Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/rKl3FQwSAM7Cxz9glUk00R04W8U.roa
File: rKl3FQwSAM7Cxz9glUk00R04W8U.roa (raw, json)
Hash identifier: cvHo2jjTrfqLkPD1h/NgONLlyqkwJmRSliDqXeEzRPQ=
Subject key identifier: AC:A9:77:15:0C:12:00:CE:C2:C7:3F:60:95:49:34:D1:1D:38:5B:C5
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0196FBC419646879971FFEA94E036167958B
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/rKl3FQwSAM7Cxz9glUk00R04W8U.roa
Signing time: Fri 23 May 2025 06:10:54 +0000
ROA not before: Fri 23 May 2025 06:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 93.88.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 14:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:c4:19:64:68:79:97:1f:fe:a9:4e:03:61:67:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 23 06:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca977150c1200cec2c73f60954934d11d385bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:c1:68:c5:6c:5e:f4:4b:e0:79:c5:2e:1d:
7d:2b:ae:1b:57:8b:e9:90:d9:41:af:9e:cb:59:47:
0a:12:80:dc:0e:0f:06:31:e7:de:57:88:b9:bc:30:
8e:46:f0:14:93:69:c6:1f:d6:78:b5:e4:66:b3:61:
b7:06:fc:9b:62:29:07:f9:70:26:18:37:6f:11:db:
e7:ec:8f:57:36:23:ac:77:ef:94:8f:64:f4:cf:d1:
c3:d8:11:50:52:0d:c4:45:bf:9f:28:04:97:de:72:
4d:91:2c:d8:81:0c:d1:58:07:ae:ef:f9:da:e4:7f:
9d:81:03:21:9a:cd:bd:01:d5:ff:c9:5b:b3:44:3f:
76:75:31:75:a8:d7:55:d4:7e:71:a7:c8:b6:0c:a8:
23:57:41:c7:23:91:a1:6c:cc:c9:23:9d:7c:79:50:
59:b0:b6:59:8a:ad:c8:a6:84:13:b6:25:19:8a:50:
2e:b3:43:55:9e:25:92:a2:bf:ab:f2:9b:70:66:8d:
f0:77:46:c1:16:43:6b:c5:5e:30:06:9c:fc:22:b2:
32:fb:1f:9d:03:2d:7c:b2:f6:22:c7:7e:92:86:ba:
95:72:54:8f:34:f3:64:78:09:2d:c5:7b:6f:b8:94:
58:33:34:0a:e3:99:fc:49:01:3c:39:88:0f:25:36:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:77:15:0C:12:00:CE:C2:C7:3F:60:95:49:34:D1:1D:38:5B:C5
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/rKl3FQwSAM7Cxz9glUk00R04W8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.159.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3d:31:6b:c2:f6:74:43:60:1c:4b:8e:bc:03:04:60:46:93:
b2:1d:63:8d:d0:b9:57:b5:24:eb:c8:1d:e9:f9:c3:b9:d9:3d:
62:aa:7d:d8:bb:f2:55:9a:c3:63:d4:04:6b:63:57:36:6c:5e:
11:5a:43:9f:4a:32:91:ab:27:c8:6b:fd:c5:8f:40:b8:c4:ae:
31:54:3f:68:b5:93:ae:57:7a:fa:c8:f9:7a:e7:50:de:84:ad:
b1:3e:48:2f:e5:55:a1:20:7b:97:b5:1d:41:ef:a4:6e:a2:97:
73:e7:05:02:cc:52:b3:71:b7:5a:d3:06:70:68:70:d6:18:2a:
16:60:a5:b3:1e:c1:6d:3c:01:03:76:c8:77:4b:01:d7:0e:29:
4c:34:8a:57:f4:0f:57:85:8b:88:87:f7:13:c2:67:5c:4a:ec:
3c:d1:09:07:26:a3:1a:1c:97:76:f4:32:39:b2:51:e4:f0:a3:
a7:6a:6a:a0:04:da:1d:e7:2b:bc:36:e0:6a:b1:bf:a3:2d:f1:
b8:1f:c2:a4:a9:98:09:96:af:9f:ca:15:40:f8:69:1c:35:6d:
a9:50:40:98:5c:52:9b:60:b3:6b:89:57:92:6d:f0:86:7f:dd:
8c:0f:bd:01:ee:ca:ff:a3:10:7f:38:ee:7f:be:57:25:ae:0f:
13:28:d2:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb7xBlkaHmXH/6pTgNhZ5WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwNTIzMDYxMDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2E5NzcxNTBjMTIwMGNlYzJjNzNmNjA5NTQ5MzRkMTFkMzg1YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEjBaMVsXvRL4HnFLh19K64bV4vp
kNlBr57LWUcKEoDcDg8GMefeV4i5vDCORvAUk2nGH9Z4teRms2G3BvybYikH+XAm
GDdvEdvn7I9XNiOsd++Uj2T0z9HD2BFQUg3ERb+fKASX3nJNkSzYgQzRWAeu7/na
5H+dgQMhms29AdX/yVuzRD92dTF1qNdV1H5xp8i2DKgjV0HHI5GhbMzJI518eVBZ
sLZZiq3IpoQTtiUZilAus0NVniWSor+r8ptwZo3wd0bBFkNrxV4wBpz8IrIy+x+d
Ay18svYix36ShrqVclSPNPNkeAktxXtvuJRYMzQK45n8SQE8OYgPJTYbVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKypdxUMEgDOwsc/YJVJNNEdOFvFMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvcktsM0ZRd1NBTTdDeHo5Z2xVazAwUjA0VzhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVifMA0G
CSqGSIb3DQEBCwUAA4IBAQBiPTFrwvZ0Q2AcS468AwRgRpOyHWON0LlXtSTryB3p
+cO52T1iqn3Yu/JVmsNj1ARrY1c2bF4RWkOfSjKRqyfIa/3Fj0C4xK4xVD9otZOu
V3r6yPl651DehK2xPkgv5VWhIHuXtR1B76Ruopdz5wUCzFKzcbda0wZwaHDWGCoW
YKWzHsFtPAEDdsh3SwHXDilMNIpX9A9XhYuIh/cTwmdcSuw80QkHJqMaHJd29DI5
slHk8KOnamqgBNod5yu8NuBqsb+jLfG4H8KkqZgJlq+fyhVA+GkcNW2pUECYXFKb
YLNriVeSbfCGf92MD70B7sr/oxB/OO5/vlclrg8TKNKl
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:24 2025 by rpki-client