Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/5psQaCUmTO-AAOMmty7AOE3QNTE.roa
File: 5psQaCUmTO-AAOMmty7AOE3QNTE.roa (raw, json)
Hash identifier: KSwFNrRUinX/wEczo48ih0aHS3P8Kd7MvBXOp4m0XGA=
Subject key identifier: E6:9B:10:68:25:26:4C:EF:80:00:E3:26:B7:2E:C0:38:4D:D0:35:31
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01970BBB02F803EF6D377C09F9BB238F47EA
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/5psQaCUmTO-AAOMmty7AOE3QNTE.roa
Signing time: Mon 26 May 2025 08:34:54 +0000
ROA not before: Mon 26 May 2025 08:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 91.226.31.0/24 maxlen: 24
2a06:d641::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 17:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:bb:02:f8:03:ef:6d:37:7c:09:f9:bb:23:8f:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: May 26 08:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e69b106825264cef8000e326b72ec0384dd03531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:c4:52:13:14:55:04:d1:0b:1d:1a:1c:1f:
99:9b:64:2e:54:65:aa:ef:bc:16:51:e8:a5:ad:b2:
ff:9a:dd:eb:a1:df:26:08:3f:f1:a3:37:ca:e9:38:
3c:3b:4e:e0:c2:1e:e4:a3:b5:78:ff:ca:0c:ff:59:
26:02:b8:6f:c0:30:c5:66:f8:52:6e:d2:d3:00:33:
d8:f9:ca:88:86:21:b9:4d:94:ce:5d:5e:a3:b5:68:
2d:b4:dc:ba:91:b9:63:9d:50:e3:7b:17:e1:42:6a:
8e:31:e4:60:ed:e7:d1:a7:3b:99:7a:c2:03:68:96:
32:32:dd:0b:f4:93:ff:8c:1a:dc:71:ad:69:65:cb:
c5:27:35:73:f0:db:e0:b8:c1:f5:9f:dc:24:15:dc:
66:1d:e4:11:64:cf:77:90:06:65:1e:1a:62:59:f0:
88:5e:c1:66:9f:0e:26:c4:1b:94:81:fe:f0:5c:5f:
c4:4b:c7:61:cb:5a:94:65:f3:70:d8:6e:8a:31:88:
92:38:cb:16:88:6e:bf:42:b0:90:97:9f:18:de:fe:
6d:5a:a7:10:41:5c:f5:cf:a8:11:61:3d:70:c7:f0:
46:16:4e:f0:9d:f6:5a:76:35:fb:21:6f:4d:49:62:
7d:ea:5b:a0:7f:73:fc:fd:76:93:ba:fe:ed:5b:9c:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:10:68:25:26:4C:EF:80:00:E3:26:B7:2E:C0:38:4D:D0:35:31
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/5psQaCUmTO-AAOMmty7AOE3QNTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.31.0/24
IPv6:
2a06:d641::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c5:17:06:43:8a:bd:89:bb:cd:2c:f5:ec:ef:2a:7f:74:a6:
0c:3e:f0:56:b5:2a:22:85:f3:81:f5:d8:8c:27:8d:01:f4:3f:
cf:b9:26:23:46:6e:1e:86:e1:b8:c5:23:3d:fc:8f:12:fd:12:
8e:0f:de:c1:92:96:5f:6f:d9:18:42:22:3c:ae:23:a2:48:34:
62:a5:05:a5:d9:8a:b2:d5:d7:ef:bc:1f:b8:8d:26:41:c2:7e:
c1:7c:fc:db:8b:ee:63:52:81:77:d1:ef:7e:2d:f4:52:25:e6:
68:e8:df:cf:16:c2:01:ea:9a:3f:2f:15:b1:ec:18:33:54:6f:
ec:89:7c:47:89:d2:ae:0b:74:b6:2e:aa:73:53:6e:c4:23:cb:
be:ca:0e:78:3d:de:31:f3:25:14:60:8d:ad:3b:ae:2f:a7:37:
9f:c0:de:f7:71:7b:18:07:84:19:01:ef:a0:b7:c3:0c:61:f8:
77:80:9f:00:4c:05:35:c2:0c:a3:3b:92:a7:ed:29:fd:59:9a:
b3:39:9a:f4:11:af:21:d5:30:f1:b3:07:8b:8d:d3:16:bb:f8:
37:49:68:c9:f7:3d:bb:fb:a8:ed:0a:55:18:77:c1:f6:7f:ee:
53:3c:2a:a1:b5:f4:c2:ae:bb:4e:89:9e:e9:4b:7c:f7:f0:08:
2d:d4:68:32
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZcLuwL4A+9tN3wJ+bsjj0fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUwNTI2MDgzNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjliMTA2ODI1MjY0Y2VmODAwMGUzMjZiNzJlYzAzODRkZDAzNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohTEUhMUVQTRCx0aHB+Zm2QuVGWq
77wWUeilrbL/mt3rod8mCD/xozfK6Tg8O07gwh7ko7V4/8oM/1kmArhvwDDFZvhS
btLTADPY+cqIhiG5TZTOXV6jtWgttNy6kbljnVDjexfhQmqOMeRg7efRpzuZesID
aJYyMt0L9JP/jBrcca1pZcvFJzVz8NvguMH1n9wkFdxmHeQRZM93kAZlHhpiWfCI
XsFmnw4mxBuUgf7wXF/ES8dhy1qUZfNw2G6KMYiSOMsWiG6/QrCQl58Y3v5tWqcQ
QVz1z6gRYT1wx/BGFk7wnfZadjX7IW9NSWJ96lugf3P8/XaTuv7tW5zLcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOabEGglJkzvgADjJrcuwDhN0DUxMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvNXBzUWFDVW1UTy1BQU9NbXR5N0FPRTNRTlRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+IfMA0E
AgACMAcDBQAqBtZBMA0GCSqGSIb3DQEBCwUAA4IBAQA7xRcGQ4q9ibvNLPXs7yp/
dKYMPvBWtSoihfOB9diMJ40B9D/PuSYjRm4ehuG4xSM9/I8S/RKOD97BkpZfb9kY
QiI8riOiSDRipQWl2Yqy1dfvvB+4jSZBwn7BfPzbi+5jUoF30e9+LfRSJeZo6N/P
FsIB6po/LxWx7BgzVG/siXxHidKuC3S2LqpzU27EI8u+yg54Pd4x8yUUYI2tO64v
pzefwN73cXsYB4QZAe+gt8MMYfh3gJ8ATAU1wgyjO5Kn7Sn9WZqzOZr0Ea8h1TDx
sweLjdMWu/g3SWjJ9z27+6jtClUYd8H2f+5TPCqhtfTCrrtOiZ7pS3z38Agt1Ggy
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:46 2025 by rpki-client