Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/tQHf-bVr3b9LjEv6VI7zGLLmtFA.roa
File: tQHf-bVr3b9LjEv6VI7zGLLmtFA.roa (raw, json)
Hash identifier: rZ2sT6AyIlv0tJdJyCEet7SOUfG6vfnxJOOgxxFAIiE=
Subject key identifier: B5:01:DF:F9:B5:6B:DD:BF:4B:8C:4B:FA:54:8E:F3:18:B2:E6:B4:50
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0197D55FEC0161714DA3F8F771A67C8E7CA3
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/tQHf-bVr3b9LjEv6VI7zGLLmtFA.roa
Signing time: Fri 04 Jul 2025 12:18:42 +0000
ROA not before: Fri 04 Jul 2025 12:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 185.69.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Jul 2025 18:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:5f:ec:01:61:71:4d:a3:f8:f7:71:a6:7c:8e:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jul 4 12:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b501dff9b56bddbf4b8c4bfa548ef318b2e6b450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:f6:a5:96:ae:88:6c:3e:23:14:8e:45:7c:
87:6d:bb:e2:6b:62:de:8a:34:a3:04:50:7e:df:a8:
ce:4f:9f:af:bf:a0:d5:e9:af:a2:5a:91:11:7d:7a:
b5:e3:1f:e1:41:00:c1:d5:52:ce:b0:b8:54:31:4b:
01:8a:c1:43:7f:00:68:8a:08:2b:44:a1:55:21:cc:
1e:47:17:36:0c:52:0a:c8:8d:c0:c9:1a:c2:cd:93:
d8:56:09:bb:01:7e:5f:24:c4:d3:bd:7b:ac:43:0a:
62:dc:10:e1:13:0a:62:7a:0a:88:d8:45:da:11:d2:
01:b5:e0:32:ba:72:55:e9:9f:2c:e5:3d:45:7e:ec:
db:f7:97:73:74:84:36:b9:b6:b0:db:47:ac:35:12:
0a:20:d1:6f:84:89:bf:dc:6b:6f:fc:b3:a8:5f:db:
95:3a:00:a6:51:0a:51:ba:82:7f:ff:ee:d9:7f:36:
d7:4e:4e:1c:11:f7:2e:e1:c5:06:3a:bd:e6:ad:29:
a2:16:22:a7:a9:b6:e1:5e:c0:e1:0b:38:c7:00:6a:
f2:4b:38:2d:60:c9:38:2b:f3:ed:08:07:f5:d9:3b:
2b:00:c4:ff:64:ae:be:a2:ba:4f:d1:b9:a9:99:74:
ec:37:b9:6d:d6:bf:81:70:cf:99:02:a4:08:79:ba:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:DF:F9:B5:6B:DD:BF:4B:8C:4B:FA:54:8E:F3:18:B2:E6:B4:50
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/tQHf-bVr3b9LjEv6VI7zGLLmtFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:5e:70:0b:4d:a3:c1:1b:30:4f:a2:35:3c:5e:b0:93:66:b1:
c3:d4:59:02:a9:5e:2b:48:f8:24:9e:5c:4f:37:34:52:0c:cf:
9b:6e:0c:9d:78:b7:fd:d5:67:8e:85:63:51:f7:d3:d7:ef:50:
79:78:da:b4:65:12:0f:2b:2b:db:21:f0:55:73:35:78:12:40:
bd:2f:15:50:35:ba:45:e2:47:cb:48:04:1c:56:36:2f:eb:7d:
b9:f6:23:3b:31:d7:87:f7:73:88:cf:c1:34:76:6e:4a:bb:b2:
a7:48:82:ac:93:13:49:1d:50:f0:48:05:b1:32:64:61:92:2f:
5d:79:03:3d:31:35:e7:6a:b1:84:65:0b:9b:58:ea:99:a3:34:
4e:54:7c:27:1f:e1:37:7f:6e:b4:6d:13:5b:3d:57:bb:41:6e:
f0:12:7a:bd:5c:1b:6f:81:ac:e7:c0:f7:c1:e4:75:84:00:a8:
92:75:2a:aa:69:7f:44:a1:c0:6d:98:15:a7:4c:64:f7:6d:9f:
bb:c5:94:24:2b:dc:16:5c:dc:80:7e:1d:f1:ff:32:e9:92:75:
bd:1d:90:6d:f5:1c:9d:05:6a:a6:cb:e4:c7:ff:45:24:57:0b:
85:37:72:80:1d:fe:3e:38:ad:23:1b:da:2a:46:99:c0:48:4d:
fa:a9:ee:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfVX+wBYXFNo/j3caZ8jnyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjUwNzA0MTIxODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTAxZGZmOWI1NmJkZGJmNGI4YzRiZmE1NDhlZjMxOGIyZTZiNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjr2pZauiGw+IxSORXyHbbvia2Le
ijSjBFB+36jOT5+vv6DV6a+iWpERfXq14x/hQQDB1VLOsLhUMUsBisFDfwBoiggr
RKFVIcweRxc2DFIKyI3AyRrCzZPYVgm7AX5fJMTTvXusQwpi3BDhEwpiegqI2EXa
EdIBteAyunJV6Z8s5T1Ffuzb95dzdIQ2ubaw20esNRIKINFvhIm/3Gtv/LOoX9uV
OgCmUQpRuoJ//+7ZfzbXTk4cEfcu4cUGOr3mrSmiFiKnqbbhXsDhCzjHAGrySzgt
YMk4K/PtCAf12TsrAMT/ZK6+orpP0bmpmXTsN7lt1r+BcM+ZAqQIebrAIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUB3/m1a92/S4xL+lSO8xiy5rRQMB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvdFFIZi1iVnIzYjlMakV2NlZJN3pHTExtdEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5
LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUV4MA0G
CSqGSIb3DQEBCwUAA4IBAQBKXnALTaPBGzBPojU8XrCTZrHD1FkCqV4rSPgknlxP
NzRSDM+bbgydeLf91WeOhWNR99PX71B5eNq0ZRIPKyvbIfBVczV4EkC9LxVQNbpF
4kfLSAQcVjYv63259iM7MdeH93OIz8E0dm5Ku7KnSIKskxNJHVDwSAWxMmRhki9d
eQM9MTXnarGEZQubWOqZozROVHwnH+E3f260bRNbPVe7QW7wEnq9XBtvgaznwPfB
5HWEAKiSdSqqaX9EocBtmBWnTGT3bZ+7xZQkK9wWXNyAfh3x/zLpknW9HZBt9Ryd
BWqmy+TH/0UkVwuFN3KAHf4+OK0jG9oqRpnASE36qe4T
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:19 2025 by rpki-client