Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/tPmN_D_aUxj5Ow6DvV2qNIUYXBA.roa
File: tPmN_D_aUxj5Ow6DvV2qNIUYXBA.roa (raw, json)
Hash identifier: RuzdEteh/TRG3j2lptiHo6loKLoTlQbhDA3RFMG6e4A=
Subject key identifier: B4:F9:8D:FC:3F:DA:53:18:F9:3B:0E:83:BD:5D:AA:34:85:18:5C:10
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01957F5483C3D510D8C6B3E020EABBD4ABC4
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/tPmN_D_aUxj5Ow6DvV2qNIUYXBA.roa
Signing time: Mon 10 Mar 2025 09:13:19 +0000
ROA not before: Mon 10 Mar 2025 09:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 91.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 15:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:54:83:c3:d5:10:d8:c6:b3:e0:20:ea:bb:d4:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Mar 10 09:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f98dfc3fda5318f93b0e83bd5daa3485185c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:08:4a:10:08:9c:4e:00:99:13:60:0c:9b:
fe:5a:6c:86:a4:0b:dc:b7:3f:38:e1:ab:60:6c:2e:
a3:18:1a:a6:bf:ff:ce:aa:6c:37:69:fc:c3:38:e2:
71:11:0a:2a:35:b1:8b:dd:30:b9:46:26:ca:94:1d:
89:48:d9:6c:c1:aa:a9:8f:a2:5a:3b:35:80:7f:3f:
d8:15:0e:97:96:ab:1f:a3:1e:f1:52:e0:c3:4d:04:
06:d2:f2:c3:60:f1:17:8a:09:52:35:b6:78:d0:fa:
4a:de:3a:66:a2:59:45:ad:8b:f8:c4:6c:4b:68:0f:
50:3d:c3:bd:1b:74:32:e7:85:6e:51:fa:dc:f5:3b:
58:fc:22:49:af:a0:99:43:39:9c:62:b6:e9:61:8c:
4e:7b:39:0f:4a:00:c2:96:87:07:19:10:58:3c:4b:
91:ff:fa:c9:9e:8f:ca:d2:d0:03:43:7f:22:14:57:
a3:95:72:2b:47:f1:6f:41:93:dd:a7:00:b2:ab:81:
11:09:2d:f6:8b:bf:3d:fa:1d:05:c9:78:fd:6b:2c:
2e:b9:fe:34:44:5a:d1:bd:5c:54:a3:0e:68:34:40:
da:60:ac:57:49:3b:ab:a2:93:ad:6a:47:ee:1a:17:
82:6c:ec:5a:38:32:fc:66:19:2d:10:e0:7c:e2:1d:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:8D:FC:3F:DA:53:18:F9:3B:0E:83:BD:5D:AA:34:85:18:5C:10
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/tPmN_D_aUxj5Ow6DvV2qNIUYXBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0c:7c:a4:5b:d0:47:3a:d1:a9:fd:98:39:5e:76:c6:03:04:
56:50:7c:9c:b3:ed:3a:44:d0:84:3e:df:ad:6e:5a:03:af:27:
c7:8e:11:50:fb:3a:b7:90:f1:ee:61:bc:84:61:bf:96:e7:30:
d5:9f:4b:e6:a5:f1:22:9c:ea:aa:4e:c0:28:38:36:e0:c3:f2:
de:67:53:da:b8:9e:d4:16:a2:03:57:ef:0c:55:4e:f3:4e:ea:
a9:cb:aa:2c:bd:fa:1b:4f:a0:30:49:c7:31:f3:0a:cd:ec:cb:
55:e6:85:5b:23:a5:c8:2c:bf:eb:80:ee:2c:90:e1:17:1c:c7:
1a:62:48:42:91:de:44:31:33:1c:1a:4e:21:b8:40:ae:8b:2c:
c0:f7:31:f7:2c:60:c4:5c:4d:1a:97:f0:d5:4e:1f:f1:a3:6b:
4b:b5:9e:02:91:70:6d:12:65:e1:a1:f2:26:11:ba:a1:a0:a2:
db:36:e9:52:bd:56:9b:fd:b0:91:58:a1:1c:93:f2:ad:1e:60:
ad:5d:65:bf:62:fb:8b:90:cc:88:5f:32:cd:bb:69:ed:e6:85:
b0:bf:3f:86:4f:5b:47:8b:1f:f8:e7:bb:72:ae:69:62:b2:84:
2b:b4:41:bb:a5:2a:52:ae:a6:7d:1d:16:70:70:5f:41:c6:99:
97:e8:b8:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZV/VIPD1RDYxrPgIOq71KvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjUwMzEwMDkxMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGY5OGRmYzNmZGE1MzE4ZjkzYjBlODNiZDVkYWEzNDg1MTg1YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN0IShAInE4AmRNgDJv+WmyGpAvc
tz844atgbC6jGBqmv//Oqmw3afzDOOJxEQoqNbGL3TC5RibKlB2JSNlswaqpj6Ja
OzWAfz/YFQ6Xlqsfox7xUuDDTQQG0vLDYPEXiglSNbZ40PpK3jpmollFrYv4xGxL
aA9QPcO9G3Qy54VuUfrc9TtY/CJJr6CZQzmcYrbpYYxOezkPSgDClocHGRBYPEuR
//rJno/K0tADQ38iFFejlXIrR/FvQZPdpwCyq4ERCS32i789+h0FyXj9aywuuf40
RFrRvVxUow5oNEDaYKxXSTuropOtakfuGheCbOxaODL8ZhktEOB84h1DlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLT5jfw/2lMY+TsOg71dqjSFGFwQMB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvdFBtTl9EX2FVeGo1T3c2RHZWMnFOSVVZWEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hHMA0G
CSqGSIb3DQEBCwUAA4IBAQAvDHykW9BHOtGp/Zg5XnbGAwRWUHycs+06RNCEPt+t
bloDryfHjhFQ+zq3kPHuYbyEYb+W5zDVn0vmpfEinOqqTsAoODbgw/LeZ1PauJ7U
FqIDV+8MVU7zTuqpy6osvfobT6AwSccx8wrN7MtV5oVbI6XILL/rgO4skOEXHMca
YkhCkd5EMTMcGk4huECuiyzA9zH3LGDEXE0al/DVTh/xo2tLtZ4CkXBtEmXhofIm
EbqhoKLbNulSvVab/bCRWKEck/KtHmCtXWW/YvuLkMyIXzLNu2nt5oWwvz+GT1tH
ix/457tyrmlisoQrtEG7pSpSrqZ9HRZwcF9BxpmX6LhH
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:12 2025 by rpki-client