Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dDQZEp-Jso_OEQrhifg60tJlWis.roa
File: dDQZEp-Jso_OEQrhifg60tJlWis.roa (raw, json)
Hash identifier: dmNV1K/pl2+0MnOa0j+6J5mwCprWWX+5kQaLiiTKwk4=
Subject key identifier: 74:34:19:12:9F:89:B2:8F:CE:11:0A:E1:89:F8:3A:D2:D2:65:5A:2B
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01973A88DFAD0249F02BD419D415D38E997F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dDQZEp-Jso_OEQrhifg60tJlWis.roa
Signing time: Wed 04 Jun 2025 10:42:18 +0000
ROA not before: Wed 04 Jun 2025 10:42:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 13:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:88:df:ad:02:49:f0:2b:d4:19:d4:15:d3:8e:99:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 4 10:42:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743419129f89b28fce110ae189f83ad2d2655a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:22:2e:94:a6:8f:cb:3e:6f:06:4f:7c:17:
17:9d:8f:60:0d:1f:c9:be:5d:06:68:a9:5b:07:28:
f8:12:91:4d:68:0c:32:f0:01:cc:67:82:f5:9d:3d:
09:7c:d8:23:66:12:3b:7f:d7:4c:66:d6:fd:44:7c:
b2:85:e4:c7:d4:9e:4d:84:2c:2d:e7:8f:d5:7c:08:
37:a2:2c:3c:0f:ba:75:05:84:05:8d:cd:70:0e:4e:
ba:05:4b:12:c8:25:4b:be:b6:3e:ee:40:d7:c6:b0:
62:aa:68:ad:31:c1:bb:b7:a9:6d:b6:61:23:de:42:
b3:ab:a4:78:49:3d:92:e0:8b:90:b4:02:4f:34:03:
3c:f0:46:78:1d:54:21:dc:f1:4d:b7:9c:33:4d:3f:
21:6b:68:cd:36:bc:2d:00:0c:50:92:d3:e9:37:a0:
b3:fc:7f:87:ec:53:f1:df:f9:e9:45:61:6d:70:90:
b1:9b:dc:55:24:2e:97:17:1e:df:6a:32:7c:04:8c:
1e:27:41:bf:02:b9:00:66:e2:7c:9f:36:2d:01:de:
15:9a:7c:2e:e0:a9:78:e2:84:ab:d0:da:9f:c8:55:
56:11:75:69:73:4f:51:99:bf:95:54:73:59:76:17:
24:22:b7:37:af:39:2f:2c:94:87:23:ad:ec:8c:1c:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:19:12:9F:89:B2:8F:CE:11:0A:E1:89:F8:3A:D2:D2:65:5A:2B
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/dDQZEp-Jso_OEQrhifg60tJlWis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d4:43:cb:fa:c0:4e:8d:31:44:15:44:15:6e:27:59:07:fc:
1d:79:c8:1f:d4:04:e6:f1:4d:a9:bf:84:ed:1f:c1:ae:bf:92:
3f:ec:3c:9b:ef:f4:43:a5:d1:fa:0f:bf:94:53:d4:d1:12:99:
a0:43:90:e2:f3:61:33:30:3c:60:88:19:2f:e0:c1:64:dd:db:
e0:bd:43:e9:8e:5e:57:55:6b:7b:35:0b:e3:07:37:28:69:64:
03:ba:5c:d2:0d:5f:db:a9:a8:8f:8e:a0:1c:fb:ea:11:c6:1a:
61:60:79:5f:e0:21:ac:e7:a8:b2:22:ef:96:b3:05:0f:b6:a8:
5a:26:18:21:97:a3:4c:8e:ec:62:04:4c:05:f3:8c:b4:26:de:
83:0b:19:77:62:a3:79:67:c6:b3:2e:21:04:43:2c:c4:6f:b6:
e4:72:9c:55:a7:c3:57:e3:f2:e0:c2:f9:1a:d4:57:3d:01:03:
8d:6e:11:ba:01:0a:5e:ee:6d:aa:e4:2b:c5:a2:d6:c9:c8:e8:
a1:fb:17:5d:4f:c8:e1:5c:3e:5d:76:4d:0a:e8:e4:18:43:12:
33:9e:5d:9a:ef:a5:10:98:85:0e:d7:cf:d9:c9:8a:e0:11:9c:
a0:ec:20:de:b7:42:12:b4:fc:b5:70:f4:2f:a2:b2:d2:4b:b4:
35:1f:8a:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc6iN+tAknwK9QZ1BXTjpl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjUwNjA0MTA0MjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDM0MTkxMjlmODliMjhmY2UxMTBhZTE4OWY4M2FkMmQyNjU1YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq0iLpSmj8s+bwZPfBcXnY9gDR/J
vl0GaKlbByj4EpFNaAwy8AHMZ4L1nT0JfNgjZhI7f9dMZtb9RHyyheTH1J5NhCwt
54/VfAg3oiw8D7p1BYQFjc1wDk66BUsSyCVLvrY+7kDXxrBiqmitMcG7t6lttmEj
3kKzq6R4ST2S4IuQtAJPNAM88EZ4HVQh3PFNt5wzTT8ha2jNNrwtAAxQktPpN6Cz
/H+H7FPx3/npRWFtcJCxm9xVJC6XFx7fajJ8BIweJ0G/ArkAZuJ8nzYtAd4Vmnwu
4Kl44oSr0NqfyFVWEXVpc09Rmb+VVHNZdhckIrc3rzkvLJSHI63sjBx4ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQ0GRKfibKPzhEK4Yn4OtLSZVorMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvZERRWkVwLUpzb19PRVFyaGlmZzYwdEpsV2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSSiMA0G
CSqGSIb3DQEBCwUAA4IBAQCO1EPL+sBOjTFEFUQVbidZB/wdecgf1ATm8U2pv4Tt
H8Guv5I/7Dyb7/RDpdH6D7+UU9TREpmgQ5Di82EzMDxgiBkv4MFk3dvgvUPpjl5X
VWt7NQvjBzcoaWQDulzSDV/bqaiPjqAc++oRxhphYHlf4CGs56iyIu+WswUPtqha
Jhghl6NMjuxiBEwF84y0Jt6DCxl3YqN5Z8azLiEEQyzEb7bkcpxVp8NX4/Lgwvka
1Fc9AQONbhG6AQpe7m2q5CvFotbJyOih+xddT8jhXD5ddk0K6OQYQxIznl2a76UQ
mIUO18/ZyYrgEZyg7CDet0IStPy1cPQvorLSS7Q1H4r+
-----END CERTIFICATE-----
Generated at Mon Jun 9 22:09:47 2025 by rpki-client