Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/V_F1dhn6hjctdxgLcv3cys0Tvdg.roa
File: V_F1dhn6hjctdxgLcv3cys0Tvdg.roa (raw, json)
Hash identifier: ZgSFh2zLupfSjrn7hXqiZuClTfc2PfNrdDP22wyWIS4=
Subject key identifier: 57:F1:75:76:19:FA:86:37:2D:77:18:0B:72:FD:DC:CA:CD:13:BD:D8
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 01942520C1333D05DE8627BD9B7B0508FA96
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/V_F1dhn6hjctdxgLcv3cys0Tvdg.roa
Signing time: Thu 02 Jan 2025 03:48:11 +0000
ROA not before: Thu 02 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21436
IP address blocks: 193.108.165.0/24 maxlen: 24
2001:67c:17b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Jan 2025 12:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:c1:33:3d:05:de:86:27:bd:9b:7b:05:08:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jan 2 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f1757619fa86372d77180b72fddccacd13bdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:9f:fe:c5:53:89:d6:31:82:e1:a7:f0:80:
60:9e:29:cd:02:7b:18:b9:4e:1f:dc:d6:85:ab:cc:
71:1d:06:77:6e:9e:59:82:e8:e2:62:a7:75:f4:d0:
14:c3:70:03:e3:66:48:42:22:df:1d:f8:2c:d4:0a:
4d:9d:ba:cf:53:54:e9:fc:f6:70:38:30:03:b6:34:
f9:64:2c:94:9c:8b:6e:4e:a3:a0:ee:00:6c:23:98:
d0:a4:3e:8d:dc:a6:ca:e3:d1:95:07:b4:43:02:49:
c6:40:07:3b:e7:5d:10:51:95:63:20:37:40:0f:7c:
ea:d7:b7:b4:2b:ab:7b:32:11:dc:53:ba:86:2d:6a:
3a:73:52:fc:fe:ad:9d:a1:55:5a:41:f0:86:7c:35:
1d:20:74:26:f8:4c:b9:e3:29:0c:d6:12:ea:99:41:
c2:6c:94:26:2f:9f:fa:fe:23:36:a3:2e:6e:80:8b:
9f:98:cd:8f:39:cb:b7:cb:e6:26:70:97:09:e9:bc:
1b:44:87:a7:0e:12:16:87:56:df:07:e4:ee:66:53:
d9:85:14:50:71:99:12:bb:7e:81:88:fa:a3:6b:dc:
20:a2:91:29:5b:c3:11:db:03:2f:34:56:a2:7d:f6:
60:29:1e:6a:d5:0a:09:13:3c:76:2e:73:ed:3e:00:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:75:76:19:FA:86:37:2D:77:18:0B:72:FD:DC:CA:CD:13:BD:D8
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/V_F1dhn6hjctdxgLcv3cys0Tvdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.165.0/24
IPv6:
2001:67c:17b0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:2a:f2:be:2f:be:bd:4a:6b:38:10:71:a4:e3:d7:a7:21:cb:
8f:0e:8d:19:d5:24:9b:a3:ae:3a:2c:7a:63:3d:e8:53:89:21:
0f:90:87:42:64:00:ab:0e:13:a5:e0:81:6e:0d:5d:72:9a:64:
17:da:5c:d3:ea:3f:f0:10:bf:22:8e:5b:e4:4e:27:41:af:4a:
a3:5f:33:7b:f3:67:c7:e3:2b:75:ca:89:d1:1b:70:fb:bc:d3:
7f:63:5d:88:c7:56:a8:95:f8:bb:86:f2:d1:1a:ed:3e:62:20:
eb:e1:8e:e2:45:58:77:13:07:44:31:88:42:8d:e8:ab:b6:5a:
56:68:d2:4e:1d:35:ef:81:fc:b5:04:6e:9a:04:9b:b4:ac:77:
da:fa:51:e5:dc:b0:dd:68:56:ab:9a:25:12:73:6e:22:5b:e3:
0f:61:75:69:cf:0d:a6:62:47:04:20:7d:84:71:0b:76:ac:a0:
47:25:d3:e5:2a:af:68:c2:2b:3a:c6:c6:ea:51:10:07:8e:83:
2e:eb:39:1d:5e:22:e6:4f:0e:d3:46:be:77:42:c3:ee:ec:a4:
69:13:18:d9:37:3a:e8:fd:6a:d6:db:d8:d2:a1:7f:a8:5d:2a:
78:56:6c:91:64:44:18:41:bb:7c:f2:1d:c0:29:c7:d8:5f:dc:
0a:eb:77:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIMEzPQXehie9m3sFCPqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjUwMTAyMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2YxNzU3NjE5ZmE4NjM3MmQ3NzE4MGI3MmZkZGNjYWNkMTNiZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfSf/sVTidYxguGn8IBgninNAnsY
uU4f3NaFq8xxHQZ3bp5ZgujiYqd19NAUw3AD42ZIQiLfHfgs1ApNnbrPU1Tp/PZw
ODADtjT5ZCyUnItuTqOg7gBsI5jQpD6N3KbK49GVB7RDAknGQAc7510QUZVjIDdA
D3zq17e0K6t7MhHcU7qGLWo6c1L8/q2doVVaQfCGfDUdIHQm+Ey54ykM1hLqmUHC
bJQmL5/6/iM2oy5ugIufmM2POcu3y+YmcJcJ6bwbRIenDhIWh1bfB+TuZlPZhRRQ
cZkSu36BiPqja9wgopEpW8MR2wMvNFaiffZgKR5q1QoJEzx2LnPtPgAelwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFfxdXYZ+oY3LXcYC3L93MrNE73YMB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvVl9GMWRobjZoamN0ZHhnTGN2M2N5czBUdmRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWylMA8E
AgACMAkDBwAgAQZ8F7AwDQYJKoZIhvcNAQELBQADggEBAJoq8r4vvr1KazgQcaTj
16chy48OjRnVJJujrjosemM96FOJIQ+Qh0JkAKsOE6XggW4NXXKaZBfaXNPqP/AQ
vyKOW+ROJ0GvSqNfM3vzZ8fjK3XKidEbcPu8039jXYjHVqiV+LuG8tEa7T5iIOvh
juJFWHcTB0QxiEKN6Ku2WlZo0k4dNe+B/LUEbpoEm7Ssd9r6UeXcsN1oVquaJRJz
biJb4w9hdWnPDaZiRwQgfYRxC3asoEcl0+Uqr2jCKzrGxupREAeOgy7rOR1eIuZP
DtNGvndCw+7spGkTGNk3Ouj9atbb2NKhf6hdKnhWbJFkRBhBu3zyHcApx9hf3Arr
d+o=
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:40:07 2025 by rpki-client