Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A-O5dd5MBRQKaKQcEg91Z6z1ALo.roa
File: A-O5dd5MBRQKaKQcEg91Z6z1ALo.roa (raw, json)
Hash identifier: 6Ouyz4KLFqKsGDaAOhBP2jBy5tPKEKMAETrS4I8k1YE=
Subject key identifier: 03:E3:B9:75:DE:4C:05:14:0A:68:A4:1C:12:0F:75:67:AC:F5:00:BA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01953CD5DBC9468D485F9765321B05ED5B6B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A-O5dd5MBRQKaKQcEg91Z6z1ALo.roa
Signing time: Tue 25 Feb 2025 11:20:03 +0000
ROA not before: Tue 25 Feb 2025 11:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215144
IP address blocks: 93.88.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 15:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:d5:db:c9:46:8d:48:5f:97:65:32:1b:05:ed:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 11:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e3b975de4c05140a68a41c120f7567acf500ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:e0:75:f0:75:49:74:33:7f:bd:c1:0d:c9:
b8:08:7e:60:f3:13:68:f5:e7:bd:d3:cd:9f:04:f2:
a3:95:d3:11:f3:44:ae:e8:d4:ae:ec:d5:42:a6:f4:
b7:28:e8:56:d0:b9:e7:41:b9:1c:29:71:6a:12:0e:
aa:94:68:e1:91:25:fb:84:68:53:bd:0e:1e:86:d4:
5e:85:0a:e7:ae:0d:c3:0a:99:4c:df:1d:92:fc:e5:
74:10:86:bb:89:4a:3d:f1:04:2d:bb:17:ab:d7:cc:
56:9c:72:10:e9:37:f7:3a:b6:92:91:91:bb:71:80:
8d:65:4e:b5:26:b9:77:0d:81:c0:fd:d1:e7:f6:c0:
5a:ad:a4:20:26:4a:57:a1:71:ad:e9:5f:dd:0a:f1:
2a:5f:0b:19:8e:ff:df:6c:7a:09:fc:21:52:bc:2f:
81:e8:a4:cf:52:84:20:00:cc:f1:98:ba:f9:6c:36:
2f:2b:83:ba:4c:63:b5:f5:e2:eb:8a:83:1f:30:6e:
20:fb:3e:6c:e1:d8:31:85:e6:a5:1a:aa:b2:f4:ff:
18:bc:59:20:17:75:57:c5:5b:6b:5c:5d:68:1e:78:
cf:89:88:6a:36:e1:d6:96:b5:41:94:7b:53:1f:61:
25:e1:d0:55:33:78:85:b9:24:9d:27:5a:ea:79:4f:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:B9:75:DE:4C:05:14:0A:68:A4:1C:12:0F:75:67:AC:F5:00:BA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A-O5dd5MBRQKaKQcEg91Z6z1ALo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:72:23:85:75:6c:32:49:03:75:cf:98:c0:a2:12:64:18:30:
ea:8e:8b:2c:85:12:9b:dc:26:48:26:df:3e:ce:21:28:a8:2c:
c4:d9:d7:7e:ea:71:f6:5a:7f:ec:7e:e8:fa:be:ea:03:72:81:
bc:bf:84:eb:d1:dc:86:d1:76:f5:ad:34:f7:38:32:33:67:d3:
4b:3f:3e:31:53:8c:e9:14:f8:b2:da:a4:ae:c1:f8:20:0b:2c:
7b:cc:93:13:35:46:01:31:70:14:b3:37:d5:88:2d:58:9e:17:
fe:f4:8d:e7:f5:31:e7:5c:5f:7d:e4:78:7b:42:c7:27:1b:dd:
40:51:61:5f:75:35:ce:85:5c:a1:cd:ef:3a:4a:28:a8:e5:9d:
0a:99:77:e2:16:c3:0c:0c:1a:45:7a:5f:c3:a8:3c:a8:3c:1c:
96:cf:ca:92:fd:03:55:c7:f7:44:5e:21:71:e1:41:84:24:d3:
23:f3:55:a2:96:91:17:b1:3c:d5:ee:a8:e5:dc:2b:4e:0b:c2:
00:1e:71:77:da:2f:ca:f5:8e:c1:0f:b1:2b:66:91:73:34:a1:
67:2f:9f:00:34:65:37:ba:c1:3e:df:1a:c7:97:47:34:88:20:
f8:ae:cc:17:ae:b8:6a:4b:dc:84:3a:40:2f:97:e6:22:15:78:
13:f7:05:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU81dvJRo1IX5dlMhsF7VtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjI1MTEyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2UzYjk3NWRlNGMwNTE0MGE2OGE0MWMxMjBmNzU2N2FjZjUwMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ergdfB1SXQzf73BDcm4CH5g8xNo
9ee9082fBPKjldMR80Su6NSu7NVCpvS3KOhW0LnnQbkcKXFqEg6qlGjhkSX7hGhT
vQ4ehtRehQrnrg3DCplM3x2S/OV0EIa7iUo98QQtuxer18xWnHIQ6Tf3OraSkZG7
cYCNZU61Jrl3DYHA/dHn9sBaraQgJkpXoXGt6V/dCvEqXwsZjv/fbHoJ/CFSvC+B
6KTPUoQgAMzxmLr5bDYvK4O6TGO19eLrioMfMG4g+z5s4dgxhealGqqy9P8YvFkg
F3VXxVtrXF1oHnjPiYhqNuHWlrVBlHtTH2El4dBVM3iFuSSdJ1rqeU8GGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPjuXXeTAUUCmikHBIPdWes9QC6MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQS1PNWRkNU1CUlFLYUtRY0VnOTFaNnoxQUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjNMA0G
CSqGSIb3DQEBCwUAA4IBAQCiciOFdWwySQN1z5jAohJkGDDqjosshRKb3CZIJt8+
ziEoqCzE2dd+6nH2Wn/sfuj6vuoDcoG8v4Tr0dyG0Xb1rTT3ODIzZ9NLPz4xU4zp
FPiy2qSuwfggCyx7zJMTNUYBMXAUszfViC1Ynhf+9I3n9THnXF995Hh7QscnG91A
UWFfdTXOhVyhze86Siio5Z0KmXfiFsMMDBpFel/DqDyoPByWz8qS/QNVx/dEXiFx
4UGEJNMj81WilpEXsTzV7qjl3CtOC8IAHnF32i/K9Y7BD7ErZpFzNKFnL58ANGU3
usE+3xrHl0c0iCD4rswXrrhqS9yEOkAvl+YiFXgT9wVH
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:44:07 2025 by rpki-client