Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/kYX3QSJmpD1sfzT1lX6bV8LiuWo.roa
File: kYX3QSJmpD1sfzT1lX6bV8LiuWo.roa (raw, json)
Hash identifier: LmO5bJzijAEhVvWhxeHIxcIlyVp6IzJSmHImldtxSZg=
Subject key identifier: 91:85:F7:41:22:66:A4:3D:6C:7F:34:F5:95:7E:9B:57:C2:E2:B9:6A
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194F29C0BB278FAC4641AB10085A93D2BA9
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/kYX3QSJmpD1sfzT1lX6bV8LiuWo.roa
Signing time: Tue 11 Feb 2025 01:25:00 +0000
ROA not before: Tue 11 Feb 2025 01:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.44.0/24 maxlen: 24
178.253.45.0/24 maxlen: 24
178.253.52.0/24 maxlen: 24
178.253.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 16:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f2:9c:0b:b2:78:fa:c4:64:1a:b1:00:85:a9:3d:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 11 01:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9185f7412266a43d6c7f34f5957e9b57c2e2b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:63:7d:bf:0e:64:16:ad:3d:13:74:b4:d5:
51:cb:f8:27:b3:75:f9:3a:58:91:fe:7c:33:89:ce:
aa:70:95:58:6e:e6:be:3c:cf:60:49:77:b8:de:da:
a4:15:1d:bb:82:e5:38:84:da:61:58:f6:5f:7a:9a:
8b:e7:16:f4:6c:c7:aa:0f:c7:43:01:22:54:1d:04:
dd:28:69:7d:5e:ad:6b:75:49:04:db:c9:9c:b4:2c:
74:60:de:63:40:22:48:c8:36:5c:ec:f5:80:c1:c9:
ac:00:fb:ed:0a:e0:96:e2:de:37:62:3d:ed:33:af:
db:1a:69:2e:2b:ad:59:d2:76:24:e6:38:70:5a:fe:
3a:60:76:37:3e:07:0f:ed:ed:09:20:53:14:d5:bf:
0b:f3:bf:96:a4:6a:59:05:32:47:eb:1c:a9:10:41:
04:20:01:9c:c2:16:f2:d8:86:55:3f:e9:a5:07:1b:
1e:0b:c3:89:7c:11:5a:54:f6:56:75:bd:1c:2a:c5:
0d:18:94:c5:8c:93:1a:c9:a0:b6:24:3f:57:21:fc:
a7:74:a4:23:91:fa:53:45:66:e8:52:05:24:95:d3:
fa:2d:50:91:4d:8e:d0:9a:c3:e1:99:df:c1:58:f3:
b8:c9:4d:37:ed:f3:c3:dc:29:58:1a:d2:36:4c:99:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:F7:41:22:66:A4:3D:6C:7F:34:F5:95:7E:9B:57:C2:E2:B9:6A
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/kYX3QSJmpD1sfzT1lX6bV8LiuWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.253.0-83.147.254.255
91.186.212.0/23
178.253.31.0/24
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
39:98:b1:03:c4:7d:07:8d:d4:43:00:a3:80:e7:d7:fe:d7:f1:
0b:1f:5b:75:86:e1:24:76:82:34:ac:57:8f:b6:f9:b0:cd:05:
06:20:cf:d4:ac:52:81:ae:fc:40:c5:39:08:83:1f:bd:a6:bd:
51:90:61:bf:9c:48:18:54:f6:3b:9c:05:6f:25:a7:44:d0:6f:
74:78:f6:70:94:cc:81:03:16:d3:2b:de:2e:16:0a:a3:ba:cb:
f4:06:76:5b:07:79:68:87:41:93:39:54:60:84:8c:48:c2:61:
ad:fa:33:fa:6b:04:97:7f:e9:7d:b2:ca:ef:e7:57:a0:4d:eb:
03:75:1e:93:67:d5:f9:76:a7:71:6c:43:f1:ad:2a:bf:d4:a6:
ca:f9:62:48:18:47:b7:a7:b0:44:be:03:fa:2f:3b:8b:78:aa:
28:a4:e4:62:e1:31:8a:a7:21:4b:3e:8e:6e:cd:93:3c:2b:3e:
b5:a3:1c:da:61:df:29:83:29:5c:03:a8:b3:d3:bb:16:c7:bc:
eb:12:2d:a1:95:12:fe:90:51:a1:88:ba:f9:d4:de:6b:6e:a6:
9a:82:6d:dd:c8:e8:05:8f:44:ba:82:a2:49:24:ef:eb:30:b0:
a9:24:c6:2b:8f:72:74:d9:41:bc:5d:f9:25:89:10:fd:5f:99:
85:00:43:39
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZTynAuyePrEZBqxAIWpPSupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwMjExMDEyNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTg1Zjc0MTIyNjZhNDNkNmM3ZjM0ZjU5NTdlOWI1N2MyZTJiOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWBjfb8OZBatPRN0tNVRy/gns3X5
OliR/nwzic6qcJVYbua+PM9gSXe43tqkFR27guU4hNphWPZfepqL5xb0bMeqD8dD
ASJUHQTdKGl9Xq1rdUkE28mctCx0YN5jQCJIyDZc7PWAwcmsAPvtCuCW4t43Yj3t
M6/bGmkuK61Z0nYk5jhwWv46YHY3PgcP7e0JIFMU1b8L87+WpGpZBTJH6xypEEEE
IAGcwhby2IZVP+mlBxseC8OJfBFaVPZWdb0cKsUNGJTFjJMayaC2JD9XIfyndKQj
kfpTRWboUgUkldP6LVCRTY7QmsPhmd/BWPO4yU037fPD3ClYGtI2TJnkdwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFJGF90EiZqQ9bH809ZV+m1fC4rlqMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEva1lYM1FTSm1wRDFzZnpUMWxYNmJWOExpdVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAU5PAAwQA
U5PYMAwDBABTk/0DBABTk/4DBAFbutQDBACy/R8DBAGy/SwDBAGy/TQwDQYJKoZI
hvcNAQELBQADggEBADmYsQPEfQeN1EMAo4Dn1/7X8QsfW3WG4SR2gjSsV4+2+bDN
BQYgz9SsUoGu/EDFOQiDH72mvVGQYb+cSBhU9jucBW8lp0TQb3R49nCUzIEDFtMr
3i4WCqO6y/QGdlsHeWiHQZM5VGCEjEjCYa36M/prBJd/6X2yyu/nV6BN6wN1HpNn
1fl2p3FsQ/GtKr/Upsr5YkgYR7ensES+A/ovO4t4qiik5GLhMYqnIUs+jm7Nkzwr
PrWjHNph3ymDKVwDqLPTuxbHvOsSLaGVEv6QUaGIuvnU3mtuppqCbd3I6AWPRLqC
okkk7+swsKkkxiuPcnTZQbxd+SWJEP1fmYUAQzk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:21:56 2025 by rpki-client