Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/R7jyDeIOiOF-ci54QdbSlrln_ks.roa
File: R7jyDeIOiOF-ci54QdbSlrln_ks.roa (raw, json)
Hash identifier: TCfDSgVcPQMKm7BJmfUHUmVjx7NCJW8zGwjCljeVIKI=
Subject key identifier: 47:B8:F2:0D:E2:0E:88:E1:7E:72:2E:78:41:D6:D2:96:B9:67:FE:4B
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 01973540A3CABFB9C8CCA6FF697A904C820F
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/R7jyDeIOiOF-ci54QdbSlrln_ks.roa
Signing time: Tue 03 Jun 2025 10:05:17 +0000
ROA not before: Tue 03 Jun 2025 10:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40513
IP address blocks: 147.78.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:40:a3:ca:bf:b9:c8:cc:a6:ff:69:7a:90:4c:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jun 3 10:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b8f20de20e88e17e722e7841d6d296b967fe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:d1:2c:e6:bb:a3:00:3a:fa:be:5e:bd:1b:
c5:4f:f5:7a:a2:3b:81:b0:7d:54:94:39:48:2c:72:
36:ba:d7:b2:8e:0e:9c:3d:4b:c6:66:10:44:76:27:
6d:60:18:a1:71:5e:84:25:8e:49:5e:e3:64:b6:e2:
73:39:9a:6a:30:0e:11:6a:e9:a5:b2:ab:a4:d2:9f:
45:0a:d7:16:31:5a:f6:4a:f7:36:c1:7d:88:eb:b6:
82:fc:5a:4d:98:02:43:a1:18:45:51:a3:93:c0:b2:
05:c7:5b:3f:10:f4:4c:3e:0d:c5:40:19:09:f9:23:
65:d4:f3:1f:37:82:fd:87:c7:7c:bb:0f:8d:11:6b:
c4:5a:5e:c1:13:89:3e:c4:6d:d1:75:d3:a6:7d:6d:
82:5c:22:1a:96:a1:eb:a0:60:82:fd:74:84:2d:5e:
dc:05:d0:5a:30:c8:93:dd:8f:97:a2:32:7d:03:3c:
8d:77:bb:64:9b:4f:b3:f6:7f:96:71:eb:69:db:ee:
4c:ce:c6:63:cc:9a:51:d8:2c:7b:c2:94:2c:a1:04:
1f:eb:ff:47:af:27:97:fc:c8:57:0a:f9:3f:6a:9d:
45:ad:9c:e6:66:9f:4e:ff:9d:99:f2:51:d6:17:eb:
0c:4c:9c:3d:39:64:1a:81:96:56:a8:fc:82:47:45:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:F2:0D:E2:0E:88:E1:7E:72:2E:78:41:D6:D2:96:B9:67:FE:4B
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/R7jyDeIOiOF-ci54QdbSlrln_ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.60.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ba:7d:0f:b5:23:57:77:ca:f4:80:16:32:97:fb:8c:8a:15:
00:e6:08:95:11:13:8c:75:2c:32:4b:93:15:89:5d:8c:e1:09:
90:3c:2e:7d:60:fa:e3:16:eb:12:37:17:3e:23:94:40:94:1e:
97:a8:85:7e:cf:cb:07:e4:24:05:8b:5f:af:ae:d6:fe:0c:73:
7d:ed:c3:3c:35:5f:25:41:d4:cd:4a:ef:89:f9:c7:95:16:e4:
94:7e:e0:df:41:a4:68:84:66:67:e8:4a:50:71:ca:e5:98:0c:
9c:a2:a1:2a:21:0c:60:7c:04:ff:ba:11:d5:fd:d6:a7:aa:07:
53:90:49:56:19:8e:57:28:9c:fc:b2:a5:40:6f:86:1a:4d:70:
11:00:fa:9f:e8:c7:19:55:65:8a:59:cd:f7:ed:0d:e0:48:69:
39:9a:8d:44:9a:38:0e:66:f0:9d:d4:0e:cf:bc:8a:2f:35:1a:
1b:19:7f:b6:ea:91:4b:9c:13:46:0d:d1:21:95:0c:83:5f:8e:
98:aa:a4:f2:5a:b1:fd:37:e8:fc:70:b8:00:4b:a5:82:90:8e:
8e:1d:8c:e2:9a:50:2e:ae:a6:cc:d2:f1:52:36:9f:43:fe:8f:
05:3c:0c:4e:0c:64:40:37:7b:7f:1b:59:28:1f:44:ac:72:0e:
af:4c:c3:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc1QKPKv7nIzKb/aXqQTIIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw
MTFhY2UwHhcNMjUwNjAzMTAwNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2I4ZjIwZGUyMGU4OGUxN2U3MjJlNzg0MWQ2ZDI5NmI5NjdmZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+jRLOa7owA6+r5evRvFT/V6ojuB
sH1UlDlILHI2uteyjg6cPUvGZhBEdidtYBihcV6EJY5JXuNktuJzOZpqMA4Rauml
squk0p9FCtcWMVr2Svc2wX2I67aC/FpNmAJDoRhFUaOTwLIFx1s/EPRMPg3FQBkJ
+SNl1PMfN4L9h8d8uw+NEWvEWl7BE4k+xG3RddOmfW2CXCIalqHroGCC/XSELV7c
BdBaMMiT3Y+XojJ9AzyNd7tkm0+z9n+Wcetp2+5MzsZjzJpR2Cx7wpQsoQQf6/9H
ryeX/MhXCvk/ap1FrZzmZp9O/52Z8lHWF+sMTJw9OWQagZZWqPyCR0Ws8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEe48g3iDojhfnIueEHW0pa5Z/5LMB8GA1UdIwQY
MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt
NWJkYmY2Zjg0N2Y5LzEvUjdqeURlSU9pT0YtY2k1NFFkYlNscmxuX2tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5
LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk048MA0G
CSqGSIb3DQEBCwUAA4IBAQBVun0PtSNXd8r0gBYyl/uMihUA5giVEROMdSwyS5MV
iV2M4QmQPC59YPrjFusSNxc+I5RAlB6XqIV+z8sH5CQFi1+vrtb+DHN97cM8NV8l
QdTNSu+J+ceVFuSUfuDfQaRohGZn6EpQccrlmAycoqEqIQxgfAT/uhHV/danqgdT
kElWGY5XKJz8sqVAb4YaTXARAPqf6McZVWWKWc337Q3gSGk5mo1EmjgOZvCd1A7P
vIovNRobGX+26pFLnBNGDdEhlQyDX46YqqTyWrH9N+j8cLgAS6WCkI6OHYzimlAu
rqbM0vFSNp9D/o8FPAxODGRAN3t/G1koH0Sscg6vTMMh
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:00:44 2025 by rpki-client