Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/gDNWaXXTJJb6Q3EVK4zZOCZIAeg.roa
File: gDNWaXXTJJb6Q3EVK4zZOCZIAeg.roa (raw, json)
Hash identifier: 4nlPGo5hvU63bMJdU3lrvERSl1WeNBh9uInq+nHZNxk=
Subject key identifier: 80:33:56:69:75:D3:24:96:FA:43:71:15:2B:8C:D9:38:26:48:01:E8
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019667C464465FBD6502857D46F9630F429A
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/gDNWaXXTJJb6Q3EVK4zZOCZIAeg.roa
Signing time: Thu 24 Apr 2025 12:27:26 +0000
ROA not before: Thu 24 Apr 2025 12:27:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50821
IP address blocks: 193.46.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 13:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:c4:64:46:5f:bd:65:02:85:7d:46:f9:63:0f:42:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Apr 24 12:27:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8033566975d32496fa4371152b8cd938264801e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:b2:aa:be:31:6a:20:5c:5b:15:14:b5:ee:
83:3f:df:a6:b7:55:46:0e:d2:12:2e:73:3a:fc:1a:
f3:58:4f:b9:78:87:53:8f:b9:90:6f:a8:af:33:9b:
0a:a3:fc:17:de:5c:cb:6e:d0:03:d8:e6:7d:38:07:
97:9d:6d:50:67:ab:c2:e9:b7:91:b2:89:9d:83:b5:
e3:d3:e0:3f:cc:66:e4:2b:c2:60:ed:d1:46:ac:aa:
15:16:5b:0a:3e:0e:a2:53:18:50:33:2d:38:e0:1f:
eb:86:d1:51:75:3f:34:f9:d0:a5:a8:bb:9e:17:dd:
ea:d1:2b:52:a6:c9:80:6e:db:2e:75:05:c5:eb:9a:
df:35:b1:cc:3c:5b:6f:99:d3:52:ce:9f:b1:d3:66:
33:12:8e:9f:7d:d9:10:e0:8c:24:71:ac:15:85:fa:
9d:d7:ab:b3:a2:f5:57:4e:dc:d4:43:98:ad:cb:c0:
66:f1:1e:57:63:8d:65:82:03:af:3c:13:82:66:a2:
b0:3b:11:b7:f1:4f:38:fe:5e:61:36:70:69:3a:fc:
6e:92:66:54:9e:0b:a4:49:7e:80:b9:73:54:9a:19:
88:9d:40:03:00:89:99:db:21:66:2b:50:49:7e:32:
07:55:e0:ba:91:67:a3:74:6e:c1:29:0d:b3:0c:4b:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:56:69:75:D3:24:96:FA:43:71:15:2B:8C:D9:38:26:48:01:E8
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/gDNWaXXTJJb6Q3EVK4zZOCZIAeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c7:f9:41:69:58:53:dc:1a:53:20:82:f6:32:a8:37:7a:c5:
c2:af:b0:5a:27:0a:19:c7:4b:7a:d1:ce:ba:c5:89:b0:30:ce:
ca:87:f5:76:79:69:70:29:5d:9d:ef:31:e7:7d:71:e6:de:3d:
e6:e6:88:f1:5c:7b:74:43:4e:8a:2d:21:b9:d9:6e:9e:10:d9:
48:86:a1:3e:ba:c0:97:32:92:33:89:1e:c2:f1:e5:36:3a:2a:
3a:25:90:56:9d:a9:f7:b6:de:2c:68:96:ef:48:61:2b:8e:be:
8a:46:ee:2d:39:54:4c:ed:cb:c6:9a:0d:40:a2:d9:4a:95:9d:
42:2e:cf:08:22:ae:bd:ca:70:23:59:a0:d0:f3:1a:ed:dd:5d:
01:89:38:76:59:dc:58:6e:f3:d3:fb:0b:5c:fa:2c:19:c4:26:
00:89:4f:2f:3d:f6:f9:e8:cd:58:dc:b3:3f:32:dd:5f:84:26:
cd:9c:11:c4:df:1d:da:41:46:48:6f:9c:36:34:f0:2a:42:0e:
ec:56:3b:74:9c:dd:d8:0b:b9:cc:24:93:d5:39:a5:ad:99:37:
e4:dc:16:2c:cb:b5:48:47:f0:bb:ae:2a:26:a9:62:d7:3f:0e:
cd:cf:27:c6:de:0f:5d:db:05:ba:b1:74:04:08:57:ea:2e:e0:
f1:ec:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:56 2025 by rpki-client