Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/51D3PXDyueNPUsmYQAJfybch3n0.roa
File: 51D3PXDyueNPUsmYQAJfybch3n0.roa (raw, json)
Hash identifier: gb7gwm8jUbItmNNHbqgag2M5ywOrWQKY1QyBXaVOIEA=
Subject key identifier: E7:50:F7:3D:70:F2:B9:E3:4F:52:C9:98:40:02:5F:C9:B7:21:DE:7D
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0195845814BD929E0B00BB4298DC2477DA09
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/51D3PXDyueNPUsmYQAJfybch3n0.roa
Signing time: Tue 11 Mar 2025 08:35:19 +0000
ROA not before: Tue 11 Mar 2025 08:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199816
IP address blocks: 194.180.219.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Mar 2025 10:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:58:14:bd:92:9e:0b:00:bb:42:98:dc:24:77:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Mar 11 08:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e750f73d70f2b9e34f52c99840025fc9b721de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:28:56:2c:6d:b6:b9:2a:97:2d:75:f2:4e:
09:68:27:79:e1:31:74:0a:53:1a:a1:59:43:9c:7c:
5a:ba:d4:9a:39:be:c4:c3:a0:70:18:1c:06:b3:40:
4b:66:61:60:9b:7e:d3:70:c2:09:39:a2:4b:4d:37:
f4:11:f6:39:a7:57:20:3e:4b:49:a8:c4:ad:d1:fa:
d3:9e:bf:4e:f9:de:bd:83:67:b0:fb:0e:07:62:79:
da:e9:3e:f3:77:c8:33:06:46:db:6a:9b:8a:77:f6:
71:7c:fd:7d:74:9b:a3:0f:ed:ae:73:24:53:31:3a:
bb:6a:ff:54:81:b4:36:52:39:72:d0:af:5c:fb:0b:
68:4a:dc:80:f6:41:cb:50:9b:28:ab:7e:c8:80:ac:
23:ab:cb:54:95:a4:8f:9f:73:84:e1:40:76:20:69:
7c:d2:7b:b2:63:3d:42:ea:fb:56:e3:78:e5:f4:58:
67:e9:b7:2e:28:2d:62:ad:ac:df:1b:04:1d:11:72:
60:5c:a1:81:28:5e:d1:b2:a9:37:9f:b7:70:36:ed:
ca:1a:30:70:a3:e6:ce:8c:6a:1c:d7:d1:e3:b7:f9:
fa:e0:ce:15:f2:ee:64:07:e8:29:7c:f2:7f:4e:1a:
89:b0:24:19:50:4a:a5:b7:d9:7f:ad:42:b3:f4:b5:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:F7:3D:70:F2:B9:E3:4F:52:C9:98:40:02:5F:C9:B7:21:DE:7D
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/51D3PXDyueNPUsmYQAJfybch3n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:82:05:e0:65:78:59:b9:00:90:85:ca:fc:e5:76:9a:25:7b:
86:a5:dd:bd:90:5b:e5:d6:08:e1:56:ce:f9:58:35:a1:7a:4d:
6e:ad:3c:fe:cf:30:ce:70:0a:88:e3:a3:34:b4:7d:c9:96:16:
ba:38:0c:be:e1:2a:26:bd:2e:69:99:70:5a:79:d6:56:d6:38:
0f:dd:cc:b6:79:cc:63:7e:e4:12:a3:a8:6e:45:ca:ba:0a:4a:
05:f1:26:73:a5:90:3f:5c:e6:82:4e:57:9e:b8:0f:7e:02:4a:
ea:59:7a:3c:6d:08:a5:1d:eb:04:7d:fe:5b:ab:24:a1:57:f4:
13:d4:8f:1e:2d:71:41:05:57:ab:c6:f6:f1:12:00:b9:f0:72:
55:d3:d0:8c:79:55:e0:94:f3:ab:60:0c:6b:cc:a2:3e:d6:4a:
c8:3c:3f:f2:98:aa:3a:a5:16:76:c5:48:8e:0c:54:83:b7:58:
36:62:b0:81:27:fd:4f:8a:fc:02:0d:c2:90:bc:68:85:f5:05:
09:aa:64:76:43:57:de:04:3c:fc:85:06:1b:be:3a:4c:c2:05:
23:fc:74:40:51:08:04:bb:64:0e:84:bb:52:d0:d2:c6:50:05:
ca:c9:26:bc:04:a1:13:24:ea:94:a6:18:94:f6:70:4d:be:1b:
dc:f5:c9:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWEWBS9kp4LALtCmNwkd9oJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5
MzVkMjQwHhcNMjUwMzExMDgzNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzUwZjczZDcwZjJiOWUzNGY1MmM5OTg0MDAyNWZjOWI3MjFkZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kQoVixttrkqly118k4JaCd54TF0
ClMaoVlDnHxautSaOb7Ew6BwGBwGs0BLZmFgm37TcMIJOaJLTTf0EfY5p1cgPktJ
qMSt0frTnr9O+d69g2ew+w4HYnna6T7zd8gzBkbbapuKd/ZxfP19dJujD+2ucyRT
MTq7av9UgbQ2Ujly0K9c+wtoStyA9kHLUJsoq37IgKwjq8tUlaSPn3OE4UB2IGl8
0nuyYz1C6vtW43jl9Fhn6bcuKC1irazfGwQdEXJgXKGBKF7Rsqk3n7dwNu3KGjBw
o+bOjGoc19Hjt/n64M4V8u5kB+gpfPJ/ThqJsCQZUEqlt9l/rUKz9LXAvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdQ9z1w8rnjT1LJmEACX8m3Id59MB8GA1UdIwQY
MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt
NWNhMDE2YTEwMDU0LzEvNTFEM1BYRHl1ZU5QVXNtWVFBSmZ5YmNoM24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0
LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTbMA0G
CSqGSIb3DQEBCwUAA4IBAQBdggXgZXhZuQCQhcr85XaaJXuGpd29kFvl1gjhVs75
WDWhek1urTz+zzDOcAqI46M0tH3Jlha6OAy+4SomvS5pmXBaedZW1jgP3cy2ecxj
fuQSo6huRcq6CkoF8SZzpZA/XOaCTleeuA9+AkrqWXo8bQilHesEff5bqyShV/QT
1I8eLXFBBVerxvbxEgC58HJV09CMeVXglPOrYAxrzKI+1krIPD/ymKo6pRZ2xUiO
DFSDt1g2YrCBJ/1PivwCDcKQvGiF9QUJqmR2Q1feBDz8hQYbvjpMwgUj/HRAUQgE
u2QOhLtS0NLGUAXKySa8BKETJOqUphiU9nBNvhvc9clb
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:16:44 2025 by rpki-client