Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/1-V5Mmn0WQGusQLZW4qVRQO3KIs4.roa
File: 1-V5Mmn0WQGusQLZW4qVRQO3KIs4.roa (raw, json)
Hash identifier: mEL9L/9RDW9WYW88w3U7qel/3sXYP5/SIudGPVF1bNc=
Subject key identifier: F9:5E:4C:9A:7D:16:40:6B:AC:40:B6:56:E2:A5:51:40:ED:CA:22:CE
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 0191EC9BF3033A6B00870876C9EFEDBDD584
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/1-V5Mmn0WQGusQLZW4qVRQO3KIs4.roa
Signing time: Fri 13 Sep 2024 18:18:48 +0000
ROA not before: Fri 13 Sep 2024 18:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3549
IP address blocks: 185.237.204.0/23 maxlen: 23
195.54.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 19:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:9b:f3:03:3a:6b:00:87:08:76:c9:ef:ed:bd:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Sep 13 18:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95e4c9a7d16406bac40b656e2a55140edca22ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:9e:f3:5f:51:b7:5c:e7:19:55:f2:8e:91:
ea:fc:3b:8a:3f:de:41:64:2d:bb:32:10:49:12:8c:
7b:b4:23:14:d4:47:e2:b4:15:fc:51:b8:95:50:68:
19:a2:fe:19:0e:0b:80:13:19:40:5b:fb:c0:2e:20:
65:3d:26:06:11:6a:b2:fa:47:d2:d1:32:40:19:88:
b8:a8:0f:96:cc:28:36:e7:24:ac:3b:46:fb:57:02:
41:6e:85:28:91:75:d4:4f:7c:c9:d2:b3:b5:9d:53:
85:64:a0:79:41:94:a2:61:2e:99:54:bc:b6:a4:a5:
81:97:2a:6b:f2:80:2a:96:ad:be:64:3e:be:46:2e:
7c:63:1d:d7:54:00:f3:02:69:e7:33:f2:3a:f4:f2:
61:ee:2e:5b:92:1e:f3:91:df:4f:cd:38:f4:36:76:
e4:dd:a0:d8:0d:a7:a3:86:ff:d7:56:8c:23:9e:42:
26:f0:9e:59:e2:7a:37:83:73:17:c8:f9:fd:f4:1c:
d0:1d:e6:f2:99:a0:e0:c3:f4:f8:a6:be:39:70:43:
39:50:ba:39:be:ae:fb:c0:c9:3f:46:0d:36:ad:10:
32:65:0a:9b:87:f5:2c:53:e5:60:4f:ba:40:e1:da:
80:e7:84:4f:0d:1d:73:c2:fe:50:3a:c6:97:1a:9d:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:4C:9A:7D:16:40:6B:AC:40:B6:56:E2:A5:51:40:ED:CA:22:CE
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/1-V5Mmn0WQGusQLZW4qVRQO3KIs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.204.0/23
195.54.163.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3c:7e:b5:d8:32:9c:2d:82:b9:53:cd:c0:7c:29:07:c8:75:
e3:be:2d:fe:47:9f:8a:2f:72:7e:70:92:87:dc:ee:36:ef:c2:
ab:a1:4a:dc:bb:b5:5f:9f:a4:32:ba:82:36:a0:f2:27:67:e5:
9c:da:bf:81:bb:c6:35:60:df:a7:5e:81:86:3d:9c:30:ec:76:
78:4d:13:59:1e:5c:3e:13:04:19:f7:5c:97:c5:4e:84:38:d6:
2b:7c:dd:c4:2f:a6:85:4a:a0:55:8f:55:d9:79:01:3a:f5:7e:
42:9a:3a:1f:4b:f2:5c:38:41:01:25:93:bd:ca:e0:f2:3e:fd:
82:00:42:84:eb:a2:f3:00:86:a4:78:2b:1b:bd:b4:01:b0:6b:
f7:76:82:e2:b0:4e:50:c3:95:93:6a:b2:36:41:f3:38:ec:7e:
db:fa:10:57:e6:36:e5:c6:20:dc:3b:a5:f5:a5:bd:16:30:54:
75:49:53:78:68:20:3c:f4:a7:01:58:3f:7c:7d:93:cd:3e:41:
41:77:13:7f:06:08:b9:df:02:ec:55:24:25:ee:54:1d:46:f4:
bb:09:7f:42:cf:29:f0:7a:27:47:b0:3c:2a:7a:21:47:1e:77:
87:d6:26:eb:bc:1e:89:09:d0:f5:d3:72:d3:1c:00:a2:8b:2a:
26:17:1f:cc
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZHsm/MDOmsAhwh2ye/tvdWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjQwOTEzMTgxODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVlNGM5YTdkMTY0MDZiYWM0MGI2NTZlMmE1NTE0MGVkY2EyMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kSe819Rt1znGVXyjpHq/DuKP95B
ZC27MhBJEox7tCMU1EfitBX8UbiVUGgZov4ZDguAExlAW/vALiBlPSYGEWqy+kfS
0TJAGYi4qA+WzCg25ySsO0b7VwJBboUokXXUT3zJ0rO1nVOFZKB5QZSiYS6ZVLy2
pKWBlypr8oAqlq2+ZD6+Ri58Yx3XVADzAmnnM/I69PJh7i5bkh7zkd9PzTj0Nnbk
3aDYDaejhv/XVowjnkIm8J5Z4no3g3MXyPn99BzQHebymaDgw/T4pr45cEM5ULo5
vq77wMk/Rg02rRAyZQqbh/UsU+VgT7pA4dqA54RPDR1zwv5QOsaXGp26LwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPleTJp9FkBrrEC2VuKlUUDtyiLOMB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvMS1WNU1tbjBXUUd1c1FMWlc0cVZSUU8zS0lzNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvYzJmMTgyLWJiNjctNDNkOC04ZWE1LTk1YzUwMDFiZmM3
MC8xL1ZpNk9CUTA0UlFMcmVYOWVsRWt4cG1fZFZWby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbntzAME
AMM2ozANBgkqhkiG9w0BAQsFAAOCAQEAQDx+tdgynC2CuVPNwHwpB8h1474t/kef
ii9yfnCSh9zuNu/Cq6FK3Lu1X5+kMrqCNqDyJ2flnNq/gbvGNWDfp16Bhj2cMOx2
eE0TWR5cPhMEGfdcl8VOhDjWK3zdxC+mhUqgVY9V2XkBOvV+Qpo6H0vyXDhBASWT
vcrg8j79ggBChOui8wCGpHgrG720AbBr93aC4rBOUMOVk2qyNkHzOOx+2/oQV+Y2
5cYg3Dul9aW9FjBUdUlTeGggPPSnAVg/fH2TzT5BQXcTfwYIud8C7FUkJe5UHUb0
uwl/Qs8p8HonR7A8KnohRx53h9Ym67weiQnQ9dNy0xwAoosqJhcfzA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:12 2025 by rpki-client