Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xvJFWX3nJqoLfX7Kmvj-_W-GDJM.roa
File: xvJFWX3nJqoLfX7Kmvj-_W-GDJM.roa (raw, json)
Hash identifier: ooWjCHF9UXVQf/DjGuoEaLE/JS7NMr5IKJ8s0RY+IlY=
Subject key identifier: C6:F2:45:59:7D:E7:26:AA:0B:7D:7E:CA:9A:F8:FE:FD:6F:86:0C:93
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01949D9BE4347D578B8665C176538E33C6C9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xvJFWX3nJqoLfX7Kmvj-_W-GDJM.roa
Signing time: Sat 25 Jan 2025 13:17:06 +0000
ROA not before: Sat 25 Jan 2025 13:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 5.231.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 06:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:9b:e4:34:7d:57:8b:86:65:c1:76:53:8e:33:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 25 13:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f245597de726aa0b7d7eca9af8fefd6f860c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:f6:e0:f3:3e:7b:0f:83:f0:64:49:ff:99:
08:31:2e:74:29:ca:5e:ce:d1:d9:9c:a5:35:2f:0d:
4d:09:55:c7:fe:33:9a:b8:92:6c:04:6f:a4:67:76:
41:d4:39:5f:bd:3d:45:6e:90:37:c2:f9:e6:fb:b9:
3c:9f:26:c3:d8:93:d5:ce:a5:25:b1:e0:dd:21:34:
c3:c6:bd:dc:c4:cf:6e:2f:e8:98:fa:1b:ec:8a:35:
ff:42:6b:b3:d2:3a:95:97:fa:6a:27:f9:b2:7f:83:
6d:76:32:23:05:3f:35:14:e0:dd:b4:b4:b1:c2:38:
db:e5:ee:a6:c5:e6:9e:44:5f:af:e9:f8:f2:f5:41:
00:0e:e1:0a:93:8c:b8:49:02:28:0c:94:1e:a9:f4:
09:a9:40:1c:3c:7e:dc:2a:87:d4:51:50:97:2f:0e:
fa:a3:30:a5:90:5a:ca:7b:f2:93:36:1b:5f:ad:42:
72:cd:f2:b7:96:2c:f7:d0:bb:37:6d:a5:32:70:41:
45:11:56:30:e6:ba:da:19:9d:c0:ab:93:99:24:cd:
f8:f3:cd:b7:cf:32:22:3e:4f:95:99:76:d3:85:ac:
e8:b0:f5:97:ea:2e:ad:83:0d:97:29:db:7e:5b:99:
16:2e:6c:16:27:e4:8f:8e:de:86:24:d8:0f:9e:6b:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:45:59:7D:E7:26:AA:0B:7D:7E:CA:9A:F8:FE:FD:6F:86:0C:93
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xvJFWX3nJqoLfX7Kmvj-_W-GDJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7a:19:7e:8a:d7:cd:d8:89:7b:9b:89:0b:44:20:6d:94:1d:
bb:b0:77:9f:93:62:2b:1b:c4:f5:91:70:4e:67:d4:72:c5:44:
97:61:1b:12:6b:1c:59:5b:dd:02:84:d0:02:59:97:39:6e:d6:
82:ce:b9:d1:72:ae:9c:38:6e:ef:e1:4d:f9:46:2e:29:ed:75:
9a:70:06:8b:9e:7b:bf:d5:a9:11:ea:e0:5c:69:37:3d:41:63:
e0:1a:96:db:18:95:55:8f:0f:74:f2:7b:a9:d1:45:6b:ac:7a:
e1:ad:45:23:0c:2b:a2:a6:cc:f9:9c:98:aa:2f:16:c9:18:77:
28:d3:cb:e8:b4:3e:ec:28:af:16:33:53:a8:cb:5c:0d:a0:43:
80:eb:9d:0f:e7:0e:dd:4c:c4:d6:26:ca:b4:35:1c:be:4f:a1:
82:a8:1e:be:4f:21:d4:8a:2c:be:63:25:b5:d3:be:9e:3a:76:
8a:ad:3a:7f:40:fa:97:e8:a5:9b:c3:08:ac:73:b5:e5:a3:bf:
45:46:b5:8d:84:1d:27:06:20:a5:28:12:e9:7a:8a:4b:b9:7d:
7c:fd:68:dd:b0:8d:7c:dc:2c:9b:c2:30:f5:0e:1b:18:a5:de:
cb:13:f1:ae:1b:02:3e:a9:57:6c:df:31:8b:7f:46:d8:19:aa:
1a:2b:33:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSdm+Q0fVeLhmXBdlOOM8bJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTI1MTMxNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmYyNDU1OTdkZTcyNmFhMGI3ZDdlY2E5YWY4ZmVmZDZmODYwYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qr24PM+ew+D8GRJ/5kIMS50Kcpe
ztHZnKU1Lw1NCVXH/jOauJJsBG+kZ3ZB1DlfvT1FbpA3wvnm+7k8nybD2JPVzqUl
seDdITTDxr3cxM9uL+iY+hvsijX/Qmuz0jqVl/pqJ/myf4NtdjIjBT81FODdtLSx
wjjb5e6mxeaeRF+v6fjy9UEADuEKk4y4SQIoDJQeqfQJqUAcPH7cKofUUVCXLw76
ozClkFrKe/KTNhtfrUJyzfK3liz30Ls3baUycEFFEVYw5rraGZ3Aq5OZJM348823
zzIiPk+VmXbThazosPWX6i6tgw2XKdt+W5kWLmwWJ+SPjt6GJNgPnmvJ1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbyRVl95yaqC31+ypr4/v1vhgyTMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveHZKRldYM25KcW9MZlg3S212ai1fVy1HREpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABefmMA0G
CSqGSIb3DQEBCwUAA4IBAQAuehl+itfN2Il7m4kLRCBtlB27sHefk2IrG8T1kXBO
Z9RyxUSXYRsSaxxZW90ChNACWZc5btaCzrnRcq6cOG7v4U35Ri4p7XWacAaLnnu/
1akR6uBcaTc9QWPgGpbbGJVVjw908nup0UVrrHrhrUUjDCuipsz5nJiqLxbJGHco
08votD7sKK8WM1Ooy1wNoEOA650P5w7dTMTWJsq0NRy+T6GCqB6+TyHUiiy+YyW1
076eOnaKrTp/QPqX6KWbwwisc7Xlo79FRrWNhB0nBiClKBLpeopLuX18/WjdsI18
3CybwjD1DhsYpd7LE/GuGwI+qVds3zGLf0bYGaoaKzNc
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:55 2025 by rpki-client