e0:65:dc:34:15:e3:6b:4a:f0:8b:c4:
0c:ad:8a:f3:df:df:0d:02:27:cc:5d:c0:c9:cb:2f:7d:ae:38:
89:9b:b9:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:57 2025 by rpki-client