Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B9YLpEyV8cOYgiF72ZebFR4sWaY.roa
File: B9YLpEyV8cOYgiF72ZebFR4sWaY.roa (raw, json)
Hash identifier: ruY8JbnvrcFGrbdwpYQANY9SodEDn5BS0xa+7iSh9tE=
Subject key identifier: 07:D6:0B:A4:4C:95:F1:C3:98:82:21:7B:D9:97:9B:15:1E:2C:59:A6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0196AE7F7413BF12EFEEE454ED1FF60FBB45
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B9YLpEyV8cOYgiF72ZebFR4sWaY.roa
Signing time: Thu 08 May 2025 06:05:10 +0000
ROA not before: Thu 08 May 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.251.28.0/24 maxlen: 24
91.210.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 19:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7f:74:13:bf:12:ef:ee:e4:54:ed:1f:f6:0f:bb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 8 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d60ba44c95f1c39882217bd9979b151e2c59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:9f:eb:c6:05:a0:d8:9c:6e:bd:4e:ef:28:
8c:0c:97:10:87:04:07:0c:55:6e:44:be:f9:fd:18:
d7:de:e3:6d:9a:af:36:e8:61:32:f4:07:b8:ca:8e:
bd:81:ab:83:ab:91:3e:1f:75:46:ab:4b:9c:4b:d9:
8a:8e:8a:03:2e:14:a1:60:c8:a1:13:8d:75:e9:c0:
3f:35:38:1a:45:b2:e8:c0:c5:19:16:9c:06:03:e4:
55:60:23:f2:30:7e:d9:b4:21:a3:1d:02:07:8a:35:
db:12:87:ae:e6:24:af:9d:32:d3:fb:3c:58:81:a8:
37:ba:5b:d4:34:2f:3b:58:0c:67:d2:d1:ca:dd:e6:
7d:df:ed:d8:f9:18:46:15:14:85:67:71:ab:44:2f:
0a:61:3e:81:b0:0d:d3:ed:22:c0:54:ed:7f:d0:8b:
b0:86:b0:d4:70:6a:7f:17:13:75:00:31:ac:74:b7:
16:3e:fb:1b:56:5f:25:74:87:6f:91:91:d3:2c:45:
69:80:e8:9a:23:55:38:94:af:29:bd:31:41:60:a2:
cf:97:56:05:95:d7:d5:32:d9:dd:1f:b6:bb:e1:73:
5b:d2:7b:26:75:2a:e3:2b:94:6c:94:77:11:e4:f9:
0c:5e:3f:39:ec:44:c9:e4:78:5e:b7:06:8d:7d:85:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:0B:A4:4C:95:F1:C3:98:82:21:7B:D9:97:9B:15:1E:2C:59:A6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B9YLpEyV8cOYgiF72ZebFR4sWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
88:12:a6:01:09:15:a6:84:72:bc:b2:42:b7:69:60:00:08:e6:
16:e1:85:39:20:48:b4:1b:0a:f5:3c:4e:f9:80:b7:98:f2:d3:
dd:14:17:04:c9:3d:89:8a:9e:d9:6e:77:55:23:d1:c6:10:8f:
ed:bf:6d:04:e8:84:d5:34:6c:e2:07:9c:af:53:ff:f3:7f:f6:
1f:98:cc:1f:41:93:77:6e:6c:b5:45:8e:eb:23:c7:40:2b:ac:
f9:b3:22:e4:47:f2:f5:d3:b7:7a:24:f7:05:8b:88:03:4a:e9:
a2:5a:93:51:bb:aa:ea:d8:dd:19:ee:1f:28:92:f7:56:e1:b5:
97:48:93:28:28:79:94:7f:ae:c5:5b:c7:e8:bb:8f:a4:6a:3d:
47:fe:e7:f1:e2:0d:77:3e:98:ad:17:09:b0:1a:bc:c9:4f:45:
f4:34:98:7f:eb:b1:89:75:b2:4f:1c:de:77:30:7f:d9:69:3b:
05:0c:d7:39:5f:24:88:69:ab:3c:a6:33:d5:eb:07:1a:4a:3a:
44:81:99:f5:cf:b0:a4:ed:2b:c5:19:2c:26:b0:b9:d1:73:64:
a1:a3:f1:aa:42:58:f2:17:2b:06:f3:60:0b:35:a1:98:48:73:
29:34:ca:93:15:d6:55:26:65:99:e8:75:b0:c2:1a:b5:5f:3f:
81:bb:47:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZauf3QTvxLv7uRU7R/2D7tFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwNTA4MDYwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Q2MGJhNDRjOTVmMWMzOTg4MjIxN2JkOTk3OWIxNTFlMmM1OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HCf68YFoNicbr1O7yiMDJcQhwQH
DFVuRL75/RjX3uNtmq826GEy9Ae4yo69gauDq5E+H3VGq0ucS9mKjooDLhShYMih
E4116cA/NTgaRbLowMUZFpwGA+RVYCPyMH7ZtCGjHQIHijXbEoeu5iSvnTLT+zxY
gag3ulvUNC87WAxn0tHK3eZ93+3Y+RhGFRSFZ3GrRC8KYT6BsA3T7SLAVO1/0Iuw
hrDUcGp/FxN1ADGsdLcWPvsbVl8ldIdvkZHTLEVpgOiaI1U4lK8pvTFBYKLPl1YF
ldfVMtndH7a74XNb0nsmdSrjK5RslHcR5PkMXj857ETJ5HhetwaNfYWr7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAfWC6RMlfHDmIIhe9mXmxUeLFmmMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvQjlZTHBFeVY4Y09ZZ2lGNzJaZWJGUjRzV2FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfscAwQA
W9KRMA0GCSqGSIb3DQEBCwUAA4IBAQCIEqYBCRWmhHK8skK3aWAACOYW4YU5IEi0
Gwr1PE75gLeY8tPdFBcEyT2Jip7ZbndVI9HGEI/tv20E6ITVNGziB5yvU//zf/Yf
mMwfQZN3bmy1RY7rI8dAK6z5syLkR/L107d6JPcFi4gDSumiWpNRu6rq2N0Z7h8o
kvdW4bWXSJMoKHmUf67FW8fou4+kaj1H/ufx4g13PpitFwmwGrzJT0X0NJh/67GJ
dbJPHN53MH/ZaTsFDNc5XySIaas8pjPV6wcaSjpEgZn1z7Ck7SvFGSwmsLnRc2Sh
o/GqQljyFysG82ALNaGYSHMpNMqTFdZVJmWZ6HWwwhq1Xz+Bu0dM
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:49:15 2025 by rpki-client