Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DBmzmlcs9cLA04hCVDZo6h68lpQ.roa
File: DBmzmlcs9cLA04hCVDZo6h68lpQ.roa (raw, json)
Hash identifier: KauJ/dlgC/s+HynU9XZi5T6r3o5dqvoYR5XrxgPcM+g=
Subject key identifier: 0C:19:B3:9A:57:2C:F5:C2:C0:D3:88:42:54:36:68:EA:1E:BC:96:94
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019479EBD73E158C36124B37FD06DF49A2C3
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DBmzmlcs9cLA04hCVDZo6h68lpQ.roa
Signing time: Sat 18 Jan 2025 14:58:06 +0000
ROA not before: Sat 18 Jan 2025 14:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47741
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:eb:d7:3e:15:8c:36:12:4b:37:fd:06:df:49:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 18 14:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c19b39a572cf5c2c0d38842543668ea1ebc9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:af:00:1c:b7:ea:30:57:a1:df:cb:ab:cf:
e8:50:f2:c1:ce:d0:2b:47:37:06:b6:37:87:06:5d:
a0:83:cf:e3:76:c7:36:22:79:d7:0b:0d:d0:2c:fd:
52:31:8f:95:a7:c7:07:b3:4a:b0:aa:62:b0:14:81:
f9:2e:cb:97:00:86:a2:b6:1c:ca:28:73:b5:6b:ab:
e8:c9:e4:b0:e4:79:b9:3a:5d:e9:69:07:f4:ea:10:
a0:5c:92:f0:72:95:1f:f9:8e:90:be:68:a0:c7:3b:
95:de:66:29:f2:8a:e8:6e:ca:8a:16:a7:f9:64:a7:
4b:18:2c:12:74:69:26:87:52:74:ba:7c:34:86:45:
9f:85:cc:a7:16:b1:36:a1:2a:80:93:1c:56:ac:e1:
b9:b1:ca:a8:8b:3f:5a:4b:47:ac:c6:32:1c:d3:47:
4f:3d:fc:65:41:3d:ef:db:3d:76:1d:d2:24:2a:cb:
c0:f8:a4:74:4d:1c:a6:f2:eb:78:c9:27:da:99:a6:
5a:d4:26:3e:6a:2f:17:93:64:f8:22:8e:3c:02:7b:
ba:b5:e7:44:76:43:68:30:b5:a6:e1:90:da:45:71:
7a:a5:9a:89:f4:3c:2e:ed:6b:01:74:83:0c:b1:31:
3d:99:71:72:0a:f0:35:16:29:72:22:b4:1d:39:a9:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:B3:9A:57:2C:F5:C2:C0:D3:88:42:54:36:68:EA:1E:BC:96:94
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/DBmzmlcs9cLA04hCVDZo6h68lpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9f:b5:9c:de:9f:aa:16:d8:f3:b1:e1:e6:57:e1:d6:9a:2a:
ad:58:cf:77:19:31:44:9d:bc:98:08:24:4d:7c:3a:60:1f:c4:
d8:2f:39:cc:68:a3:08:20:60:49:79:5b:47:fe:05:6e:47:7b:
05:62:6f:bd:a0:db:46:60:30:d7:e7:88:ce:1f:c2:52:20:bc:
6c:77:ae:46:46:55:81:1d:22:1b:7a:8f:9a:bd:af:a4:47:78:
89:69:f3:85:6c:2c:aa:35:18:48:fb:bd:99:4d:f2:4e:f9:90:
2b:a6:e2:35:23:63:8c:7a:a8:14:25:18:f2:34:c8:10:cf:46:
bf:8f:2b:29:66:1e:77:0d:1d:6c:f6:4c:8e:5c:b1:d5:d4:1b:
8f:ff:85:0f:a0:19:89:b4:ba:fb:bd:fa:2b:b1:26:46:33:89:
69:f4:bd:85:15:d9:82:0a:ac:ae:df:0f:89:1b:77:35:e7:93:
6f:77:d0:9f:ad:b6:61:5c:a3:24:b4:d6:62:37:3b:64:4b:bd:
f7:67:23:a4:9c:29:ea:d9:ca:11:24:90:03:de:8a:a7:d1:40:
b2:23:37:0a:ba:16:85:86:a0:c6:29:85:e3:e5:95:66:fc:18:
05:21:c2:5d:e3:ff:1b:0b:04:48:d1:fa:3a:7b:96:12:f9:27:
a2:1f:8e:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZR569c+FYw2Eks3/QbfSaLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjUwMTE4MTQ1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzE5YjM5YTU3MmNmNWMyYzBkMzg4NDI1NDM2NjhlYTFlYmM5Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0mvABy36jBXod/Lq8/oUPLBztAr
RzcGtjeHBl2gg8/jdsc2InnXCw3QLP1SMY+Vp8cHs0qwqmKwFIH5LsuXAIaithzK
KHO1a6voyeSw5Hm5Ol3paQf06hCgXJLwcpUf+Y6QvmigxzuV3mYp8orobsqKFqf5
ZKdLGCwSdGkmh1J0unw0hkWfhcynFrE2oSqAkxxWrOG5scqoiz9aS0esxjIc00dP
PfxlQT3v2z12HdIkKsvA+KR0TRym8ut4ySfamaZa1CY+ai8Xk2T4Io48Anu6tedE
dkNoMLWm4ZDaRXF6pZqJ9Dwu7WsBdIMMsTE9mXFyCvA1FilyIrQdOakC8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwZs5pXLPXCwNOIQlQ2aOoevJaUMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvREJtem1sY3M5Y0xBMDRoQ1ZEWm82aDY4bHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6LMA0G
CSqGSIb3DQEBCwUAA4IBAQCUn7Wc3p+qFtjzseHmV+HWmiqtWM93GTFEnbyYCCRN
fDpgH8TYLznMaKMIIGBJeVtH/gVuR3sFYm+9oNtGYDDX54jOH8JSILxsd65GRlWB
HSIbeo+ava+kR3iJafOFbCyqNRhI+72ZTfJO+ZArpuI1I2OMeqgUJRjyNMgQz0a/
jyspZh53DR1s9kyOXLHV1BuP/4UPoBmJtLr7vforsSZGM4lp9L2FFdmCCqyu3w+J
G3c155Nvd9CfrbZhXKMktNZiNztkS733ZyOknCnq2coRJJAD3oqn0UCyIzcKuhaF
hqDGKYXj5ZVm/BgFIcJd4/8bCwRI0fo6e5YS+SeiH445
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:28:58 2025 by rpki-client