Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/ROCrie_tjf7Y8FyCXYb7iR-biQc.roa
File: ROCrie_tjf7Y8FyCXYb7iR-biQc.roa (raw, json)
Hash identifier: YO2AARyxL6fASQUE80dl83kRZNoBhMUIs0yzZ9B5CDY=
Subject key identifier: 44:E0:AB:89:EF:ED:8D:FE:D8:F0:5C:82:5D:86:FB:89:1F:9B:89:07
Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial: 01974C05CCA35A7D422A6AE089BC178EFB41
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/ROCrie_tjf7Y8FyCXYb7iR-biQc.roa
Signing time: Sat 07 Jun 2025 20:12:17 +0000
ROA not before: Sat 07 Jun 2025 20:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25090
IP address blocks: 193.8.222.0/23 maxlen: 23
194.56.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 11:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:05:cc:a3:5a:7d:42:2a:6a:e0:89:bc:17:8e:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Validity
Not Before: Jun 7 20:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44e0ab89efed8dfed8f05c825d86fb891f9b8907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:9e:34:4a:8a:15:9c:e8:8f:bb:7c:5e:41:
0c:fe:f3:d4:ae:54:29:1a:51:d3:47:77:4b:6e:cf:
99:df:ee:e5:49:56:7b:47:63:1a:2e:35:da:42:50:
17:fe:fa:10:c0:d1:f7:16:a5:42:c3:f7:ef:21:60:
a4:eb:5b:53:19:d2:a9:97:cd:b4:cb:60:6a:ed:42:
ea:82:9e:6e:a9:f9:ec:5d:9d:b9:d9:b8:d1:fc:69:
93:1a:2f:49:9d:46:be:b6:8a:53:d7:a0:89:c3:ca:
38:72:95:40:bc:49:66:79:2a:71:bc:f1:ae:f5:5a:
ae:6c:d8:7d:95:50:30:37:63:da:05:7e:0a:88:20:
7c:b9:92:01:44:79:cc:33:7c:2f:e3:80:b1:79:22:
15:42:68:55:c9:63:b8:e3:05:e6:45:d3:f9:ed:3e:
a8:ba:c6:c2:58:30:df:66:d5:51:ef:05:52:3d:65:
8c:19:60:0d:fd:3d:be:83:b6:e1:dc:b7:68:c5:41:
06:fc:2d:b0:83:ed:d5:a7:a6:4e:e4:f1:4c:6f:74:
75:79:77:87:62:80:87:5a:3c:34:89:7e:f5:c7:f2:
fc:07:8b:0e:21:c5:38:d6:48:c9:d5:db:81:99:1f:
f6:ec:d0:eb:cc:23:64:31:1f:a3:6e:36:c6:ca:77:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:AB:89:EF:ED:8D:FE:D8:F0:5C:82:5D:86:FB:89:1F:9B:89:07
X509v3 Authority Key Identifier:
keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/ROCrie_tjf7Y8FyCXYb7iR-biQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.222.0/23
194.56.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:d2:3d:b5:6a:31:e2:94:7d:1c:6b:4e:ac:52:49:1c:2f:e5:
f6:97:50:34:b2:d9:38:31:60:54:a2:8a:83:07:4f:58:b1:80:
08:fa:d2:bc:52:c9:0e:d0:45:5f:24:31:06:39:b6:b5:e5:7a:
a9:67:be:ea:97:86:2b:3a:60:39:e9:ca:6b:57:60:27:35:8a:
70:ef:c0:bb:db:85:92:31:59:56:f2:c2:df:eb:97:4c:7f:f1:
72:e6:30:96:ce:36:bf:a0:32:1a:98:d2:bd:89:77:b4:ac:b8:
ad:28:a4:d2:06:dc:3a:83:9d:1a:4c:0a:c5:91:6e:b3:4a:18:
1d:8a:82:cb:bd:a4:f6:64:86:69:2a:60:d5:e3:e6:18:05:96:
9d:d5:b4:77:e0:14:af:a4:8a:c3:21:4d:ce:e1:c7:cc:dc:54:
ba:0d:e3:f8:25:0e:2d:91:16:f6:88:28:43:fc:3e:33:01:72:
c2:28:b8:69:8b:80:c2:57:7b:89:1a:9a:da:15:9e:3a:5d:f0:
3e:4f:9b:1a:dc:cc:f8:81:7c:82:61:e7:c8:aa:8e:41:80:5d:
9f:6d:d3:bc:ce:60:fe:1e:e9:c2:10:75:4c:3c:b5:f7:63:c9:
00:5f:6e:5f:72:76:ec:3e:e1:cf:0b:b8:2b:42:a7:16:99:23:
46:63:5c:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdMBcyjWn1CKmrgibwXjvtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjUwNjA3MjAxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGUwYWI4OWVmZWQ4ZGZlZDhmMDVjODI1ZDg2ZmI4OTFmOWI4OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVSeNEqKFZzoj7t8XkEM/vPUrlQp
GlHTR3dLbs+Z3+7lSVZ7R2MaLjXaQlAX/voQwNH3FqVCw/fvIWCk61tTGdKpl820
y2Bq7ULqgp5uqfnsXZ252bjR/GmTGi9JnUa+topT16CJw8o4cpVAvElmeSpxvPGu
9VqubNh9lVAwN2PaBX4KiCB8uZIBRHnMM3wv44CxeSIVQmhVyWO44wXmRdP57T6o
usbCWDDfZtVR7wVSPWWMGWAN/T2+g7bh3LdoxUEG/C2wg+3Vp6ZO5PFMb3R1eXeH
YoCHWjw0iX71x/L8B4sOIcU41kjJ1duBmR/27NDrzCNkMR+jbjbGynfMIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFETgq4nv7Y3+2PBcgl2G+4kfm4kHMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvUk9DcmllX3RqZjdZOEZ5Q1hZYjdpUi1iaVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwQjeAwQC
wjh4MA0GCSqGSIb3DQEBCwUAA4IBAQB10j21ajHilH0ca06sUkkcL+X2l1A0stk4
MWBUooqDB09YsYAI+tK8UskO0EVfJDEGOba15XqpZ77ql4YrOmA56cprV2AnNYpw
78C724WSMVlW8sLf65dMf/Fy5jCWzja/oDIamNK9iXe0rLitKKTSBtw6g50aTArF
kW6zShgdioLLvaT2ZIZpKmDV4+YYBZad1bR34BSvpIrDIU3O4cfM3FS6DeP4JQ4t
kRb2iChD/D4zAXLCKLhpi4DCV3uJGpraFZ46XfA+T5sa3Mz4gXyCYefIqo5BgF2f
bdO8zmD+HunCEHVMPLX3Y8kAX25fcnbsPuHPC7grQqcWmSNGY1z0
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:21 2025 by rpki-client