Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Nm9yoqpN4gyoljzpAobKPpjJNFg.roa
File: Nm9yoqpN4gyoljzpAobKPpjJNFg.roa (raw, json)
Hash identifier: rh231TcrEAUm+uBXxS4HRuTPJ869HuFEG+R2PQ5KzjE=
Subject key identifier: 36:6F:72:A2:AA:4D:E2:0C:A8:96:3C:E9:02:86:CA:3E:98:C9:34:58
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01954B1592B8D4F6C8075E1B98BB7E62C04E
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Nm9yoqpN4gyoljzpAobKPpjJNFg.roa
Signing time: Fri 28 Feb 2025 05:44:19 +0000
ROA not before: Fri 28 Feb 2025 05:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.222.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 15:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:15:92:b8:d4:f6:c8:07:5e:1b:98:bb:7e:62:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 28 05:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=366f72a2aa4de20ca8963ce90286ca3e98c93458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:3d:bb:8a:43:c5:a9:9e:e0:3d:e6:0f:be:
91:61:11:c7:7b:37:ba:61:3a:85:43:58:91:2c:59:
31:a9:d9:a4:3d:70:a9:09:24:28:b6:4b:d1:9c:3f:
91:0f:5f:fd:2f:42:c2:4e:e5:a1:b5:26:71:33:60:
ee:36:cd:5c:6c:2c:ab:3d:94:a0:ee:79:8b:6c:79:
e6:d0:38:cc:a5:13:56:fb:58:83:9f:b5:d7:4b:5f:
3b:d6:9f:28:23:2b:a1:26:1e:5a:a1:29:55:17:94:
64:cd:59:a9:e9:11:19:0e:df:bd:30:7c:f4:d4:65:
47:6c:21:3b:87:5e:34:b1:8b:77:3f:26:d3:56:7f:
9a:1e:f2:48:9a:84:57:01:d9:6f:3e:c4:06:3a:fb:
7a:25:3d:a7:35:4b:f3:88:c6:a4:35:82:6e:26:c4:
bf:37:54:54:19:32:36:ac:2d:84:73:63:6c:ff:af:
05:67:32:65:d4:78:b5:c8:6a:8a:c4:d6:85:71:71:
29:32:71:70:04:62:da:ef:2e:ec:21:cd:3c:24:bb:
71:01:c3:e9:40:06:23:3f:6c:1b:11:e6:b1:b4:7c:
2d:73:f0:d2:89:a2:aa:f8:1d:87:4f:5e:73:b7:80:
ff:e5:56:7e:b3:5c:cc:f9:e6:f5:ce:b1:55:d8:3d:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:72:A2:AA:4D:E2:0C:A8:96:3C:E9:02:86:CA:3E:98:C9:34:58
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Nm9yoqpN4gyoljzpAobKPpjJNFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7c:20:9f:c7:af:5a:f7:70:79:7e:f7:61:da:08:f7:36:05:
e3:43:8e:28:cc:cd:5f:98:e2:b6:38:a2:f6:db:95:a8:99:69:
ca:39:04:4d:8c:8a:4a:82:e4:2b:14:20:f2:4a:3d:47:b2:56:
4c:56:d6:62:01:5c:c9:96:8c:d4:cc:06:14:1b:1c:5e:95:ef:
13:0b:e8:7e:a5:6d:3f:12:d0:62:a6:61:19:06:47:a2:ce:c5:
e9:cc:2f:8a:28:63:91:3f:04:5d:1b:63:36:6b:f2:30:5c:65:
66:ca:e9:27:f6:da:74:33:f7:f9:8f:2c:f9:6e:5f:84:3b:86:
69:0f:dd:f4:f2:b6:20:8a:d2:b7:b7:21:c7:0f:2b:62:21:6b:
41:56:69:73:e4:f8:92:19:b3:b2:75:0b:fe:dd:d9:71:73:fb:
4e:f3:6b:00:57:ce:ed:5e:08:69:51:b0:f4:17:1b:de:37:3d:
b2:ef:e8:36:f1:05:63:14:07:c2:26:ed:e5:d2:f9:95:52:d2:
58:11:9a:8c:a5:40:95:40:bb:08:ec:ea:b4:a2:dc:3b:3e:e0:
01:ad:ab:ed:30:10:23:10:37:4e:13:ff:ca:de:1d:07:4e:aa:
32:d6:da:42:66:6e:bf:b3:d4:34:a7:dd:77:f7:05:c4:3f:1c:
38:b9:99:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVLFZK41PbIB14bmLt+YsBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwMjI4MDU0NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjZmNzJhMmFhNGRlMjBjYTg5NjNjZTkwMjg2Y2EzZTk4YzkzNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N49u4pDxame4D3mD76RYRHHeze6
YTqFQ1iRLFkxqdmkPXCpCSQotkvRnD+RD1/9L0LCTuWhtSZxM2DuNs1cbCyrPZSg
7nmLbHnm0DjMpRNW+1iDn7XXS1871p8oIyuhJh5aoSlVF5RkzVmp6REZDt+9MHz0
1GVHbCE7h140sYt3PybTVn+aHvJImoRXAdlvPsQGOvt6JT2nNUvziMakNYJuJsS/
N1RUGTI2rC2Ec2Ns/68FZzJl1Hi1yGqKxNaFcXEpMnFwBGLa7y7sIc08JLtxAcPp
QAYjP2wbEeaxtHwtc/DSiaKq+B2HT15zt4D/5VZ+s1zM+eb1zrFV2D2H+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDZvcqKqTeIMqJY86QKGyj6YyTRYMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvTm05eW9xcE40Z3lvbGp6cEFvYktQcGpKTkZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5PeAwQB
sv0mMA0GCSqGSIb3DQEBCwUAA4IBAQAJfCCfx69a93B5fvdh2gj3NgXjQ44ozM1f
mOK2OKL225WomWnKOQRNjIpKguQrFCDySj1HslZMVtZiAVzJlozUzAYUGxxele8T
C+h+pW0/EtBipmEZBkeizsXpzC+KKGORPwRdG2M2a/IwXGVmyukn9tp0M/f5jyz5
bl+EO4ZpD9308rYgitK3tyHHDytiIWtBVmlz5PiSGbOydQv+3dlxc/tO82sAV87t
XghpUbD0FxveNz2y7+g28QVjFAfCJu3l0vmVUtJYEZqMpUCVQLsI7Oq0otw7PuAB
ravtMBAjEDdOE//K3h0HTqoy1tpCZm6/s9Q0p9139wXEPxw4uZkB
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:30 2025 by rpki-client