Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/xtwre9RnX6gBPHb1ZzhG53buP6o.roa
File: xtwre9RnX6gBPHb1ZzhG53buP6o.roa (raw, json)
Hash identifier: XtCiEYEIGu/julqAd6EWFudmge47KOio5fTL6p1rAB8=
Subject key identifier: C6:DC:2B:7B:D4:67:5F:A8:01:3C:76:F5:67:38:46:E7:76:EE:3F:AA
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 01981D113CB563D0301855E7B24B845C5818
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/xtwre9RnX6gBPHb1ZzhG53buP6o.roa
Signing time: Fri 18 Jul 2025 10:25:25 +0000
ROA not before: Fri 18 Jul 2025 10:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 145.36.0.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Fri 18 Jul 2025 10:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:11:3c:b5:63:d0:30:18:55:e7:b2:4b:84:5c:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Jul 18 10:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6dc2b7bd4675fa8013c76f5673846e776ee3faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:37:25:e5:e2:b7:e3:de:21:a3:3a:9d:cf:
3e:5f:86:48:1f:28:7a:4a:4b:b1:6f:dc:dc:42:22:
b6:43:b6:0f:51:6a:bc:68:b6:17:6d:04:b9:31:ed:
85:de:29:f2:b9:b1:e9:15:63:94:ae:e6:5b:54:25:
d6:03:85:e2:8f:38:42:67:34:49:84:5f:b0:93:63:
84:9c:c2:29:42:fe:d1:0e:ea:6b:56:6c:c3:57:b6:
e7:2e:0a:e6:53:8e:78:fe:db:77:22:17:33:2f:4f:
58:01:2f:2a:06:d1:05:5e:b0:b9:2a:5a:38:76:ca:
37:16:3d:a8:02:1b:84:c4:3f:57:60:73:b3:eb:35:
64:1b:8a:2d:c6:1c:68:62:30:4a:4d:a1:f3:9c:58:
0c:9b:32:4e:2f:db:15:64:7a:2e:db:44:08:98:eb:
d6:a0:b5:23:66:cb:3f:87:e8:3e:56:35:ad:59:65:
f6:0d:e0:5b:bd:69:82:d6:63:c5:b2:ce:11:fb:9a:
fa:46:1e:c8:a3:65:f6:ac:e4:c8:6e:3d:e0:95:89:
39:7a:b7:d7:50:b7:9f:e5:d0:db:d4:dd:c0:f8:b4:
76:16:74:9f:57:17:90:4c:93:fb:25:e4:04:3b:44:
f7:50:6f:b4:67:d6:86:9a:05:7e:10:c0:4e:2c:01:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:2B:7B:D4:67:5F:A8:01:3C:76:F5:67:38:46:E7:76:EE:3F:AA
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/xtwre9RnX6gBPHb1ZzhG53buP6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/19
145.36.128.0/17
Signature Algorithm: sha256WithRSAEncryption
13:84:91:09:30:e8:45:bb:3a:19:e2:7f:07:a0:3e:e4:49:58:
81:96:ba:60:3b:b3:8d:ba:fe:2a:41:5c:0b:fc:61:1d:25:4d:
2c:02:4f:ab:ea:ff:cc:33:7b:3a:4b:9f:35:3d:fd:ec:4d:70:
02:db:06:24:82:2b:0a:97:4b:f2:61:88:ca:72:0c:86:57:61:
a3:af:96:1d:f4:fe:a2:97:4c:f6:04:42:fa:db:30:02:b2:26:
4d:3e:b7:cb:2b:7a:de:3c:5c:39:d9:ee:1b:8a:96:0a:94:3c:
5c:e8:a1:bb:7d:e6:5f:de:81:93:0e:fa:3e:91:31:c3:0e:1c:
47:88:4a:cf:e7:9a:e3:9c:a7:97:66:c6:88:6f:2e:33:fc:25:
a8:62:95:da:87:66:a5:94:4e:6d:7f:b7:4a:5a:66:25:d2:09:
99:79:c9:cc:ac:d7:4f:24:8e:d5:cc:25:a0:fe:c9:c3:e3:4f:
d2:58:e6:b1:2a:43:43:2e:66:0e:2d:b3:b6:2f:c9:32:39:44:
f0:93:ef:d0:de:43:a7:dd:a7:09:29:a3:a3:6e:b6:8e:4a:48:
85:7f:a3:60:be:a7:2d:34:7f:07:c8:af:5b:8a:09:54:72:90:
0d:35:c2:53:6d:d1:15:cc:df:ae:3b:ce:d2:60:84:70:55:ca:
b9:80:6a:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZgdETy1Y9AwGFXnskuEXFgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk
ZmMxNGMwHhcNMjUwNzE4MTAyNTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmRjMmI3YmQ0Njc1ZmE4MDEzYzc2ZjU2NzM4NDZlNzc2ZWUzZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAups3JeXit+PeIaM6nc8+X4ZIHyh6
Skuxb9zcQiK2Q7YPUWq8aLYXbQS5Me2F3inyubHpFWOUruZbVCXWA4XijzhCZzRJ
hF+wk2OEnMIpQv7RDuprVmzDV7bnLgrmU454/tt3IhczL09YAS8qBtEFXrC5Klo4
dso3Fj2oAhuExD9XYHOz6zVkG4otxhxoYjBKTaHznFgMmzJOL9sVZHou20QImOvW
oLUjZss/h+g+VjWtWWX2DeBbvWmC1mPFss4R+5r6Rh7Io2X2rOTIbj3glYk5erfX
ULef5dDb1N3A+LR2FnSfVxeQTJP7JeQEO0T3UG+0Z9aGmgV+EMBOLAGi7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMbcK3vUZ1+oATx29Wc4Rud27j+qMB8GA1UdIwQY
MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt
OGZmNmNkNzc0N2M0LzEveHR3cmU5Um5YNmdCUEhiMVp6aEc1M2J1UDZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0
LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFkSQAAwQH
kSSAMA0GCSqGSIb3DQEBCwUAA4IBAQAThJEJMOhFuzoZ4n8HoD7kSViBlrpgO7ON
uv4qQVwL/GEdJU0sAk+r6v/MM3s6S581Pf3sTXAC2wYkgisKl0vyYYjKcgyGV2Gj
r5Yd9P6il0z2BEL62zACsiZNPrfLK3rePFw52e4bipYKlDxc6KG7feZf3oGTDvo+
kTHDDhxHiErP55rjnKeXZsaIby4z/CWoYpXah2allE5tf7dKWmYl0gmZecnMrNdP
JI7VzCWg/snD40/SWOaxKkNDLmYOLbO2L8kyOUTwk+/Q3kOn3acJKaOjbraOSkiF
f6NgvqctNH8HyK9biglUcpANNcJTbdEVzN+uO87SYIRwVcq5gGpW
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:41:41 2025 by rpki-client