Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/L_YeZZvzLh7a_lEmLgjbZAqH7kI.roa
File: L_YeZZvzLh7a_lEmLgjbZAqH7kI.roa (raw, json)
Hash identifier: MgTrx/pv0opBMsqYrmeSq4OaM26tZiOYVO/9fgoVqbQ=
Subject key identifier: 2F:F6:1E:65:9B:F3:2E:1E:DA:FE:51:26:2E:08:DB:64:0A:87:EE:42
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0195A18AE73DFDFEA26A6D6C3CDA5220E8BB
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/L_YeZZvzLh7a_lEmLgjbZAqH7kI.roa
Signing time: Mon 17 Mar 2025 00:39:49 +0000
ROA not before: Mon 17 Mar 2025 00:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 188.209.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 18:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:8a:e7:3d:fd:fe:a2:6a:6d:6c:3c:da:52:20:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 17 00:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff61e659bf32e1edafe51262e08db640a87ee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:aa:dc:23:0a:07:d0:39:7c:84:a2:90:0f:
63:2d:00:42:25:60:a7:dc:64:b1:be:db:2b:a3:90:
36:b4:b1:f8:f6:08:ae:71:a5:ec:58:55:13:b4:3c:
71:0d:84:df:5c:dd:08:d2:dd:1a:f7:a3:6c:35:23:
c8:f7:8a:14:da:88:c4:e8:f9:27:a3:3a:2b:d7:8d:
5b:0a:24:11:6f:3f:a6:40:7d:2b:08:5f:9b:03:ba:
a0:81:72:32:1d:80:82:22:55:bd:b7:e4:ea:a7:40:
d3:d6:bf:25:97:5e:7c:e5:40:fd:0b:19:61:ff:3a:
3a:fb:c1:58:e2:90:63:6c:c6:76:7d:87:95:fe:39:
67:fb:f6:87:8c:37:2c:c0:f0:55:c4:b7:d0:96:ea:
38:34:bf:d1:ad:4e:7c:4b:50:b0:19:62:a5:92:91:
e2:22:ff:99:36:3d:93:e1:f6:2c:be:f9:94:88:dc:
05:07:46:f7:2f:fe:1e:50:92:1b:bf:5d:b1:02:ee:
fc:36:b5:e0:41:f7:4a:71:09:29:1b:cf:39:9d:54:
dc:99:81:af:20:36:21:55:d2:7b:20:5a:09:fb:b3:
c2:ea:4d:88:ed:73:d2:52:19:4f:14:86:d4:0a:55:
08:ab:3f:72:dd:ed:3d:08:ea:7f:f5:64:9d:a3:12:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:1E:65:9B:F3:2E:1E:DA:FE:51:26:2E:08:DB:64:0A:87:EE:42
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/L_YeZZvzLh7a_lEmLgjbZAqH7kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.141.0/24
Signature Algorithm: sha256WithRSAEncryption
74:32:59:4b:e9:f5:d2:4d:f1:93:d9:e8:39:ab:2d:75:f8:a3:
51:65:6a:3c:d3:34:af:6a:2f:4e:1e:6d:af:d4:4d:23:35:8f:
23:ac:04:dc:06:90:ad:01:68:94:25:ef:51:de:70:69:17:5b:
85:fe:84:a3:a5:e7:27:dc:12:e5:d3:75:2e:a0:47:21:69:34:
62:22:2c:86:a3:34:0a:53:93:86:a5:99:7d:18:b1:06:c4:88:
83:61:05:d2:a7:82:24:07:1c:fe:91:d6:48:28:14:28:b0:e6:
86:0d:23:0b:56:17:43:a6:bf:1c:95:58:79:43:d2:3c:29:48:
5a:db:a3:e3:4b:f9:40:88:b6:21:f7:64:dc:48:86:c0:c6:cb:
b8:6a:d0:40:0f:7f:90:dc:fd:10:17:f1:8c:6d:23:b9:2b:10:
2c:62:d2:6d:a6:1e:d7:a7:16:0f:52:8a:11:ca:b6:2f:dc:69:
b3:41:0c:1d:43:d2:27:20:0b:f1:56:05:bc:b1:ed:b3:d4:45:
c4:be:23:60:19:c2:08:9e:af:dd:64:d9:08:bf:70:04:32:7f:
2c:5c:9b:17:75:33:b6:0e:8d:02:e0:4b:22:ff:b0:c6:97:6d:
45:2f:0a:cf:d8:83:1a:04:1d:ef:df:d0:2e:56:cf:99:51:86:
d1:7e:fc:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWhiuc9/f6iam1sPNpSIOi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwMzE3MDAzOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmY2MWU2NTliZjMyZTFlZGFmZTUxMjYyZTA4ZGI2NDBhODdlZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVyq3CMKB9A5fISikA9jLQBCJWCn
3GSxvtsro5A2tLH49giucaXsWFUTtDxxDYTfXN0I0t0a96NsNSPI94oU2ojE6Pkn
ozor141bCiQRbz+mQH0rCF+bA7qggXIyHYCCIlW9t+Tqp0DT1r8ll1585UD9Cxlh
/zo6+8FY4pBjbMZ2fYeV/jln+/aHjDcswPBVxLfQluo4NL/RrU58S1CwGWKlkpHi
Iv+ZNj2T4fYsvvmUiNwFB0b3L/4eUJIbv12xAu78NrXgQfdKcQkpG885nVTcmYGv
IDYhVdJ7IFoJ+7PC6k2I7XPSUhlPFIbUClUIqz9y3e09COp/9WSdoxKx6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/2HmWb8y4e2v5RJi4I22QKh+5CMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvTF9ZZVpadnpMaDdhX2xFbUxnamJaQXFIN2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGNMA0G
CSqGSIb3DQEBCwUAA4IBAQB0MllL6fXSTfGT2eg5qy11+KNRZWo80zSvai9OHm2v
1E0jNY8jrATcBpCtAWiUJe9R3nBpF1uF/oSjpecn3BLl03UuoEchaTRiIiyGozQK
U5OGpZl9GLEGxIiDYQXSp4IkBxz+kdZIKBQosOaGDSMLVhdDpr8clVh5Q9I8KUha
26PjS/lAiLYh92TcSIbAxsu4atBAD3+Q3P0QF/GMbSO5KxAsYtJtph7XpxYPUooR
yrYv3GmzQQwdQ9InIAvxVgW8se2z1EXEviNgGcIInq/dZNkIv3AEMn8sXJsXdTO2
Do0C4Esi/7DGl21FLwrP2IMaBB3v39AuVs+ZUYbRfvy7
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:44:49 2025 by rpki-client