Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvF8_OqKnTUqmkaUDh4szJgQ5Ic.roa
File: hvF8_OqKnTUqmkaUDh4szJgQ5Ic.roa (raw, json)
Hash identifier: 5rP6WT8O4poweFVuMOd9tLoZdIUJVsiBJ9j34+Rpep8=
Subject key identifier: 86:F1:7C:FC:EA:8A:9D:35:2A:9A:46:94:0E:1E:2C:CC:98:10:E4:87
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C957F6CD9F164F919D64B7466C00
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvF8_OqKnTUqmkaUDh4szJgQ5Ic.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 12:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c9:57:f6:cd:9f:16:4f:91:9d:64:b7:46:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f17cfcea8a9d352a9a46940e1e2ccc9810e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:bc:50:fb:be:08:90:0e:9c:b2:5a:b1:37:
2a:91:c3:e2:21:4a:a0:c4:80:bf:28:0b:72:ed:8f:
66:5b:93:73:3d:8a:e4:30:7c:b2:a5:87:bd:ac:a7:
b4:ae:12:c3:0f:30:06:ee:fc:86:80:b9:17:0b:d6:
f3:05:af:30:5b:f4:89:9e:04:cd:30:3b:bb:ef:80:
cc:ca:45:f4:29:97:1f:8f:e5:b4:70:86:d4:f6:34:
d2:17:f3:a2:ac:0e:99:9a:13:d0:09:b0:66:20:21:
59:2b:7e:1e:f7:12:23:26:c2:43:68:5a:44:4f:6c:
05:d8:ac:5c:ac:9a:a9:9d:b3:10:77:bd:18:bd:97:
be:f8:c6:8d:f3:0d:7f:40:90:ff:3d:e1:89:a9:58:
c4:9b:05:df:19:ab:3a:68:a3:9f:fc:85:5b:56:fb:
92:22:f3:e9:93:35:6b:63:b3:66:33:bb:6d:96:bc:
26:45:d6:2a:05:d3:57:3e:86:e7:d6:ec:03:56:34:
b9:dd:e0:44:e3:f2:89:1f:fb:66:b9:6f:06:bd:d6:
bf:7a:d8:7d:ca:0f:cf:bb:e7:00:c1:9b:e8:ce:59:
54:e1:21:d3:a7:de:49:71:41:be:2b:85:47:69:ba:
2f:2f:f7:92:59:b8:6c:8b:05:96:1d:88:5e:b8:64:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:7C:FC:EA:8A:9D:35:2A:9A:46:94:0E:1E:2C:CC:98:10:E4:87
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hvF8_OqKnTUqmkaUDh4szJgQ5Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
85:53:19:df:78:3b:54:b7:62:d9:9a:94:29:05:cc:91:2d:b7:
a0:33:50:33:b1:33:e5:15:5f:80:18:23:eb:6d:1c:16:e4:9c:
84:3a:ab:de:2a:7e:bc:ea:78:fa:b8:6e:d3:78:c6:03:8e:bc:
5d:94:da:cb:05:3a:bd:7d:ec:b2:5c:68:97:c3:48:e7:63:c7:
c4:c1:92:c2:91:d6:78:18:6b:a0:f7:79:12:48:8b:a8:d8:58:
96:2f:1b:c0:11:6c:1d:f3:9d:b0:79:50:7f:a6:05:b8:ff:13:
32:54:bb:5c:7a:1f:81:dc:7a:86:7b:bd:6a:70:f4:ff:4c:6f:
0c:3c:dc:57:78:bf:6e:42:dd:7f:ef:4c:55:2b:90:aa:1a:36:
cc:f5:11:95:3c:c5:e9:e0:cd:db:1f:30:df:5c:41:08:d4:52:
50:a1:6f:c3:3d:8c:91:31:e7:1b:5e:7e:56:31:f3:f8:27:82:
f7:61:d7:54:cc:84:44:04:4d:3b:75:53:b5:32:c6:d3:72:c2:
be:ff:d5:cd:94:ea:7c:05:b9:ce:c9:97:3a:1a:1f:03:3b:30:
c4:a9:a7:50:53:20:3c:52:8b:7b:84:74:f1:93:0c:e7:b3:c6:
54:4a:e3:4d:cf:dd:78:09:7b:ee:8a:7f:4f:41:ac:02:7b:0a:
33:f8:5a:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIclX9s2fFk+RnWS3RmwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmYxN2NmY2VhOGE5ZDM1MmE5YTQ2OTQwZTFlMmNjYzk4MTBlNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKC8UPu+CJAOnLJasTcqkcPiIUqg
xIC/KAty7Y9mW5NzPYrkMHyypYe9rKe0rhLDDzAG7vyGgLkXC9bzBa8wW/SJngTN
MDu774DMykX0KZcfj+W0cIbU9jTSF/OirA6ZmhPQCbBmICFZK34e9xIjJsJDaFpE
T2wF2KxcrJqpnbMQd70YvZe++MaN8w1/QJD/PeGJqVjEmwXfGas6aKOf/IVbVvuS
IvPpkzVrY7NmM7ttlrwmRdYqBdNXPobn1uwDVjS53eBE4/KJH/tmuW8Gvda/eth9
yg/Pu+cAwZvozllU4SHTp95JcUG+K4VHabovL/eSWbhsiwWWHYheuGQ/TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbxfPzqip01KppGlA4eLMyYEOSHMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaHZGOF9PcUtuVFVxbWthVURoNHN6SmdRNUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJvMA0G
CSqGSIb3DQEBCwUAA4IBAQCFUxnfeDtUt2LZmpQpBcyRLbegM1AzsTPlFV+AGCPr
bRwW5JyEOqveKn686nj6uG7TeMYDjrxdlNrLBTq9feyyXGiXw0jnY8fEwZLCkdZ4
GGug93kSSIuo2FiWLxvAEWwd852weVB/pgW4/xMyVLtceh+B3HqGe71qcPT/TG8M
PNxXeL9uQt1/70xVK5CqGjbM9RGVPMXp4M3bHzDfXEEI1FJQoW/DPYyRMecbXn5W
MfP4J4L3YddUzIREBE07dVO1MsbTcsK+/9XNlOp8BbnOyZc6Gh8DOzDEqadQUyA8
Uot7hHTxkwzns8ZUSuNNz914CXvuin9PQawCewoz+FqQ
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:47 2025 by rpki-client