Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/7qTJ1E163Kq4tHZjVghpgLtC7K0.roa
File: 7qTJ1E163Kq4tHZjVghpgLtC7K0.roa (raw, json)
Hash identifier: 0PoLGEuZJlbtwfL8cwNPKtTRG1NclQ2t+N6ZDFmsgv4=
Subject key identifier: EE:A4:C9:D4:4D:7A:DC:AA:B8:B4:76:63:56:08:69:80:BB:42:EC:AD
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 0194EFA6E7A57A302E972372D13A40DB075B
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/7qTJ1E163Kq4tHZjVghpgLtC7K0.roa
Signing time: Mon 10 Feb 2025 11:38:00 +0000
ROA not before: Mon 10 Feb 2025 11:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 16:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:a6:e7:a5:7a:30:2e:97:23:72:d1:3a:40:db:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 10 11:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea4c9d44d7adcaab8b4766356086980bb42ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:2f:2d:45:20:ff:c0:9b:a6:dc:4a:52:10:
4b:50:57:45:f1:b0:7d:aa:2d:0e:86:09:dd:c6:33:
f1:ba:9c:dc:bb:9f:18:e6:39:d5:e5:08:6e:84:8a:
71:ed:de:a2:fb:3e:1b:0d:55:9b:fb:b8:7d:91:c6:
c7:60:cc:c6:68:ed:82:18:c4:5f:45:c0:fd:d7:02:
dd:a0:65:48:ee:76:11:e3:71:5b:7e:fe:12:de:1a:
ff:3f:e7:6a:b4:1c:50:4f:c6:ee:60:7d:28:5b:1b:
e7:ef:44:93:b4:8c:5d:67:e9:e0:e9:61:9f:3d:e3:
76:23:c7:ab:68:ba:3a:49:5d:b5:ca:6c:e4:91:e4:
34:87:88:09:d4:73:d4:1b:56:45:21:cd:86:f5:b9:
a9:73:b7:6e:7e:1d:23:f7:e7:72:88:c2:c8:76:08:
50:ad:c9:b7:a2:52:fc:2f:22:38:6e:07:9c:95:39:
56:19:77:9c:38:49:3f:38:83:92:59:48:ed:eb:9c:
aa:a3:1c:70:33:8a:8d:e6:a4:52:b1:9e:9a:86:04:
f3:87:e5:7d:38:08:11:ab:3b:2d:88:67:ef:93:5a:
3f:e8:32:b5:4c:18:9f:10:d5:30:83:73:af:52:67:
fe:8e:ce:0e:ff:d3:bb:4f:1a:e8:fc:cb:2a:46:45:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:C9:D4:4D:7A:DC:AA:B8:B4:76:63:56:08:69:80:BB:42:EC:AD
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/7qTJ1E163Kq4tHZjVghpgLtC7K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
09:98:b5:55:9a:96:5a:f8:bb:5c:72:7b:6a:2f:ef:9f:e7:9a:
18:ae:c0:9e:d9:c2:47:be:3b:cc:f0:19:03:62:26:d6:58:b5:
21:82:e7:c3:52:ff:a3:33:80:43:25:0f:43:1c:68:bb:40:24:
07:c9:f8:8f:26:66:30:35:20:3f:82:69:2c:97:e0:1d:79:24:
e5:b2:cb:93:98:ca:db:c2:0e:c7:4c:4d:56:e1:bb:20:0e:db:
61:b7:32:40:43:a1:84:dc:1b:e3:67:30:89:d2:7e:44:c7:5c:
4a:bf:e1:6f:8a:74:cc:09:b9:de:7a:1c:9a:f9:e0:01:c4:7c:
05:a8:ee:57:94:2b:98:6c:f9:0a:58:88:94:08:11:de:a8:93:
69:c5:08:58:fb:92:17:69:69:a4:a0:45:92:7a:b5:a9:df:0f:
71:93:fe:37:c2:44:f3:89:dd:c0:37:28:30:47:57:1f:fe:ee:
1e:30:5d:a4:66:8d:76:ac:b8:a2:7f:d9:10:39:2d:8d:e0:bd:
b6:e5:90:cb:70:e2:44:88:61:d3:3c:6e:ac:88:ef:9b:51:4e:
db:7f:5e:10:3e:33:80:1b:d2:3f:53:d6:e2:8e:e0:c6:63:f2:
dc:8a:7f:7c:09:8f:3b:be:f1:e8:62:25:80:61:c7:15:b3:18:
61:d2:14:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTvpuelejAulyNy0TpA2wdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjUwMjEwMTEzODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWE0YzlkNDRkN2FkY2FhYjhiNDc2NjM1NjA4Njk4MGJiNDJlY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB0vLUUg/8CbptxKUhBLUFdF8bB9
qi0OhgndxjPxupzcu58Y5jnV5QhuhIpx7d6i+z4bDVWb+7h9kcbHYMzGaO2CGMRf
RcD91wLdoGVI7nYR43Fbfv4S3hr/P+dqtBxQT8buYH0oWxvn70STtIxdZ+ng6WGf
PeN2I8eraLo6SV21ymzkkeQ0h4gJ1HPUG1ZFIc2G9bmpc7dufh0j9+dyiMLIdghQ
rcm3olL8LyI4bgeclTlWGXecOEk/OIOSWUjt65yqoxxwM4qN5qRSsZ6ahgTzh+V9
OAgRqzstiGfvk1o/6DK1TBifENUwg3OvUmf+js4O/9O7Txro/MsqRkX+FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6kydRNetyquLR2Y1YIaYC7QuytMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvN3FUSjFFMTYzS3E0dEhaalZnaHBnTHRDN0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6LMA0G
CSqGSIb3DQEBCwUAA4IBAQAJmLVVmpZa+LtccntqL++f55oYrsCe2cJHvjvM8BkD
YibWWLUhgufDUv+jM4BDJQ9DHGi7QCQHyfiPJmYwNSA/gmksl+AdeSTlssuTmMrb
wg7HTE1W4bsgDtthtzJAQ6GE3BvjZzCJ0n5Ex1xKv+FvinTMCbneehya+eABxHwF
qO5XlCuYbPkKWIiUCBHeqJNpxQhY+5IXaWmkoEWSerWp3w9xk/43wkTzid3ANygw
R1cf/u4eMF2kZo12rLiif9kQOS2N4L225ZDLcOJEiGHTPG6siO+bUU7bf14QPjOA
G9I/U9bijuDGY/Lcin98CY87vvHoYiWAYccVsxhh0hQl
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:19:12 2025 by rpki-client