Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/0_baLnH92etdSIkbm0fYUy8BwQ4.roa
File: 0_baLnH92etdSIkbm0fYUy8BwQ4.roa (raw, json)
Hash identifier: YOtPg+UlAFUcchCsxWHYcN7BtoY8fEjGpW72Zx+VaDk=
Subject key identifier: D3:F6:DA:2E:71:FD:D9:EB:5D:48:89:1B:9B:47:D8:53:2F:01:C1:0E
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 0196FC74CB6427AC53FE6331E54A8B881B9A
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/0_baLnH92etdSIkbm0fYUy8BwQ4.roa
Signing time: Fri 23 May 2025 09:23:54 +0000
ROA not before: Fri 23 May 2025 09:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210339
IP address blocks: 213.178.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 12:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:74:cb:64:27:ac:53:fe:63:31:e5:4a:8b:88:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: May 23 09:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f6da2e71fdd9eb5d48891b9b47d8532f01c10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:59:cd:9b:46:d4:b9:82:91:2a:34:ff:05:
3d:ee:60:d1:c6:07:54:fd:33:08:7b:d3:6f:ca:36:
86:51:0b:dd:f1:c6:f4:1d:63:bf:0e:b6:d8:51:c6:
b5:a0:36:1a:8e:24:fb:e8:09:8f:75:fe:de:40:69:
ce:ba:91:d4:c1:73:0b:7d:57:d2:f0:83:05:a6:9d:
03:4a:51:eb:d4:ad:10:90:e0:6c:d0:98:76:14:9e:
c5:9a:bd:ae:94:41:a2:74:d8:eb:09:ec:8d:78:23:
8b:14:87:0f:0a:9c:76:6f:93:72:c8:fe:63:54:25:
e5:11:43:a3:12:52:14:f6:1b:62:73:27:ec:6f:39:
45:e1:9f:37:c7:f0:aa:ac:91:16:26:14:90:d5:f9:
9a:e8:c8:b8:69:bc:3b:0b:11:16:71:b7:94:49:0f:
8c:8f:80:f2:53:24:69:3e:4a:ce:64:97:c3:14:82:
d7:a4:47:19:c2:3d:16:b3:d1:7f:fa:eb:89:e6:c7:
1a:98:94:aa:78:ac:50:ab:0d:e1:b8:66:c3:db:4b:
00:48:22:19:86:67:f8:69:a7:9b:20:80:c3:f1:ce:
6c:5d:76:ca:43:74:af:37:0e:2d:c9:4a:76:e5:e5:
1e:df:f1:08:32:bc:af:c1:5d:40:6e:f9:b7:aa:1c:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:DA:2E:71:FD:D9:EB:5D:48:89:1B:9B:47:D8:53:2F:01:C1:0E
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/0_baLnH92etdSIkbm0fYUy8BwQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.148.0/22
Signature Algorithm: sha256WithRSAEncryption
33:43:6f:68:c5:ac:71:d0:2f:5f:f9:1c:07:7b:69:4f:f1:6f:
26:d3:7d:8d:01:79:85:d0:3f:6c:29:9e:a8:16:41:a1:ff:9c:
21:3b:ed:d4:81:71:ac:50:11:44:7d:80:fb:96:db:c3:45:94:
b0:0f:39:b9:62:5d:3a:a7:56:a7:6b:13:a4:1a:dd:b2:82:e3:
ae:cd:df:bf:5b:a6:14:f3:5a:4c:16:ae:62:a1:fe:30:67:a6:
58:46:19:c7:dd:c4:6c:be:d2:36:26:41:a7:ba:c3:c4:44:79:
2f:9e:3e:f7:27:56:60:a0:92:10:64:e5:8b:73:b6:d1:c4:5e:
97:4b:ad:59:91:a8:77:f7:10:8b:d0:84:e5:35:3e:c5:d0:5c:
21:28:1a:13:5a:54:be:24:06:db:4a:17:cf:9b:cf:4d:f6:4c:
51:3c:ac:7d:0a:4e:17:cd:88:2a:60:20:ca:b8:bf:ca:06:ba:
27:f5:be:c1:4a:50:b5:35:b9:21:d7:0a:ee:b3:64:17:6f:b9:
61:36:66:34:bd:3d:55:e4:ff:a8:b9:d2:a5:f7:97:69:9b:22:
e1:06:e4:06:06:a5:b0:48:e2:8a:7b:bd:ff:2a:43:c6:60:3a:
e8:15:c4:56:bf:20:65:93:81:c2:ea:25:a1:64:50:f0:dc:25:
77:bd:5f:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb8dMtkJ6xT/mMx5UqLiBuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi
ZjY1YjEwHhcNMjUwNTIzMDkyMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2Y2ZGEyZTcxZmRkOWViNWQ0ODg5MWI5YjQ3ZDg1MzJmMDFjMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ZZzZtG1LmCkSo0/wU97mDRxgdU
/TMIe9NvyjaGUQvd8cb0HWO/DrbYUca1oDYajiT76AmPdf7eQGnOupHUwXMLfVfS
8IMFpp0DSlHr1K0QkOBs0Jh2FJ7Fmr2ulEGidNjrCeyNeCOLFIcPCpx2b5NyyP5j
VCXlEUOjElIU9hticyfsbzlF4Z83x/CqrJEWJhSQ1fma6Mi4abw7CxEWcbeUSQ+M
j4DyUyRpPkrOZJfDFILXpEcZwj0Ws9F/+uuJ5scamJSqeKxQqw3huGbD20sASCIZ
hmf4aaebIIDD8c5sXXbKQ3SvNw4tyUp25eUe3/EIMryvwV1Abvm3qhwOQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNP22i5x/dnrXUiJG5tH2FMvAcEOMB8GA1UdIwQY
MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt
MGQ3YzUyMTU0MTgzLzEvMF9iYUxuSDkyZXRkU0lrYm0wZllVeThCd1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz
LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bKUMA0G
CSqGSIb3DQEBCwUAA4IBAQAzQ29oxaxx0C9f+RwHe2lP8W8m032NAXmF0D9sKZ6o
FkGh/5whO+3UgXGsUBFEfYD7ltvDRZSwDzm5Yl06p1anaxOkGt2yguOuzd+/W6YU
81pMFq5iof4wZ6ZYRhnH3cRsvtI2JkGnusPERHkvnj73J1ZgoJIQZOWLc7bRxF6X
S61Zkah39xCL0ITlNT7F0FwhKBoTWlS+JAbbShfPm89N9kxRPKx9Ck4XzYgqYCDK
uL/KBron9b7BSlC1Nbkh1wrus2QXb7lhNmY0vT1V5P+oudKl95dpmyLhBuQGBqWw
SOKKe73/KkPGYDroFcRWvyBlk4HC6iWhZFDw3CV3vV+W
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:26:20 2025 by rpki-client