Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/IdUMPDIatLS3daUVsGMPC-yG05A.roa
File: IdUMPDIatLS3daUVsGMPC-yG05A.roa (raw, json)
Hash identifier: shI+j9u7v1lteAkMAD1UWQHBCzazFcDEid+AG0MPsQY=
Subject key identifier: 21:D5:0C:3C:32:1A:B4:B4:B7:75:A5:15:B0:63:0F:0B:EC:86:D3:90
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 0196B48533186E9E7D705D875BB0BE2F579E
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/IdUMPDIatLS3daUVsGMPC-yG05A.roa
Signing time: Fri 09 May 2025 10:09:10 +0000
ROA not before: Fri 09 May 2025 10:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12400
IP address blocks: 89.39.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 May 2025 21:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:85:33:18:6e:9e:7d:70:5d:87:5b:b0:be:2f:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: May 9 10:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d50c3c321ab4b4b775a515b0630f0bec86d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:30:ea:7c:4c:2c:74:2a:60:94:c5:e6:d9:
99:8e:ea:ef:89:a7:be:d3:2b:50:61:33:17:13:b2:
91:7d:9c:8a:fc:a9:4b:19:31:ea:ec:cc:8c:bc:3e:
54:48:ea:7c:44:68:1d:47:ef:d4:59:fc:3d:01:72:
bb:6d:e4:ec:ec:5f:8c:e8:01:87:dd:7c:65:7e:d8:
f3:3f:71:2f:b9:81:25:64:88:de:24:be:36:cb:ee:
ec:ac:ed:5b:15:1f:07:0e:9e:e6:56:80:1f:53:87:
3e:89:ec:ce:86:77:60:00:80:73:02:eb:c7:c9:ea:
b6:fa:1b:74:c9:38:9b:b9:fa:45:c2:a1:e6:b2:ca:
7e:a2:8a:7e:1f:24:74:a4:35:18:36:44:04:3d:e0:
93:c8:88:89:72:36:09:46:81:ff:a0:86:47:6e:ea:
d7:e1:49:78:4c:d2:32:22:97:c3:56:4b:e6:0a:86:
63:db:f3:a7:78:25:9c:9b:63:ea:9e:5f:20:52:76:
b9:ae:37:54:16:18:dd:44:46:e6:3a:80:60:1a:dd:
da:7d:f5:bc:78:e7:47:a2:86:59:64:10:c5:83:e0:
d1:9f:de:dd:92:56:e9:9d:78:8f:05:e0:0f:4b:2d:
3d:3e:5e:93:d8:b8:70:11:c5:98:93:ed:78:49:92:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:0C:3C:32:1A:B4:B4:B7:75:A5:15:B0:63:0F:0B:EC:86:D3:90
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/IdUMPDIatLS3daUVsGMPC-yG05A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:e2:53:03:a0:f2:53:58:b4:b6:ca:6c:a1:49:d2:b8:f2:
31:14:63:b4:ef:8a:bd:9f:5d:9d:4d:00:99:62:6b:e5:a8:c5:
1e:79:06:ef:d6:c6:eb:06:db:c5:2b:c0:1e:63:bf:51:55:c0:
c1:72:38:73:06:f0:07:c6:3a:7e:d1:3f:9b:44:90:62:ad:af:
3f:33:af:fb:23:8e:f4:cf:d4:b5:e8:b6:d3:23:2f:e5:d3:34:
02:31:e4:88:d4:92:64:dc:d7:89:13:03:cb:05:bf:a0:63:ad:
36:11:d0:41:c6:79:82:b8:a9:e0:77:78:be:fe:8e:d0:8f:13:
8a:e8:4c:23:a8:a6:68:33:08:73:36:ce:e9:ed:78:79:e4:79:
83:60:c9:f4:13:83:be:e1:0c:bd:66:1c:d4:2e:84:fb:9b:3c:
51:b5:99:59:93:44:2b:b1:0f:be:d0:bf:20:c4:f3:16:a5:5a:
15:99:e1:fe:55:26:43:39:17:10:57:1b:d2:54:3f:43:30:a1:
39:a0:8c:a9:09:72:f0:93:a4:6e:e0:3f:20:bb:d2:da:3b:f0:
81:3a:ef:90:45:fb:db:07:22:38:59:69:a5:af:43:28:c1:34:
97:34:ef:93:49:26:a2:f9:b2:9d:65:76:0a:a8:9a:5a:1d:86:
1e:2a:27:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZa0hTMYbp59cF2HW7C+L1eeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2
MTIxYzgwHhcNMjUwNTA5MTAwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWQ1MGMzYzMyMWFiNGI0Yjc3NWE1MTViMDYzMGYwYmVjODZkMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTgw6nxMLHQqYJTF5tmZjurviae+
0ytQYTMXE7KRfZyK/KlLGTHq7MyMvD5USOp8RGgdR+/UWfw9AXK7beTs7F+M6AGH
3XxlftjzP3EvuYElZIjeJL42y+7srO1bFR8HDp7mVoAfU4c+iezOhndgAIBzAuvH
yeq2+ht0yTibufpFwqHmssp+oop+HyR0pDUYNkQEPeCTyIiJcjYJRoH/oIZHburX
4Ul4TNIyIpfDVkvmCoZj2/OneCWcm2Pqnl8gUna5rjdUFhjdREbmOoBgGt3affW8
eOdHooZZZBDFg+DRn97dklbpnXiPBeAPSy09Pl6T2LhwEcWYk+14SZIQ8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHVDDwyGrS0t3WlFbBjDwvshtOQMB8GA1UdIwQY
MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt
YTAwMWEyOWMyM2YwLzEvSWRVTVBESWF0TFMzZGFVVnNHTVBDLXlHMDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw
LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSf1MA0G
CSqGSIb3DQEBCwUAA4IBAQAVOuJTA6DyU1i0tspsoUnSuPIxFGO074q9n12dTQCZ
YmvlqMUeeQbv1sbrBtvFK8AeY79RVcDBcjhzBvAHxjp+0T+bRJBira8/M6/7I470
z9S16LbTIy/l0zQCMeSI1JJk3NeJEwPLBb+gY602EdBBxnmCuKngd3i+/o7QjxOK
6EwjqKZoMwhzNs7p7Xh55HmDYMn0E4O+4Qy9ZhzULoT7mzxRtZlZk0QrsQ++0L8g
xPMWpVoVmeH+VSZDORcQVxvSVD9DMKE5oIypCXLwk6Ru4D8gu9LaO/CBOu+QRfvb
ByI4WWmlr0MowTSXNO+TSSai+bKdZXYKqJpaHYYeKifV
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:08 2025 by rpki-client