Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aREgRDPyXXxHJ5QUKVj2tYrX-X0.roa
File: aREgRDPyXXxHJ5QUKVj2tYrX-X0.roa (raw, json)
Hash identifier: as6yxWwmLO4XaEsmFueJ2Q5xBqr7WU9Z7zipXQS81xI=
Subject key identifier: 69:11:20:44:33:F2:5D:7C:47:27:94:14:29:58:F6:B5:8A:D7:F9:7D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01961BD8C0E944A353F8959394FB17A56431
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aREgRDPyXXxHJ5QUKVj2tYrX-X0.roa
Signing time: Wed 09 Apr 2025 18:38:32 +0000
ROA not before: Wed 09 Apr 2025 18:38:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.138.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 12:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:d8:c0:e9:44:a3:53:f8:95:93:94:fb:17:a5:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 9 18:38:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6911204433f25d7c472794142958f6b58ad7f97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:86:a5:91:a4:2f:e1:6d:75:66:df:bb:93:
c4:d4:9e:d5:25:10:ae:4e:31:d2:13:33:23:8f:e3:
1e:f3:35:74:4f:94:ae:4c:d5:57:22:7a:77:e6:bc:
79:3a:44:82:4a:28:de:b8:22:52:5b:11:5f:3c:d3:
9f:a8:a8:7a:a4:c3:22:6d:bc:51:4d:14:49:98:07:
c1:56:1e:3b:00:bf:83:63:ad:ee:38:58:2b:66:be:
d1:4c:ff:27:89:a8:e8:04:b8:58:3b:4c:bf:23:fd:
2c:dc:97:66:91:75:01:39:34:af:6b:3d:fc:a5:b2:
18:e3:f1:0c:91:ad:37:99:6c:76:23:82:b8:f4:91:
b4:5c:f5:ba:64:7c:51:3d:a1:29:86:e9:83:8b:c1:
a1:56:a8:d1:02:53:80:e6:7b:d1:4b:3e:00:38:1f:
75:cb:33:39:08:4f:2b:d7:a6:f5:cd:55:df:fa:71:
db:38:40:f5:dd:2a:41:68:e7:8d:4c:68:d0:12:b6:
ae:f6:1e:fd:8e:ae:6a:66:5e:5d:9e:a8:78:27:6f:
93:da:f4:94:92:aa:67:a4:b4:e9:69:7b:3c:c1:78:
5f:8e:1d:af:26:c4:82:79:e7:6d:53:9c:45:90:28:
6d:9a:f5:12:55:ce:9f:63:01:d2:cc:11:12:08:08:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:20:44:33:F2:5D:7C:47:27:94:14:29:58:F6:B5:8A:D7:F9:7D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/aREgRDPyXXxHJ5QUKVj2tYrX-X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:17:70:4f:66:e6:7b:8c:09:5a:29:0d:36:d1:a9:f8:7e:c4:
43:02:6d:5d:cd:4c:ad:6a:96:30:dd:a0:c1:49:79:4e:8a:85:
a1:e2:33:38:ba:b9:cc:f2:69:2e:0d:fb:10:20:3b:07:ba:ab:
55:fb:19:af:c3:2e:58:88:20:95:bb:35:85:31:29:9d:fb:e8:
10:b5:e6:6e:28:c1:26:3f:41:d7:33:27:8c:13:b3:73:33:05:
72:fd:f4:ab:3f:bf:a1:04:25:50:3e:5a:f5:db:bf:57:c2:1d:
73:18:f9:28:d2:b9:20:e1:4f:a3:d0:63:be:e0:4c:95:af:da:
88:96:bb:78:8c:36:d1:6b:41:b3:33:db:b2:3a:31:54:56:d5:
ba:b2:a2:1f:d6:64:ed:ac:06:42:eb:ce:3c:93:fb:9c:bc:a2:
08:fa:05:d2:5d:3f:e7:8e:65:bf:42:db:41:23:7e:8b:b8:e6:
e9:72:cf:d4:7b:8b:4e:45:41:dc:86:fa:e6:9d:bf:46:61:40:
8f:00:92:b4:5a:4d:9f:70:2a:4e:56:fa:60:4d:64:ac:2e:e4:
a4:7e:4a:dd:61:58:f9:c3:23:83:ec:c9:e0:a0:06:77:b3:b6:
a1:83:fa:4b:0a:93:12:7e:d4:d9:33:25:cc:71:9f:e0:92:74:
fc:94:76:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYb2MDpRKNT+JWTlPsXpWQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwNDA5MTgzODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTExMjA0NDMzZjI1ZDdjNDcyNzk0MTQyOTU4ZjZiNThhZDdmOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV+GpZGkL+FtdWbfu5PE1J7VJRCu
TjHSEzMjj+Me8zV0T5SuTNVXInp35rx5OkSCSijeuCJSWxFfPNOfqKh6pMMibbxR
TRRJmAfBVh47AL+DY63uOFgrZr7RTP8niajoBLhYO0y/I/0s3JdmkXUBOTSvaz38
pbIY4/EMka03mWx2I4K49JG0XPW6ZHxRPaEphumDi8GhVqjRAlOA5nvRSz4AOB91
yzM5CE8r16b1zVXf+nHbOED13SpBaOeNTGjQErau9h79jq5qZl5dnqh4J2+T2vSU
kqpnpLTpaXs8wXhfjh2vJsSCeedtU5xFkChtmvUSVc6fYwHSzBESCAhv1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkRIEQz8l18RyeUFClY9rWK1/l9MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvYVJFZ1JEUHlYWHhISjVRVUtWajJ0WXJYLVgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYqdMA0G
CSqGSIb3DQEBCwUAA4IBAQAaF3BPZuZ7jAlaKQ020an4fsRDAm1dzUytapYw3aDB
SXlOioWh4jM4urnM8mkuDfsQIDsHuqtV+xmvwy5YiCCVuzWFMSmd++gQteZuKMEm
P0HXMyeME7NzMwVy/fSrP7+hBCVQPlr1279Xwh1zGPko0rkg4U+j0GO+4EyVr9qI
lrt4jDbRa0GzM9uyOjFUVtW6sqIf1mTtrAZC6848k/ucvKII+gXSXT/njmW/QttB
I36LuObpcs/Ue4tORUHchvrmnb9GYUCPAJK0Wk2fcCpOVvpgTWSsLuSkfkrdYVj5
wyOD7MngoAZ3s7ahg/pLCpMSftTZMyXMcZ/gknT8lHZT
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:08 2025 by rpki-client