Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/u47YpSrwuJaa6oFuT1q1sXSf8gs.roa
File: u47YpSrwuJaa6oFuT1q1sXSf8gs.roa (raw, json)
Hash identifier: TmaBX5XbN1yz1mp1jJMnUbOfgWs9UZxFzzatO+0Jxak=
Subject key identifier: BB:8E:D8:A5:2A:F0:B8:96:9A:EA:81:6E:4F:5A:B5:B1:74:9F:F2:0B
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 0196F372917688405E615FC83C17ED99CA8B
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/u47YpSrwuJaa6oFuT1q1sXSf8gs.roa
Signing time: Wed 21 May 2025 15:24:53 +0000
ROA not before: Wed 21 May 2025 15:24:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203971
IP address blocks: 37.32.64.0/20 maxlen: 20
37.32.71.0/24 maxlen: 24
185.129.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 May 2025 12:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:72:91:76:88:40:5e:61:5f:c8:3c:17:ed:99:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: May 21 15:24:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8ed8a52af0b8969aea816e4f5ab5b1749ff20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:a7:5c:ed:5f:b0:74:4b:31:9a:49:e1:80:
62:3e:fa:b7:4b:b2:3b:50:f1:9a:e2:2e:77:fa:bc:
1e:50:73:d5:58:52:3b:dc:c6:9f:d5:24:eb:3c:f2:
9d:01:47:4f:a2:48:12:c0:f0:ed:4f:c7:28:9b:52:
80:7b:57:9f:ae:6b:53:26:8a:a7:9a:34:7b:e6:eb:
e7:4d:30:a4:9c:58:c6:e8:5f:d2:75:81:73:a3:d8:
53:93:50:b2:9b:cf:77:07:55:a6:e4:be:1d:9f:22:
23:0c:de:7b:20:f6:48:87:e2:f9:dc:27:8d:e8:8d:
c6:27:07:27:b9:c7:16:2d:ae:60:26:0b:7c:6f:60:
06:f0:91:f7:c3:ef:da:9d:dd:92:ef:12:49:ca:9b:
f1:28:59:54:de:6e:66:3d:8c:6f:64:15:35:2d:d5:
3b:80:39:48:ab:15:fa:ab:6d:a8:73:20:ee:7d:e3:
b7:e2:f7:56:88:dd:c3:ad:94:23:32:5b:ee:a8:9c:
d3:75:1a:de:76:67:b9:7f:2d:74:ff:60:fe:27:12:
22:c8:d3:63:d8:e6:27:c8:d4:5f:b7:c2:8c:2c:ae:
49:af:f3:d1:b6:04:c0:2c:c3:44:81:e8:0b:6b:e3:
c9:ae:81:7d:7a:a3:6e:f4:0c:d1:4e:1c:0c:e3:99:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:D8:A5:2A:F0:B8:96:9A:EA:81:6E:4F:5A:B5:B1:74:9F:F2:0B
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/u47YpSrwuJaa6oFuT1q1sXSf8gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0/20
185.129.92.0/22
Signature Algorithm: sha256WithRSAEncryption
80:1b:df:b3:cc:26:8d:d3:37:54:ac:48:f6:90:25:8a:fb:82:
2b:dd:b4:a6:b6:65:bb:96:8a:e9:49:d8:c3:41:dc:35:69:f8:
07:0c:8f:75:62:0f:20:45:e4:b6:8a:61:99:2c:4a:ca:b5:bc:
11:d1:4a:fc:13:39:5a:56:32:f9:e8:ad:a5:1b:7e:89:ae:f5:
7d:15:e6:c9:9d:f2:bf:6f:85:b8:d9:01:d2:5d:91:29:c8:43:
f2:4c:70:0f:10:ee:12:44:c0:0b:8b:41:e4:34:35:23:fa:48:
eb:0a:c2:7d:51:fc:82:1e:86:e6:72:29:87:41:fa:44:33:cc:
67:28:de:53:a8:d4:43:18:e1:c4:a9:05:cd:51:c7:b2:05:94:
b1:83:26:42:48:96:63:bd:d3:da:50:4c:59:ba:20:e5:08:80:
79:bb:dc:69:eb:1e:4b:2a:15:b8:3b:1e:b7:b6:fd:f8:63:6d:
16:9f:88:2b:91:e1:cb:e2:25:4e:81:45:50:7c:6e:7a:9e:d1:
b2:92:0e:28:87:d7:7d:6a:0a:dc:e3:8d:c3:8d:b3:b7:f2:41:
d5:44:16:41:1a:1a:10:24:76:5b:4e:e1:4e:73:fe:04:c7:26:
bd:41:10:0a:42:6c:15:8a:e4:fb:71:06:d2:e0:df:b3:a8:99:
ac:fc:ad:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbzcpF2iEBeYV/IPBftmcqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjUwNTIxMTUyNDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjhlZDhhNTJhZjBiODk2OWFlYTgxNmU0ZjVhYjViMTc0OWZmMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6SnXO1fsHRLMZpJ4YBiPvq3S7I7
UPGa4i53+rweUHPVWFI73Maf1STrPPKdAUdPokgSwPDtT8com1KAe1efrmtTJoqn
mjR75uvnTTCknFjG6F/SdYFzo9hTk1Cym893B1Wm5L4dnyIjDN57IPZIh+L53CeN
6I3GJwcnuccWLa5gJgt8b2AG8JH3w+/and2S7xJJypvxKFlU3m5mPYxvZBU1LdU7
gDlIqxX6q22ocyDufeO34vdWiN3DrZQjMlvuqJzTdRredme5fy10/2D+JxIiyNNj
2OYnyNRft8KMLK5Jr/PRtgTALMNEgegLa+PJroF9eqNu9AzRThwM45nAUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLuO2KUq8LiWmuqBbk9atbF0n/ILMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvdTQ3WXBTcnd1SmFhNm9GdVQxcTFzWFNmOGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJSBAAwQC
uYFcMA0GCSqGSIb3DQEBCwUAA4IBAQCAG9+zzCaN0zdUrEj2kCWK+4Ir3bSmtmW7
lorpSdjDQdw1afgHDI91Yg8gReS2imGZLErKtbwR0Ur8EzlaVjL56K2lG36JrvV9
FebJnfK/b4W42QHSXZEpyEPyTHAPEO4SRMALi0HkNDUj+kjrCsJ9UfyCHobmcimH
QfpEM8xnKN5TqNRDGOHEqQXNUceyBZSxgyZCSJZjvdPaUExZuiDlCIB5u9xp6x5L
KhW4Ox63tv34Y20Wn4grkeHL4iVOgUVQfG56ntGykg4oh9d9agrc443DjbO38kHV
RBZBGhoQJHZbTuFOc/4Exya9QRAKQmwViuT7cQbS4N+zqJms/K3v
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:25 2025 by rpki-client