Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kWdCDIj0WZTzBLh_Ad1SqkxxBV0.roa
File: kWdCDIj0WZTzBLh_Ad1SqkxxBV0.roa (raw, json)
Hash identifier: q4zZ7eOpO7ZjlYggnIQptz7CkmIIVFX29g5ioQORJpk=
Subject key identifier: 91:67:42:0C:88:F4:59:94:F3:04:B8:7F:01:DD:52:AA:4C:71:05:5D
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0195A186544D90D218A2BE0E8C6C763D6EE0
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kWdCDIj0WZTzBLh_Ad1SqkxxBV0.roa
Signing time: Mon 17 Mar 2025 00:34:49 +0000
ROA not before: Mon 17 Mar 2025 00:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.15.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:86:54:4d:90:d2:18:a2:be:0e:8c:6c:76:3d:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 17 00:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9167420c88f45994f304b87f01dd52aa4c71055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:10:85:26:c2:a1:ab:6a:8b:36:ae:a8:6b:
0f:29:86:28:4b:c5:4a:48:22:7e:de:e5:d4:e6:c1:
33:f0:27:f7:71:f6:4a:c1:6b:07:1a:b6:72:0a:3b:
9e:78:8c:cc:99:30:a6:b3:d7:7e:80:4f:9a:de:e0:
5c:34:b5:40:57:8c:a0:ef:a4:31:a6:a6:57:b1:91:
c6:aa:e1:f7:e4:a9:28:c7:16:0e:6e:d9:1e:64:6e:
31:a6:c2:b6:4e:82:1b:f7:d1:bb:62:f0:13:9b:52:
ed:90:e1:04:5d:03:7d:10:46:91:9d:40:a3:69:cc:
51:37:36:73:70:d3:c0:b0:d6:54:74:80:24:cf:1f:
77:f5:2a:67:a1:ee:3d:0e:c4:35:a1:93:69:cd:57:
4f:70:b0:59:61:17:0b:3d:e2:02:83:e4:c4:59:92:
ab:ae:82:90:82:c2:d6:6e:b7:1f:c3:b4:b9:ca:54:
63:56:90:bf:13:7e:a9:2c:c3:eb:5f:a4:ec:be:d2:
76:51:09:07:2e:9a:91:1a:09:24:92:56:24:30:b2:
60:cb:79:40:10:99:28:44:62:44:06:35:8b:9a:4a:
10:06:be:1f:eb:12:1b:4c:db:db:36:81:64:4c:15:
6b:25:04:db:a2:80:32:e8:92:b8:aa:36:3f:a5:98:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:42:0C:88:F4:59:94:F3:04:B8:7F:01:DD:52:AA:4C:71:05:5D
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kWdCDIj0WZTzBLh_Ad1SqkxxBV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c8:0f:c2:ae:c6:e6:9f:0e:13:5e:c7:ac:01:3e:d2:48:a7:
fc:6f:87:7c:e6:99:e8:21:a5:b2:be:2d:26:2e:bc:84:42:33:
fd:54:f8:fd:ca:28:71:65:4f:eb:20:cc:0d:2f:af:6d:b6:6f:
c1:a3:a8:7e:ba:60:72:61:42:19:43:50:8e:02:60:82:2c:e1:
97:73:75:b4:a4:7d:5d:d3:c7:1b:02:01:8f:46:f3:e4:bc:00:
60:37:c5:92:8e:43:bf:41:ad:7f:44:82:5c:12:a9:1f:39:c2:
b5:77:9a:3e:09:de:c7:3d:77:25:8f:df:1a:00:4d:c4:77:c2:
58:f7:bb:e0:4c:85:f7:eb:af:4a:88:a8:f0:fd:4a:de:1c:98:
f0:84:67:7f:d5:a0:02:24:7a:12:89:ae:5c:8e:13:63:a6:3b:
81:b4:81:c3:e2:3d:ef:c2:7d:9e:30:39:15:fa:98:24:e7:d8:
bf:ba:62:20:e5:45:23:6e:4c:ff:ed:26:ed:e3:c2:db:45:a5:
36:72:9a:d0:ad:b3:5f:8d:2b:1b:8a:59:dd:46:2e:b1:3b:22:
bb:66:64:5c:72:a6:10:8f:55:4f:e9:66:3f:8f:ed:af:9f:2b:
5f:68:5d:15:c3:5b:32:66:2a:f7:14:4c:21:a9:29:3f:c4:74:
32:c7:0c:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWhhlRNkNIYor4OjGx2PW7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwMzE3MDAzNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTY3NDIwYzg4ZjQ1OTk0ZjMwNGI4N2YwMWRkNTJhYTRjNzEwNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0QhSbCoatqizauqGsPKYYoS8VK
SCJ+3uXU5sEz8Cf3cfZKwWsHGrZyCjueeIzMmTCms9d+gE+a3uBcNLVAV4yg76Qx
pqZXsZHGquH35KkoxxYObtkeZG4xpsK2ToIb99G7YvATm1LtkOEEXQN9EEaRnUCj
acxRNzZzcNPAsNZUdIAkzx939Spnoe49DsQ1oZNpzVdPcLBZYRcLPeICg+TEWZKr
roKQgsLWbrcfw7S5ylRjVpC/E36pLMPrX6TsvtJ2UQkHLpqRGgkkklYkMLJgy3lA
EJkoRGJEBjWLmkoQBr4f6xIbTNvbNoFkTBVrJQTbooAy6JK4qjY/pZhoqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFnQgyI9FmU8wS4fwHdUqpMcQVdMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEva1dkQ0RJajBXWlR6QkxoX0FkMVNxa3h4QlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9hMA0G
CSqGSIb3DQEBCwUAA4IBAQB+yA/Crsbmnw4TXsesAT7SSKf8b4d85pnoIaWyvi0m
LryEQjP9VPj9yihxZU/rIMwNL69ttm/Bo6h+umByYUIZQ1COAmCCLOGXc3W0pH1d
08cbAgGPRvPkvABgN8WSjkO/Qa1/RIJcEqkfOcK1d5o+Cd7HPXclj98aAE3Ed8JY
97vgTIX3669KiKjw/UreHJjwhGd/1aACJHoSia5cjhNjpjuBtIHD4j3vwn2eMDkV
+pgk59i/umIg5UUjbkz/7Sbt48LbRaU2cprQrbNfjSsbilndRi6xOyK7ZmRccqYQ
j1VP6WY/j+2vnytfaF0Vw1syZir3FEwhqSk/xHQyxwwI
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:32 2025 by rpki-client