Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iax5E3QH5AkXWPyryo0QdTVXYBo.roa
File: iax5E3QH5AkXWPyryo0QdTVXYBo.roa (raw, json)
Hash identifier: VnfB8LKPSQWpCtKYft8k2u8xWRt5+wdZ4cRLD/QDPhI=
Subject key identifier: 89:AC:79:13:74:07:E4:09:17:58:FC:AB:CA:8D:10:75:35:57:60:1A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196B39F68BE6644E948554FA37898926F94
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iax5E3QH5AkXWPyryo0QdTVXYBo.roa
Signing time: Fri 09 May 2025 05:58:10 +0000
ROA not before: Fri 09 May 2025 05:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 09:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:9f:68:be:66:44:e9:48:55:4f:a3:78:98:92:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 9 05:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89ac79137407e4091758fcabca8d10753557601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:22:fd:83:9a:a7:ed:30:f2:79:9b:6d:b8:
b6:b5:08:6d:87:12:c6:90:ec:77:9f:78:53:f5:2d:
b9:94:46:07:35:c1:a3:5d:93:ff:1c:65:3c:54:79:
03:8b:0b:de:97:e0:63:e4:3d:59:47:1b:30:18:0e:
db:7b:cc:61:bb:87:2d:f9:fc:1b:2e:ee:7a:df:34:
db:30:de:6b:36:5e:9f:ac:10:33:16:52:b1:bc:3a:
70:25:2d:b5:9e:b7:60:c8:f2:c9:93:b1:17:99:a4:
39:0c:b8:d6:f7:88:b3:9f:9e:f4:4d:9f:ac:15:c1:
0e:b1:f4:da:fd:5f:1a:d5:7f:53:73:5c:02:b9:9b:
dd:fc:a7:11:88:7d:18:5c:17:9b:8f:da:55:48:8a:
62:cd:4b:40:20:35:f8:2d:54:2f:81:90:f5:26:39:
12:45:69:40:cc:90:60:6a:ee:82:c7:a8:98:4d:65:
2f:45:2c:ac:1a:eb:c5:7b:7d:73:20:df:fc:8a:9f:
4d:9a:4c:64:4f:8a:d3:f4:17:fd:3c:be:11:86:c9:
84:1b:e2:c4:db:fd:2f:69:c4:c9:5d:06:60:d7:96:
f1:44:de:95:46:e5:b7:26:34:43:69:27:5e:91:17:
b9:11:04:f4:a5:89:7b:2b:27:2d:e2:6f:6b:d7:56:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:79:13:74:07:E4:09:17:58:FC:AB:CA:8D:10:75:35:57:60:1A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iax5E3QH5AkXWPyryo0QdTVXYBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
42:be:c0:65:2c:61:91:76:e4:c2:de:7b:82:40:8a:93:82:02:
8d:74:a7:ba:31:c1:ae:12:81:c5:4c:c3:48:6f:a5:a7:26:4f:
4b:0f:58:10:c1:47:dc:a7:0d:c1:81:7f:7f:1a:97:23:34:2d:
4a:9a:59:3c:57:32:3d:6d:93:c2:cd:8e:bb:b5:a7:dc:6f:76:
42:40:40:18:f1:ba:67:c4:73:7d:4b:dc:af:67:d2:43:31:72:
5f:25:e7:54:81:5b:93:29:56:e3:2c:a6:09:8f:23:96:88:fb:
01:d7:26:74:54:73:be:4c:94:85:a9:97:f3:77:06:a1:af:47:
56:dc:c9:c8:55:84:5d:46:22:b2:08:6a:e0:d2:39:48:74:53:
29:9f:3c:7c:c3:e5:37:30:d8:3e:5a:df:1d:9f:80:68:83:8a:
c8:ac:2a:dd:d5:c6:b9:1b:e0:b3:59:f0:79:20:b9:1d:32:60:
02:b8:ae:25:55:75:20:5a:82:7e:47:3a:95:f1:e3:49:af:21:
70:45:dc:16:dc:6b:fc:ac:05:af:9c:6f:cf:a8:e5:56:16:cb:
9c:06:1e:6a:21:1a:82:92:4c:88:b8:e8:83:55:d9:c7:46:6c:
59:c3:c4:9e:80:a3:ed:24:9e:c3:5c:97:18:92:0e:50:e8:24:
d6:13:82:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZazn2i+ZkTpSFVPo3iYkm+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwNTA5MDU1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWFjNzkxMzc0MDdlNDA5MTc1OGZjYWJjYThkMTA3NTM1NTc2MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPoi/YOap+0w8nmbbbi2tQhthxLG
kOx3n3hT9S25lEYHNcGjXZP/HGU8VHkDiwvel+Bj5D1ZRxswGA7be8xhu4ct+fwb
Lu563zTbMN5rNl6frBAzFlKxvDpwJS21nrdgyPLJk7EXmaQ5DLjW94izn570TZ+s
FcEOsfTa/V8a1X9Tc1wCuZvd/KcRiH0YXBebj9pVSIpizUtAIDX4LVQvgZD1JjkS
RWlAzJBgau6Cx6iYTWUvRSysGuvFe31zIN/8ip9NmkxkT4rT9Bf9PL4RhsmEG+LE
2/0vacTJXQZg15bxRN6VRuW3JjRDaSdekRe5EQT0pYl7Kyct4m9r11Z/QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImseRN0B+QJF1j8q8qNEHU1V2AaMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaWF4NUUzUUg1QWtYV1B5cnlvMFFkVFZYWUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RMEMA0G
CSqGSIb3DQEBCwUAA4IBAQBCvsBlLGGRduTC3nuCQIqTggKNdKe6McGuEoHFTMNI
b6WnJk9LD1gQwUfcpw3BgX9/GpcjNC1Kmlk8VzI9bZPCzY67tafcb3ZCQEAY8bpn
xHN9S9yvZ9JDMXJfJedUgVuTKVbjLKYJjyOWiPsB1yZ0VHO+TJSFqZfzdwahr0dW
3MnIVYRdRiKyCGrg0jlIdFMpnzx8w+U3MNg+Wt8dn4Bog4rIrCrd1ca5G+CzWfB5
ILkdMmACuK4lVXUgWoJ+RzqV8eNJryFwRdwW3Gv8rAWvnG/PqOVWFsucBh5qIRqC
kkyIuOiDVdnHRmxZw8SegKPtJJ7DXJcYkg5Q6CTWE4IK
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:03 2025 by rpki-client