Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pbQokiNNCbHc8c7TTHM_oRIA1ck.roa
File: pbQokiNNCbHc8c7TTHM_oRIA1ck.roa (raw, json)
Hash identifier: cOPN/sK2oFkosv6j/VPiVBXtium/dkssDSslm1pysMo=
Subject key identifier: A5:B4:28:92:23:4D:09:B1:DC:F1:CE:D3:4C:73:3F:A1:12:00:D5:C9
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01967AFFDC0041E4FFFB1098920197FD0D5C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pbQokiNNCbHc8c7TTHM_oRIA1ck.roa
Signing time: Mon 28 Apr 2025 06:05:10 +0000
ROA not before: Mon 28 Apr 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 193.168.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 08:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:ff:dc:00:41:e4:ff:fb:10:98:92:01:97:fd:0d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 28 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5b42892234d09b1dcf1ced34c733fa11200d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:0f:d4:94:0d:4f:3c:a6:db:ad:eb:8f:1d:
70:75:8d:15:eb:5e:c6:8a:db:26:8f:5b:b6:19:b1:
8c:8d:01:8f:a2:d7:64:93:84:ca:c9:0c:c4:80:5b:
dd:c8:84:51:4b:05:6a:04:c3:78:7b:41:2c:4c:e3:
4c:25:7c:6d:2d:5c:16:04:07:20:79:62:e5:04:41:
c3:54:b5:9d:d8:c7:f0:7e:86:03:6b:d8:78:9d:f6:
ee:c4:5f:f0:c6:d6:30:e2:56:5b:cb:8b:e4:12:f8:
38:98:24:d5:29:d5:eb:0d:ce:9c:87:76:8c:d0:69:
40:e3:9f:04:5f:6d:38:ad:20:07:58:95:c8:e7:18:
bc:3a:be:8d:b9:9d:3e:07:1f:e7:0f:94:a3:b4:c4:
0a:7e:53:7f:da:c9:ba:d9:0a:57:36:c1:47:ca:e2:
ea:1b:9b:ad:2b:5f:7e:e4:83:f6:b4:7a:f8:9c:6c:
ae:2a:6c:86:2c:bc:57:63:c4:e1:c9:1d:94:49:6e:
48:b0:a4:de:2d:04:95:05:ca:20:58:4d:e2:93:3e:
c2:a4:22:31:fb:17:a5:95:79:c0:c0:6f:e1:ca:d7:
ae:49:03:1b:19:27:a8:1c:67:cf:0e:1c:cd:a1:91:
90:95:ab:9e:21:a1:7f:a5:0b:2b:ee:ec:71:5f:5c:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B4:28:92:23:4D:09:B1:DC:F1:CE:D3:4C:73:3F:A1:12:00:D5:C9
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pbQokiNNCbHc8c7TTHM_oRIA1ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.202.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ab:c0:e5:16:a4:f1:c8:ae:63:0b:bc:56:e8:c5:35:9e:56:
f7:53:db:04:a0:a0:02:bb:27:68:ab:68:95:f8:24:01:e9:1c:
10:84:05:86:5d:43:3a:09:88:36:cb:2d:e5:e0:5e:89:dd:60:
86:50:a8:16:e5:52:77:88:cc:53:26:cc:5b:f3:42:99:5a:6e:
a6:15:95:c3:3e:25:ee:41:14:a4:60:61:25:89:0e:e4:e5:34:
35:43:8f:63:0c:43:b0:03:03:c9:94:3f:a1:7d:2d:e8:8d:7c:
05:1e:a1:09:df:bd:f1:72:fb:c3:9a:dc:61:4d:3c:95:28:da:
1a:6f:ea:f2:22:4f:37:fa:00:da:80:27:0a:fe:e6:5c:8b:39:
de:0d:d7:13:00:21:97:86:12:84:b1:17:3e:56:f3:cf:08:2d:
3d:93:95:c0:fe:50:93:da:92:6f:c4:4c:79:b5:d2:f6:b6:32:
eb:e7:1e:af:f5:34:08:28:f4:01:c1:2b:d9:2e:06:48:32:ac:
d8:85:88:ca:b2:e7:0c:7d:f6:18:dc:12:d6:1a:0a:03:c8:65:
54:62:17:8d:56:d3:2b:6f:16:24:65:35:a6:d4:c3:f1:13:bb:
71:7c:23:bd:5b:e8:53:c6:c6:ff:49:ef:c0:bd:6e:3a:15:68:
8a:9f:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:53 2025 by rpki-client