Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/VB5ZTHcj3ActunnGaRRifYBS7Lo.roa
File: VB5ZTHcj3ActunnGaRRifYBS7Lo.roa (raw, json)
Hash identifier: C5n90dch3zvgsFFdsZZlxgwoxCWlxDn5PDFzHRj2yZI=
Subject key identifier: 54:1E:59:4C:77:23:DC:07:2D:BA:79:C6:69:14:62:7D:80:52:EC:BA
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01954F00135C5537B58BD410C9845C178BBB
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/VB5ZTHcj3ActunnGaRRifYBS7Lo.roa
Signing time: Fri 28 Feb 2025 23:59:19 +0000
ROA not before: Fri 28 Feb 2025 23:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 94.131.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 19:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:00:13:5c:55:37:b5:8b:d4:10:c9:84:5c:17:8b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Feb 28 23:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=541e594c7723dc072dba79c66914627d8052ecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:3a:25:ba:2b:27:63:c1:1b:f2:23:d8:bb:
e3:e5:fa:d0:1f:01:96:5b:2f:45:8b:fb:dc:ad:e2:
fe:d1:7b:b0:43:36:17:2e:2d:a4:b8:1c:88:4c:49:
20:26:b2:f0:38:37:c1:7b:a2:43:9f:9a:42:92:33:
54:5e:f9:7c:df:b7:57:ad:ca:cc:7a:39:89:ac:06:
03:48:d9:19:d9:ed:cc:7f:8d:ff:a6:92:6d:de:fa:
d9:35:d9:e2:48:25:98:26:e3:24:be:36:7d:bc:1f:
88:7b:01:7f:d0:9e:c5:46:f7:2a:3f:94:16:7d:75:
22:ac:46:2a:eb:72:c8:fd:48:b7:76:c5:94:91:2b:
8b:e7:a0:da:1c:2b:0d:f4:b8:52:1c:f4:aa:42:e1:
09:6a:08:fc:83:7e:2f:37:c3:e8:20:f0:8f:d9:e9:
0e:38:b0:07:fe:a4:11:04:6b:3e:af:db:01:0c:37:
40:92:71:85:1e:7d:95:6b:b5:2d:5f:d1:04:1d:e3:
bd:26:cf:12:fb:55:5d:f2:30:69:a8:82:90:38:41:
81:2f:fa:6d:b3:f8:d9:55:95:3d:39:0a:24:c7:73:
24:2e:70:a3:21:de:50:42:1f:0c:8b:22:f7:1b:8d:
6e:13:53:54:2a:7c:19:cb:b1:ab:5d:ef:0e:da:7e:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:59:4C:77:23:DC:07:2D:BA:79:C6:69:14:62:7D:80:52:EC:BA
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/VB5ZTHcj3ActunnGaRRifYBS7Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.19.0/24
Signature Algorithm: sha256WithRSAEncryption
11:91:69:ec:2a:33:26:23:a1:ea:0e:bf:69:7b:72:64:95:36:
76:0b:b2:f8:51:17:9d:d4:6c:44:79:88:f0:3f:21:1c:23:cd:
5e:a2:68:4d:86:86:65:6a:2d:4a:f3:6c:d2:ea:ec:1c:a9:ed:
c8:d7:89:01:0a:ce:a0:df:9a:81:73:18:6c:67:03:b9:2a:02:
99:e1:e5:25:cb:25:bd:53:e0:96:a1:d5:bb:a9:d3:46:fb:90:
05:13:78:35:43:6b:49:37:c3:c0:6b:fb:2f:f1:9a:55:bb:5a:
76:fc:c2:5a:ef:2c:8b:b5:1f:7f:d5:8f:01:0a:c3:03:c0:d8:
9c:0c:ba:9f:d1:ae:f1:e5:2b:47:b4:9e:fe:de:f9:99:d5:23:
c5:a2:68:32:26:74:a5:8e:96:fc:03:74:25:ce:bd:1f:40:98:
51:38:6a:76:67:41:3c:eb:b3:c0:00:31:94:e3:43:e7:ea:d9:
6d:4a:a1:80:3a:66:96:58:fe:eb:cf:25:5d:5e:f3:b6:51:73:
d2:ac:d6:90:d0:e5:6b:6f:94:6a:16:75:9a:a4:34:a2:81:c9:
af:df:21:13:b4:03:49:fe:75:08:ff:dd:22:85:38:e4:a8:a7:
de:4a:a3:fc:70:5a:2c:04:5a:75:2b:a6:4b:e2:c3:8b:a6:8c:
57:54:eb:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVPABNcVTe1i9QQyYRcF4u7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjUwMjI4MjM1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDFlNTk0Yzc3MjNkYzA3MmRiYTc5YzY2OTE0NjI3ZDgwNTJlY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3o6JborJ2PBG/Ij2Lvj5frQHwGW
Wy9Fi/vcreL+0XuwQzYXLi2kuByITEkgJrLwODfBe6JDn5pCkjNUXvl837dXrcrM
ejmJrAYDSNkZ2e3Mf43/ppJt3vrZNdniSCWYJuMkvjZ9vB+IewF/0J7FRvcqP5QW
fXUirEYq63LI/Ui3dsWUkSuL56DaHCsN9LhSHPSqQuEJagj8g34vN8PoIPCP2ekO
OLAH/qQRBGs+r9sBDDdAknGFHn2Va7UtX9EEHeO9Js8S+1Vd8jBpqIKQOEGBL/pt
s/jZVZU9OQokx3MkLnCjId5QQh8MiyL3G41uE1NUKnwZy7GrXe8O2n7JVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQeWUx3I9wHLbp5xmkUYn2AUuy6MB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvVkI1WlRIY2ozQWN0dW5uR2FSUmlmWUJTN0xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoMTMA0G
CSqGSIb3DQEBCwUAA4IBAQARkWnsKjMmI6HqDr9pe3JklTZ2C7L4URed1GxEeYjw
PyEcI81eomhNhoZlai1K82zS6uwcqe3I14kBCs6g35qBcxhsZwO5KgKZ4eUlyyW9
U+CWodW7qdNG+5AFE3g1Q2tJN8PAa/sv8ZpVu1p2/MJa7yyLtR9/1Y8BCsMDwNic
DLqf0a7x5StHtJ7+3vmZ1SPFomgyJnSljpb8A3Qlzr0fQJhROGp2Z0E867PAADGU
40Pn6tltSqGAOmaWWP7rzyVdXvO2UXPSrNaQ0OVrb5RqFnWapDSigcmv3yETtANJ
/nUI/90ihTjkqKfeSqP8cFosBFp1K6ZL4sOLpoxXVOtz
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:46 2025 by rpki-client