Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/FVFNJB0SmYKKpElJC6rhzwBQ2z8.roa
File: FVFNJB0SmYKKpElJC6rhzwBQ2z8.roa (raw, json)
Hash identifier: jClAsO0mrUAeFwnNgJfGgr72WheHQhbkonV800NIoh0=
Subject key identifier: 15:51:4D:24:1D:12:99:82:8A:A4:49:49:0B:AA:E1:CF:00:50:DB:3F
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 0196CCAF6B8AE495871D40A7411409308AE0
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/FVFNJB0SmYKKpElJC6rhzwBQ2z8.roa
Signing time: Wed 14 May 2025 02:46:10 +0000
ROA not before: Wed 14 May 2025 02:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210618
IP address blocks: 194.9.180.0/24 maxlen: 24
194.9.180.240/28 maxlen: 28
Validation: Failed, certificate revoked on Wed 14 May 2025 04:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:af:6b:8a:e4:95:87:1d:40:a7:41:14:09:30:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: May 14 02:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15514d241d1299828aa449490baae1cf0050db3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:7c:e8:c5:2b:ec:43:ae:11:55:58:74:20:
e1:24:eb:bf:1c:05:d8:33:8c:c7:73:f0:f4:bc:c9:
82:65:51:53:6e:d2:93:b8:cd:a8:dd:5f:67:ba:dc:
79:58:6a:af:90:0e:ed:a7:8f:0b:d0:04:bb:e5:54:
21:50:39:38:0a:b6:6c:b8:e6:82:38:ed:df:a6:9d:
56:cb:31:28:2b:07:d3:bf:aa:8e:f2:3c:38:66:d3:
19:85:c2:86:ba:7e:36:e7:d0:19:d1:39:7b:ef:26:
5d:18:f2:e6:6d:22:f2:9d:1f:5f:8d:ce:13:f3:db:
cc:da:7a:75:b3:e2:4a:da:71:a8:60:88:52:0a:4b:
de:61:2d:fe:d6:31:6d:1d:bb:e4:31:21:06:5a:15:
09:9f:60:c2:46:3b:01:e4:33:0c:12:c7:cb:22:32:
60:e1:6d:42:90:99:f0:81:1b:7e:27:6d:61:d7:b5:
bb:6c:31:2f:cf:25:df:39:1c:0a:00:04:f5:82:93:
a9:93:8d:b2:29:41:d3:b1:49:df:30:18:f2:c9:20:
25:d0:c2:82:05:86:90:fb:46:be:c1:4c:e5:69:3a:
0d:42:7b:0e:e8:c4:02:2c:e3:0d:0c:bd:23:2b:a9:
90:69:98:81:f0:6f:cb:2a:46:8f:47:7f:d0:50:57:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:4D:24:1D:12:99:82:8A:A4:49:49:0B:AA:E1:CF:00:50:DB:3F
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/FVFNJB0SmYKKpElJC6rhzwBQ2z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.180.0/24
Signature Algorithm: sha256WithRSAEncryption
08:db:03:1e:5c:01:b9:92:88:c0:01:18:16:1c:c6:04:80:b7:
ce:6b:23:15:3e:64:12:cb:d0:2b:52:b8:52:36:3f:a0:cb:5e:
9b:a6:80:a2:2a:97:cc:1c:9c:52:96:9a:5a:9b:8f:32:43:73:
07:c7:23:8c:39:89:3f:43:da:76:34:37:16:c4:54:9f:5e:bb:
52:1c:3e:ae:51:9d:79:4a:00:41:40:19:04:63:8a:57:26:d7:
b0:4c:21:57:ab:67:e2:b0:79:90:d4:18:49:b1:1e:d7:fa:24:
90:f1:96:b0:88:77:2f:7f:9a:60:03:b4:b2:04:df:be:4c:21:
41:49:cc:8f:ea:97:13:7f:dc:81:a3:d5:87:40:80:46:2f:d1:
f9:f2:8d:4c:e8:9f:8f:14:d7:b8:cb:d0:f2:db:aa:17:2f:94:
13:28:5e:54:13:19:08:00:cb:f5:dc:ea:66:1e:36:6b:cf:6e:
8b:36:40:2c:cf:07:ca:1a:95:49:93:ae:05:f2:cd:a3:20:0a:
8c:f0:7b:73:7c:02:73:20:90:ba:4e:b2:e9:a3:f8:05:31:b6:
f9:62:72:55:89:63:87:7c:16:c8:b2:f2:8c:1d:6d:49:44:8d:
6f:16:82:04:0f:b3:d2:68:12:10:ae:ed:50:d3:34:b6:cb:3a:
4b:9c:43:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbMr2uK5JWHHUCnQRQJMIrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5
MjExYzgwHhcNMjUwNTE0MDI0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUxNGQyNDFkMTI5OTgyOGFhNDQ5NDkwYmFhZTFjZjAwNTBkYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsh86MUr7EOuEVVYdCDhJOu/HAXY
M4zHc/D0vMmCZVFTbtKTuM2o3V9nutx5WGqvkA7tp48L0AS75VQhUDk4CrZsuOaC
OO3fpp1WyzEoKwfTv6qO8jw4ZtMZhcKGun4259AZ0Tl77yZdGPLmbSLynR9fjc4T
89vM2np1s+JK2nGoYIhSCkveYS3+1jFtHbvkMSEGWhUJn2DCRjsB5DMMEsfLIjJg
4W1CkJnwgRt+J21h17W7bDEvzyXfORwKAAT1gpOpk42yKUHTsUnfMBjyySAl0MKC
BYaQ+0a+wUzlaToNQnsO6MQCLOMNDL0jK6mQaZiB8G/LKkaPR3/QUFfdHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVRTSQdEpmCiqRJSQuq4c8AUNs/MB8GA1UdIwQY
MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt
NzA1MjJkODE0ZTBjLzEvRlZGTkpCMFNtWUtLcEVsSkM2cmh6d0JRMno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj
LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgm0MA0G
CSqGSIb3DQEBCwUAA4IBAQAI2wMeXAG5kojAARgWHMYEgLfOayMVPmQSy9ArUrhS
Nj+gy16bpoCiKpfMHJxSlppam48yQ3MHxyOMOYk/Q9p2NDcWxFSfXrtSHD6uUZ15
SgBBQBkEY4pXJtewTCFXq2fisHmQ1BhJsR7X+iSQ8ZawiHcvf5pgA7SyBN++TCFB
ScyP6pcTf9yBo9WHQIBGL9H58o1M6J+PFNe4y9Dy26oXL5QTKF5UExkIAMv13Opm
HjZrz26LNkAszwfKGpVJk64F8s2jIAqM8HtzfAJzIJC6TrLpo/gFMbb5YnJViWOH
fBbIsvKMHW1JRI1vFoIED7PSaBIQru1Q0zS2yzpLnEN8
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:23 2025 by rpki-client