Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/2LN5zcady7P1wut299e-MW6nWrQ.roa
File: 2LN5zcady7P1wut299e-MW6nWrQ.roa (raw, json)
Hash identifier: 2KszrRFjyqrVIoV7nwLNHrYxIqLk9uFXdnU0Sjzbzv0=
Subject key identifier: D8:B3:79:CD:C6:9D:CB:B3:F5:C2:EB:76:F7:D7:BE:31:6E:A7:5A:B4
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0194206814B30C2601AEA755EABD4F3AF5CD
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/2LN5zcady7P1wut299e-MW6nWrQ.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44621
IP address blocks: 213.168.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 22:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:14:b3:0c:26:01:ae:a7:55:ea:bd:4f:3a:f5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8b379cdc69dcbb3f5c2eb76f7d7be316ea75ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:1c:67:f8:2f:49:d4:25:d4:32:1d:0e:dc:
81:d4:63:a6:ca:a0:75:a9:9a:4c:fe:90:f0:1d:c4:
51:9c:3c:02:75:f3:f0:9f:a9:75:28:d1:d2:e7:8d:
6c:82:23:12:96:35:7f:64:1a:ae:0e:38:7a:7f:9b:
05:29:52:f4:2c:3d:b9:68:19:1c:45:ec:ff:eb:71:
68:77:03:ee:c4:b9:84:5f:5d:be:bd:d8:1b:04:b7:
5d:e9:f1:cb:46:36:bb:72:66:b2:40:17:fa:aa:5c:
23:e2:cc:6c:42:d7:6c:97:04:e5:03:3b:07:4c:52:
ff:2d:f6:5a:c0:ae:53:9b:b5:87:62:c6:6d:9a:43:
5b:9b:3d:ad:84:15:ee:73:49:30:53:36:c3:6f:53:
62:99:2f:14:5a:b3:95:bb:b5:61:03:80:bc:73:dd:
4c:2e:b4:32:9d:94:74:ce:b5:11:ad:a4:19:26:ec:
ed:16:11:7a:68:97:bb:5c:90:e3:cc:7f:7a:ad:1f:
cc:6a:a8:1a:a8:a8:33:4f:44:3e:45:1d:b6:1c:44:
0f:a1:b1:c6:58:db:c8:e8:23:71:93:16:21:66:cd:
f9:b2:c9:00:9a:18:9b:e2:8d:ec:9e:0c:80:d1:ad:
b3:67:0c:8b:30:e2:03:be:40:6f:e0:4c:df:71:5a:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:79:CD:C6:9D:CB:B3:F5:C2:EB:76:F7:D7:BE:31:6E:A7:5A:B4
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/2LN5zcady7P1wut299e-MW6nWrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:57:77:eb:53:69:af:f8:ee:53:46:7d:f1:ff:9d:99:2c:10:
ba:bd:0d:05:62:fd:f8:77:98:24:44:fb:71:9a:0b:29:20:6f:
6f:ca:56:61:09:01:26:b2:68:2e:ca:e5:94:e6:47:31:8a:49:
d4:7b:17:0f:b9:36:4d:71:1b:a4:c1:72:41:8c:f7:a1:fc:39:
dc:d6:87:14:66:63:d2:c0:34:3f:23:3a:c8:ff:02:fd:f4:e3:
c4:8b:2b:08:0f:c3:79:f8:65:52:fd:c0:ab:0e:70:98:56:de:
39:ad:5a:e4:2c:f7:16:41:58:0e:c5:7c:17:94:4c:d9:2d:ef:
1f:90:2b:09:33:71:bf:e1:c8:0c:a7:05:98:86:b9:f5:e5:75:
e6:83:d1:65:cd:e0:ae:ff:50:2a:f2:12:ee:84:74:44:41:14:
4c:90:05:c3:aa:d4:58:9a:94:9c:a6:32:ce:43:e4:26:20:0a:
26:bc:f6:85:36:ee:90:d8:32:b1:25:21:a0:83:12:92:6c:e8:
51:a3:fa:c2:99:bb:35:35:d9:93:11:71:c3:a3:e2:8d:90:8e:
a8:8d:74:1a:95:5f:82:b2:f7:40:a7:69:b0:70:71:b9:85:87:
0b:05:b8:ec:d7:08:b6:43:65:9c:55:b5:f5:9e:12:a8:f4:f6:
20:4c:ed:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaBSzDCYBrqdV6r1POvXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx
ODk0ZmQwHhcNMjUwMTAxMDU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGIzNzljZGM2OWRjYmIzZjVjMmViNzZmN2Q3YmUzMTZlYTc1YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8cZ/gvSdQl1DIdDtyB1GOmyqB1
qZpM/pDwHcRRnDwCdfPwn6l1KNHS541sgiMSljV/ZBquDjh6f5sFKVL0LD25aBkc
Rez/63FodwPuxLmEX12+vdgbBLdd6fHLRja7cmayQBf6qlwj4sxsQtdslwTlAzsH
TFL/LfZawK5Tm7WHYsZtmkNbmz2thBXuc0kwUzbDb1NimS8UWrOVu7VhA4C8c91M
LrQynZR0zrURraQZJuztFhF6aJe7XJDjzH96rR/MaqgaqKgzT0Q+RR22HEQPobHG
WNvI6CNxkxYhZs35sskAmhib4o3sngyA0a2zZwyLMOIDvkBv4EzfcVp1AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNizec3Gncuz9cLrdvfXvjFup1q0MB8GA1UdIwQY
MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt
MGJjZTgwZDRkZmY5LzEvMkxONXpjYWR5N1Axd3V0Mjk5ZS1NVzZuV3JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5
LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aieMA0G
CSqGSIb3DQEBCwUAA4IBAQCPV3frU2mv+O5TRn3x/52ZLBC6vQ0FYv34d5gkRPtx
mgspIG9vylZhCQEmsmguyuWU5kcxiknUexcPuTZNcRukwXJBjPeh/Dnc1ocUZmPS
wDQ/IzrI/wL99OPEiysID8N5+GVS/cCrDnCYVt45rVrkLPcWQVgOxXwXlEzZLe8f
kCsJM3G/4cgMpwWYhrn15XXmg9FlzeCu/1Aq8hLuhHREQRRMkAXDqtRYmpScpjLO
Q+QmIAomvPaFNu6Q2DKxJSGggxKSbOhRo/rCmbs1NdmTEXHDo+KNkI6ojXQalV+C
svdAp2mwcHG5hYcLBbjs1wi2Q2WcVbX1nhKo9PYgTO1H
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:26:23 2025 by rpki-client