Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VEs7KudrJr4haIJRiH3b1dtGXUI.roa
File: VEs7KudrJr4haIJRiH3b1dtGXUI.roa (raw, json)
Hash identifier: dQn8Pc2gFQIt6PxXLAv8bL1r3Vl+WqQHSNt5G+2XxJ4=
Subject key identifier: 54:4B:3B:2A:E7:6B:26:BE:21:68:82:51:88:7D:DB:D5:DB:46:5D:42
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0196EC4D9936689627D518B6D0F2792EDFEA
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VEs7KudrJr4haIJRiH3b1dtGXUI.roa
Signing time: Tue 20 May 2025 06:07:10 +0000
ROA not before: Tue 20 May 2025 06:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 147.28.138.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.214.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.241.0/24 maxlen: 24
147.75.40.0/23 maxlen: 23
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 10:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:4d:99:36:68:96:27:d5:18:b6:d0:f2:79:2e:df:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: May 20 06:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=544b3b2ae76b26be21688251887ddbd5db465d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:c9:b7:38:9e:52:6e:a2:f2:0d:c4:b6:d4:
81:04:0e:f5:c6:4b:72:15:42:e4:02:83:6c:5f:33:
12:f0:83:c4:0b:ec:19:4b:f5:11:17:5b:c4:fe:d8:
dc:b9:d3:14:5a:90:44:2b:db:b9:60:18:3c:7b:93:
e1:69:01:9f:34:68:dc:8d:8b:34:34:c7:64:1e:00:
43:c3:f7:ae:bd:fc:c4:51:04:22:5e:7c:0d:77:1c:
e7:63:bb:2e:87:68:ab:b5:1f:48:f0:22:a4:41:a3:
1c:6c:cc:41:4b:01:2d:64:61:d1:0e:c0:08:78:32:
81:dd:d9:05:92:37:5c:49:e2:17:ee:9f:46:71:9f:
c4:e9:47:46:35:4f:4e:e4:1d:2b:51:81:f8:f4:6e:
8e:3d:94:02:36:da:fd:59:7d:02:af:40:b9:6c:88:
24:c9:39:4c:fc:a5:19:46:32:5f:8c:7c:a8:49:9c:
67:01:1e:97:11:1b:09:36:f9:e3:86:e8:17:c8:f5:
69:cb:38:6e:2b:b8:14:38:c4:78:63:74:b8:c5:47:
66:61:c7:97:66:e5:b5:1d:7e:3f:7c:d1:4a:53:42:
5a:56:4c:30:73:7b:58:da:64:11:53:3f:f1:86:c2:
2a:dc:99:33:0d:f3:7d:2e:25:50:eb:00:97:5a:8a:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4B:3B:2A:E7:6B:26:BE:21:68:82:51:88:7D:DB:D5:DB:46:5D:42
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VEs7KudrJr4haIJRiH3b1dtGXUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.138.0/23
147.28.164.0/22
147.28.176.0/23
147.28.210.0/23
147.28.214.0/23
147.28.222.0/23
147.28.241.0/24
147.75.40.0/23
147.75.206.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f3:7a:62:2a:0d:41:11:5f:30:f2:cc:cd:89:82:26:fe:a3:
b2:d8:c9:29:61:33:4d:bb:2b:72:de:55:18:e2:84:4d:6a:c4:
44:ad:7b:f2:76:9c:f1:66:1f:41:fc:78:69:40:f2:3c:69:4a:
53:b3:05:d1:cd:2a:67:a3:0b:59:e4:02:00:9c:14:c4:99:07:
99:24:09:f8:d3:7f:fb:05:70:cc:e7:a0:58:4a:bd:0c:ce:b9:
7f:bc:e0:44:13:15:66:dc:b5:d5:7d:14:f2:0c:0f:5d:1e:f7:
72:61:ac:57:b2:ff:11:dd:57:26:ba:8e:0d:6a:9b:5b:d4:af:
ab:04:50:4e:a5:f6:d1:91:2d:86:84:97:d0:28:9c:7d:8a:a4:
ac:88:b5:0a:fe:cd:fa:fb:2d:b5:8f:73:c0:d0:23:57:1f:ea:
4b:e4:37:56:a3:60:2d:d6:49:da:3d:2d:c4:f0:c6:d2:f0:99:
c9:c4:80:25:5a:05:43:41:df:72:4a:7c:9f:66:77:d8:31:b4:
f1:c7:64:db:e3:a8:91:f0:fe:20:b4:e9:4e:95:42:95:00:98:
3c:98:a2:4b:95:20:f1:9b:f1:a3:12:c9:7f:84:a6:90:a4:ca:
e2:4c:8b:3c:9c:82:a0:c3:60:69:74:ed:b2:3e:3b:26:e6:a9:
27:2f:7a:64
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZbsTZk2aJYn1Ri20PJ5Lt/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4
ZDRhNGMwHhcNMjUwNTIwMDYwNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDRiM2IyYWU3NmIyNmJlMjE2ODgyNTE4ODdkZGJkNWRiNDY1ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJbJtzieUm6i8g3EttSBBA71xkty
FULkAoNsXzMS8IPEC+wZS/URF1vE/tjcudMUWpBEK9u5YBg8e5PhaQGfNGjcjYs0
NMdkHgBDw/euvfzEUQQiXnwNdxznY7suh2irtR9I8CKkQaMcbMxBSwEtZGHRDsAI
eDKB3dkFkjdcSeIX7p9GcZ/E6UdGNU9O5B0rUYH49G6OPZQCNtr9WX0Cr0C5bIgk
yTlM/KUZRjJfjHyoSZxnAR6XERsJNvnjhugXyPVpyzhuK7gUOMR4Y3S4xUdmYceX
ZuW1HX4/fNFKU0JaVkwwc3tY2mQRUz/xhsIq3JkzDfN9LiVQ6wCXWop15QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFFRLOyrnaya+IWiCUYh929XbRl1CMB8GA1UdIwQY
MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt
YWM0YTQwNjE3NDZkLzEvVkVzN0t1ZHJKcjRoYUlKUmlIM2IxZHRHWFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk
LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBkxyKAwQC
kxykAwQBkxywAwQBkxzSAwQBkxzWAwQBkxzeAwQAkxzxAwQBk0soAwQBk0vOMA0G
CSqGSIb3DQEBCwUAA4IBAQAS83piKg1BEV8w8szNiYIm/qOy2MkpYTNNuyty3lUY
4oRNasRErXvydpzxZh9B/HhpQPI8aUpTswXRzSpnowtZ5AIAnBTEmQeZJAn403/7
BXDM56BYSr0Mzrl/vOBEExVm3LXVfRTyDA9dHvdyYaxXsv8R3Vcmuo4Naptb1K+r
BFBOpfbRkS2GhJfQKJx9iqSsiLUK/s36+y21j3PA0CNXH+pL5DdWo2At1knaPS3E
8MbS8JnJxIAlWgVDQd9ySnyfZnfYMbTxx2Tb46iR8P4gtOlOlUKVAJg8mKJLlSDx
m/GjEsl/hKaQpMriTIs8nIKgw2BpdO2yPjsm5qknL3pk
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:39:15 2025 by rpki-client