Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: j4/u6WUIPidS5RV1hIu+/zxupTntMBArcjcmpIzHGkE=
Subject key identifier: 3E:65:03:D0:0F:F3:A2:6A:83:8B:BB:39:03:67:96:25:7F:18:78:60
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 294DCBE72D9077D99B3F0D6EE31276B10F801671
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199760.roa
Signing time: Thu 15 May 2025 14:12:32 +0000
ROA not before: Thu 15 May 2025 14:07:32 +0000
ROA not after: Thu 14 May 2026 14:12:32 +0000
asID: 199760
IP address blocks: 82.25.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 07:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4d:cb:e7:2d:90:77:d9:9b:3f:0d:6e:e3:12:76:b1:0f:80:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 14:07:32 2025 GMT
Not After : May 14 14:12:32 2026 GMT
Subject: CN=3E6503D00FF3A26A838BBB39036796257F187860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:1e:a0:2c:a0:4f:12:eb:8a:17:42:59:95:
d0:a6:54:58:6a:c5:46:19:7a:db:d3:06:b3:40:4b:
8b:f3:20:4b:97:41:47:dd:21:83:d7:b2:b8:45:b3:
cc:8e:74:25:7a:6d:23:ae:81:25:5f:1a:86:7a:dc:
13:f3:8e:09:33:2d:fb:91:db:cb:a2:9f:14:e9:b6:
c0:bd:58:61:a6:2b:6d:13:9f:00:69:f9:86:9a:1c:
7c:4a:df:ab:9b:c5:91:4c:4b:1c:7f:9a:1e:e0:d2:
ce:81:27:32:d3:fb:6d:4d:f1:06:cd:7d:c1:11:8d:
ce:47:4e:e5:39:c9:8b:60:c5:cf:7f:3e:cb:cd:3b:
44:2a:66:75:f0:e7:b8:e5:2d:5e:8e:71:5d:80:dd:
6d:61:b4:04:ca:e2:8c:6e:a0:ca:bb:ae:de:90:af:
89:bd:00:59:cd:74:0d:5c:40:82:38:66:76:46:1c:
a2:d1:30:e8:be:7f:28:76:2c:0b:c3:b4:81:ac:77:
d4:c8:06:ea:5d:ec:ca:c2:9a:72:5b:ff:9a:bb:12:
45:4a:00:5f:55:6d:58:12:73:78:35:1c:8d:69:68:
1e:2e:6a:48:68:27:ac:47:4d:39:ab:d3:b3:bc:c5:
c0:82:60:b5:05:ee:89:cd:0e:08:68:cd:ab:b7:4c:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:03:D0:0F:F3:A2:6A:83:8B:BB:39:03:67:96:25:7F:18:78:60
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.52.0/22
Signature Algorithm: sha256WithRSAEncryption
15:40:b3:b1:df:7a:3e:9b:5c:08:0b:36:30:a2:19:b6:ae:84:
1c:0c:29:a7:d7:b3:4b:69:91:8b:40:3c:e7:e6:b3:51:f3:d5:
49:23:f6:6e:89:ff:98:c3:bc:16:51:27:c2:e9:39:11:b5:78:
48:08:3f:4a:cc:d2:f4:7b:0a:89:22:6d:1e:28:6f:e1:0d:8b:
44:11:23:b0:60:e3:b8:68:54:87:2d:d8:0b:74:a1:cd:d7:51:
57:4c:c1:8c:4d:5a:46:a7:f0:9b:36:0b:00:27:96:77:7d:ed:
cc:0a:0f:cb:d0:6f:9b:cb:a5:78:ad:a9:3a:fc:96:48:56:73:
cf:c3:b3:fd:1f:92:f0:77:73:cb:8d:6f:af:cc:c4:8d:33:c4:
77:17:5e:5d:97:c3:49:1e:ea:a8:de:f7:dc:57:b0:d6:fc:ac:
0a:f2:f9:b6:6c:70:89:25:a6:0b:aa:27:eb:af:da:5b:5e:1b:
b4:58:34:13:54:12:c8:68:98:97:55:0b:7a:8d:49:d1:29:d9:
04:48:7a:da:6a:60:50:e2:1c:2f:fc:c7:32:47:1c:a4:f2:2b:
e1:12:a1:35:2d:b4:08:7a:82:52:21:07:e5:cf:14:a5:24:da:
df:8b:b8:cf:64:bf:bd:a6:80:8d:33:73:04:09:af:4a:5e:72:
b2:78:94:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKU3L5y2Qd9mbPw1u4xJ2sQ+AFnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA1MTUxNDA3MzJaFw0yNjA1MTQxNDEyMzJaMDMxMTAvBgNV
BAMTKDNFNjUwM0QwMEZGM0EyNkE4MzhCQkIzOTAzNjc5NjI1N0YxODc4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXh6gLKBPEuuKF0JZldCmVFhq
xUYZetvTBrNAS4vzIEuXQUfdIYPXsrhFs8yOdCV6bSOugSVfGoZ63BPzjgkzLfuR
28uinxTptsC9WGGmK20TnwBp+YaaHHxK36ubxZFMSxx/mh7g0s6BJzLT+21N8QbN
fcERjc5HTuU5yYtgxc9/PsvNO0QqZnXw57jlLV6OcV2A3W1htATK4oxuoMq7rt6Q
r4m9AFnNdA1cQII4ZnZGHKLRMOi+fyh2LAvDtIGsd9TIBupd7MrCmnJb/5q7EkVK
AF9VbVgSc3g1HI1paB4uakhoJ6xHTTmr07O8xcCCYLUF7onNDghozau3TBPdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPmUD0A/zomqDi7s5A2eWJX8YeGAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NzYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUhk0
MA0GCSqGSIb3DQEBCwUAA4IBAQAVQLOx33o+m1wICzYwohm2roQcDCmn17NLaZGL
QDzn5rNR89VJI/Zuif+Yw7wWUSfC6TkRtXhICD9KzNL0ewqJIm0eKG/hDYtEESOw
YOO4aFSHLdgLdKHN11FXTMGMTVpGp/CbNgsAJ5Z3fe3MCg/L0G+by6V4rak6/JZI
VnPPw7P9H5Lwd3PLjW+vzMSNM8R3F15dl8NJHuqo3vfcV7DW/KwK8vm2bHCJJaYL
qifrr9pbXhu0WDQTVBLIaJiXVQt6jUnRKdkESHraamBQ4hwv/McyRxyk8ivhEqE1
LbQIeoJSIQflzxSlJNrfi7jPZL+9poCNM3MECa9KXnKyeJR0
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:11 2025 by rpki-client