Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6MgaT-qzKrF1rf-D_8aIhEyjo7g.roa
File: 6MgaT-qzKrF1rf-D_8aIhEyjo7g.roa (raw, json)
Hash identifier: tkTI0rhoZ8GPpYXaVbedDHvjzo/Gfnrw9okyHdHmjvs=
Subject key identifier: E8:C8:1A:4F:EA:B3:2A:B1:75:AD:FF:83:FF:C6:88:84:4C:A3:A3:B8
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01962927DAC9A796CDE126512335BB82E707
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6MgaT-qzKrF1rf-D_8aIhEyjo7g.roa
Signing time: Sat 12 Apr 2025 08:39:59 +0000
ROA not before: Sat 12 Apr 2025 08:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 207.244.197.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 00:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:27:da:c9:a7:96:cd:e1:26:51:23:35:bb:82:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 12 08:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c81a4feab32ab175adff83ffc688844ca3a3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:2f:e8:72:ab:86:e6:13:a3:62:52:54:a8:
ed:64:8e:d5:1f:7d:35:61:27:7e:81:b7:6d:7c:97:
8b:b3:37:48:13:a4:a1:a2:09:b9:e7:f7:f1:e1:33:
b4:02:05:39:93:e9:8a:6e:72:20:5e:4b:91:f0:d5:
14:39:16:5a:2d:ea:58:f6:4d:d1:0b:8f:04:2b:ed:
66:26:df:e6:8d:de:86:67:9e:0b:da:fb:0e:07:ef:
77:06:25:3e:c2:40:ce:f4:d6:44:d0:bc:9e:2f:78:
71:af:ec:8e:29:4b:44:bb:f1:75:62:b6:04:12:d7:
6e:61:b4:7b:7d:15:31:bf:1e:92:28:a0:14:6b:d3:
f7:e0:8d:e8:7f:89:e9:cc:17:1e:d9:7e:0d:4f:41:
66:1c:6c:f7:83:21:94:76:fd:8e:e6:e8:6b:26:96:
4f:f9:b7:0a:a5:58:e3:19:e9:2f:27:ef:fd:ce:cc:
5d:8c:0e:76:ae:1e:21:e0:db:1d:16:82:0a:eb:f2:
1c:b0:5d:90:91:52:55:da:a5:15:12:2b:43:e2:66:
67:cf:f8:ba:dc:71:10:74:67:0a:0c:55:12:6b:12:
40:f9:ee:8a:b1:24:12:e3:84:ed:97:71:c3:2e:b1:
f3:e3:72:b4:73:3a:13:8b:c7:27:76:56:46:a1:ff:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:1A:4F:EA:B3:2A:B1:75:AD:FF:83:FF:C6:88:84:4C:A3:A3:B8
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6MgaT-qzKrF1rf-D_8aIhEyjo7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.197.0-207.244.198.255
Signature Algorithm: sha256WithRSAEncryption
a0:9c:61:4b:ba:c3:3f:e2:51:4f:d9:70:f5:bb:82:d2:c5:21:
32:95:94:5f:dd:ab:5c:72:c5:00:b8:d1:a4:e0:1d:bd:f7:63:
b1:8a:51:ee:fb:14:c2:55:6b:54:9d:5b:3b:47:d4:7c:10:e0:
22:24:37:cb:10:0e:ec:b5:b0:dc:fd:60:a7:5c:48:e3:76:1c:
a4:52:d8:de:8a:70:b3:2d:c5:fa:e0:dc:18:53:9d:db:18:98:
eb:6c:b2:26:71:9f:20:8d:d8:bc:c1:69:fd:af:f6:97:05:50:
2f:08:e7:8c:17:ad:5d:96:25:66:cf:e8:28:97:7d:f7:4e:ec:
a2:a5:34:f4:f8:97:77:a8:aa:c4:2c:74:02:fd:6c:30:53:05:
f4:83:ba:26:49:88:cd:71:26:cf:ff:73:09:6d:93:16:86:1c:
ba:3a:57:3d:07:97:56:99:a7:a0:8f:ce:62:0a:8d:53:12:2d:
ed:45:38:28:68:e3:46:72:ce:e1:3c:1b:a0:b9:c0:8e:9f:2c:
d1:9c:31:e2:d9:12:b4:a1:7f:81:c1:38:6b:71:bc:47:af:ff:
2f:96:79:7e:4b:e6:59:18:f7:3b:3c:0c:c6:4b:22:78:f3:1c:
5a:06:ab:46:16:e9:ed:51:41:bf:a4:f0:48:9c:c7:3e:61:be:
29:46:22:21
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZYpJ9rJp5bN4SZRIzW7gucHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwNDEyMDgzOTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGM4MWE0ZmVhYjMyYWIxNzVhZGZmODNmZmM2ODg4NDRjYTNhM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0cv6HKrhuYTo2JSVKjtZI7VH301
YSd+gbdtfJeLszdIE6Shogm55/fx4TO0AgU5k+mKbnIgXkuR8NUUORZaLepY9k3R
C48EK+1mJt/mjd6GZ54L2vsOB+93BiU+wkDO9NZE0LyeL3hxr+yOKUtEu/F1YrYE
EtduYbR7fRUxvx6SKKAUa9P34I3of4npzBce2X4NT0FmHGz3gyGUdv2O5uhrJpZP
+bcKpVjjGekvJ+/9zsxdjA52rh4h4NsdFoIK6/IcsF2QkVJV2qUVEitD4mZnz/i6
3HEQdGcKDFUSaxJA+e6KsSQS44Ttl3HDLrHz43K0czoTi8cndlZGof/G/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOjIGk/qsyqxda3/g//GiIRMo6O4MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvNk1nYVQtcXpLckYxcmYtRF84YUloRXlqbzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADP9MUD
BADP9MYwDQYJKoZIhvcNAQELBQADggEBAKCcYUu6wz/iUU/ZcPW7gtLFITKVlF/d
q1xyxQC40aTgHb33Y7GKUe77FMJVa1SdWztH1HwQ4CIkN8sQDuy1sNz9YKdcSON2
HKRS2N6KcLMtxfrg3BhTndsYmOtssiZxnyCN2LzBaf2v9pcFUC8I54wXrV2WJWbP
6CiXffdO7KKlNPT4l3eoqsQsdAL9bDBTBfSDuiZJiM1xJs//cwltkxaGHLo6Vz0H
l1aZp6CPzmIKjVMSLe1FOCho40ZyzuE8G6C5wI6fLNGcMeLZErShf4HBOGtxvEev
/y+WeX5L5lkY9zs8DMZLInjzHFoGq0YW6e1RQb+k8Eicxz5hvilGIiE=
-----END CERTIFICATE-----
Generated at Sun May 11 01:20:38 2025 by rpki-client