Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/1-udpV1JA4YXWNprczzoVMCbpFGg.roa
File: 1-udpV1JA4YXWNprczzoVMCbpFGg.roa (raw, json)
Hash identifier: TqNKPli7TFIb7AhICY21VhQMVpttUA5HzuYzx+HXhuU=
Subject key identifier: FA:E7:69:57:52:40:E1:85:D6:36:9A:DC:CF:3A:15:30:26:E9:14:68
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0196C6079F87C0449D3DD0730173E5667A4A
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/1-udpV1JA4YXWNprczzoVMCbpFGg.roa
Signing time: Mon 12 May 2025 19:45:10 +0000
ROA not before: Mon 12 May 2025 19:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39011
IP address blocks: 5.253.191.0/24 maxlen: 24
194.102.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:07:9f:87:c0:44:9d:3d:d0:73:01:73:e5:66:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: May 12 19:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae769575240e185d6369adccf3a153026e91468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:48:4a:63:c4:2d:51:1d:ef:bc:8c:ac:b6:
b9:df:db:8d:8a:80:af:14:b7:ed:b2:5a:33:0d:f3:
9f:90:9a:d9:f6:50:bb:6f:30:81:74:03:2a:93:86:
eb:2a:0c:c5:42:df:6f:4c:bc:08:92:0d:03:dc:96:
c4:f0:41:04:e5:e1:13:e5:c3:cd:31:f6:cb:50:50:
62:70:e0:84:a1:f4:97:34:3a:63:29:36:9a:24:cb:
e1:c0:95:85:0e:82:09:3b:e2:ad:e0:41:2b:aa:66:
93:10:8b:45:cd:af:e2:16:d0:c4:cb:d1:c5:8c:1a:
2d:4f:91:8f:32:18:c9:66:bf:2e:43:db:02:f0:04:
b1:58:70:3d:31:60:ca:92:54:dc:8a:3e:5b:1d:eb:
5a:10:b0:c1:44:78:5b:c1:84:8d:1b:7f:42:45:87:
1c:a1:d8:a0:54:55:83:69:ea:b4:13:08:50:5a:46:
78:55:89:da:5e:25:30:5b:ee:e5:a3:93:13:4a:f4:
a9:e6:18:53:ca:f1:77:71:46:0d:7b:10:1c:a9:20:
cf:eb:40:70:d7:d0:ef:0c:43:23:9c:29:90:ed:a6:
99:e3:39:2f:c7:df:bb:53:04:ee:3c:cf:53:46:8d:
6f:a2:9d:47:4c:c5:56:c0:b1:fd:a8:57:ff:f4:8a:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:69:57:52:40:E1:85:D6:36:9A:DC:CF:3A:15:30:26:E9:14:68
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/1-udpV1JA4YXWNprczzoVMCbpFGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.191.0/24
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d8:d9:8c:07:78:ca:45:93:9b:39:a9:44:f7:05:e2:47:3b:
98:35:b6:eb:0c:df:26:67:df:b6:95:fe:8e:cd:30:98:cb:0d:
1f:39:a8:05:2a:1b:70:f0:49:db:49:20:77:42:2c:66:61:53:
f4:8f:7e:d0:3a:3e:88:7d:a8:b4:e5:95:ac:94:b1:94:51:2d:
52:8c:a0:5a:b0:dc:70:ba:db:79:5c:d3:54:a5:b3:f5:a9:12:
d2:a0:e6:55:d3:b8:cf:69:58:5e:fd:ba:01:29:dd:f2:f6:72:
09:9d:47:d7:85:7c:bc:49:f2:b7:7e:8d:8f:a8:43:7c:fc:83:
26:9e:9e:fe:93:f2:a7:5d:fe:22:34:5d:72:c6:fd:c4:d1:52:
df:85:4c:05:c1:9f:75:02:92:65:54:65:1e:2f:b6:dc:fe:ae:
55:e3:3b:4e:37:54:4b:41:68:17:a3:0b:2c:05:56:f9:0b:32:
3b:11:6c:75:1c:bd:de:32:b4:70:f9:87:03:62:5d:07:dd:da:
25:44:25:41:45:48:c5:36:ec:ee:20:68:9b:4c:d0:bb:47:6c:
f8:a0:26:c9:b8:ff:ca:1b:8b:5f:5a:a5:3e:50:4f:cd:5a:01:
45:40:ae:96:a8:a5:c0:dc:6a:ea:17:03:23:d2:0d:9b:96:39:
c7:9e:ab:63
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZbGB5+HwESdPdBzAXPlZnpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5
ODNlYjgwHhcNMjUwNTEyMTk0NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU3Njk1NzUyNDBlMTg1ZDYzNjlhZGNjZjNhMTUzMDI2ZTkxNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyFISmPELVEd77yMrLa539uNioCv
FLftslozDfOfkJrZ9lC7bzCBdAMqk4brKgzFQt9vTLwIkg0D3JbE8EEE5eET5cPN
MfbLUFBicOCEofSXNDpjKTaaJMvhwJWFDoIJO+Kt4EErqmaTEItFza/iFtDEy9HF
jBotT5GPMhjJZr8uQ9sC8ASxWHA9MWDKklTcij5bHetaELDBRHhbwYSNG39CRYcc
odigVFWDaeq0EwhQWkZ4VYnaXiUwW+7lo5MTSvSp5hhTyvF3cUYNexAcqSDP60Bw
19DvDEMjnCmQ7aaZ4zkvx9+7UwTuPM9TRo1vop1HTMVWwLH9qFf/9IrqhwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPrnaVdSQOGF1jaa3M86FTAm6RRoMB8GA1UdIwQY
MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt
ZmM2MzI4NDFiYTNlLzEvMS11ZHBWMUpBNFlYV05wcmN6em9WTUNicEZHZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzkvZGY2NmEwLWM5NTgtNGU1Yy1hNmRmLWZjNjMyODQxYmEz
ZS8xL1hZYkVmYWJaQjVOSHRnOEU3VnhWVl82WVByZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAX9vwME
AMJmzDANBgkqhkiG9w0BAQsFAAOCAQEAZtjZjAd4ykWTmzmpRPcF4kc7mDW26wzf
JmfftpX+js0wmMsNHzmoBSobcPBJ20kgd0IsZmFT9I9+0Do+iH2otOWVrJSxlFEt
UoygWrDccLrbeVzTVKWz9akS0qDmVdO4z2lYXv26ASnd8vZyCZ1H14V8vEnyt36N
j6hDfPyDJp6e/pPyp13+IjRdcsb9xNFS34VMBcGfdQKSZVRlHi+23P6uVeM7TjdU
S0FoF6MLLAVW+QsyOxFsdRy93jK0cPmHA2JdB93aJUQlQUVIxTbs7iBom0zQu0ds
+KAmybj/yhuLX1qlPlBPzVoBRUCulqilwNxq6hcDI9INm5Y5x56rYw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:12:33 2025 by rpki-client