Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0mvhWlfsZBtApvQzvtcuBlZvM_0.roa
File: 0mvhWlfsZBtApvQzvtcuBlZvM_0.roa (raw, json)
Hash identifier: rtqyXJ2c6I8/D9vaXvQ/JtwMStEVxhIbMihURKTncF4=
Subject key identifier: D2:6B:E1:5A:57:EC:64:1B:40:A6:F4:33:BE:D7:2E:06:56:6F:33:FD
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01965D7A2EEEF748CB1A21DF67DADF6326AB
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0mvhWlfsZBtApvQzvtcuBlZvM_0.roa
Signing time: Tue 22 Apr 2025 12:30:10 +0000
ROA not before: Tue 22 Apr 2025 12:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44213
IP address blocks: 213.137.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 07:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:7a:2e:ee:f7:48:cb:1a:21:df:67:da:df:63:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 22 12:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26be15a57ec641b40a6f433bed72e06566f33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:91:c2:21:77:d1:a6:a2:64:53:e5:f9:21:
98:ab:38:76:a0:30:f0:0b:74:64:88:47:b1:6f:eb:
f2:f4:1a:5c:4a:c2:c0:19:ac:4e:17:9f:26:32:f3:
7f:68:b4:dd:72:72:78:a4:69:20:21:a7:4b:fe:ae:
c3:ae:36:2b:43:cf:76:63:42:b4:98:f4:c4:98:cd:
c4:de:54:f2:26:5b:c9:a0:e6:70:02:c3:42:b1:d8:
1b:d5:55:9f:1f:d2:d5:c8:1f:fb:ef:a7:a4:f1:3d:
86:2e:55:59:ca:e9:e3:04:5c:fd:e2:03:fd:7c:35:
75:0c:fb:71:ab:bd:7f:20:7b:81:a9:7f:81:20:f5:
49:e7:dd:14:72:cb:0a:c4:62:29:3d:31:89:a2:40:
87:cd:3c:5c:cf:ef:72:8b:21:1f:23:ff:5d:26:90:
90:06:34:9b:b1:ff:2e:20:36:d9:b1:c4:84:2c:db:
ce:a8:68:d2:70:7d:2a:57:31:ba:fe:fb:97:e2:df:
0d:a6:5f:2c:fc:11:b8:70:43:54:8a:84:cf:a6:90:
20:65:cc:86:0d:e5:6d:a9:e3:07:7b:b7:b6:82:95:
2b:9d:b0:11:2e:30:e8:65:61:dd:3e:ee:9b:06:b8:
0b:82:a0:5e:15:b9:44:fd:3a:ca:c7:08:df:d2:25:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:E1:5A:57:EC:64:1B:40:A6:F4:33:BE:D7:2E:06:56:6F:33:FD
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0mvhWlfsZBtApvQzvtcuBlZvM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8b:c0:6c:8a:de:e5:f8:74:0e:cf:a1:00:9d:e5:e6:38:5e:
0d:75:e7:10:ff:2e:dd:bd:02:50:d4:2a:18:f4:45:98:e5:3e:
34:2d:ab:24:2d:8d:7a:df:d2:4d:28:69:a9:1f:7e:f7:cb:e2:
ec:05:0f:da:b5:24:0d:68:23:e8:57:10:5e:29:2a:d4:d4:d1:
2f:e1:26:4a:55:b9:be:89:e3:c6:b1:78:2b:3b:ba:26:5c:d3:
5b:5f:34:82:b6:a9:c9:d4:a1:26:2b:da:8a:a6:40:3a:49:c4:
92:b5:90:c8:f1:9b:45:a4:55:f5:f4:71:5e:b7:26:42:c0:da:
d0:36:a0:46:19:30:cd:ab:a6:3b:42:a0:1f:38:a7:45:10:35:
99:7b:18:98:00:4e:7c:b8:19:db:a1:a6:af:71:83:fc:2b:91:
c8:3e:7a:09:e4:a7:72:c5:7c:c9:ef:c8:d8:da:c5:8f:13:63:
82:4f:ea:65:f8:2d:3e:92:4d:fa:a9:42:8f:32:16:22:eb:36:
88:35:62:9d:e3:2c:88:da:bb:79:a6:7f:9a:33:e0:44:f5:e1:
b2:6a:a1:ef:a5:f3:5f:39:6c:1e:00:61:9c:63:46:df:f5:3c:
aa:d5:a6:b5:bb:8e:1f:ef:92:20:8b:47:32:7c:42:dd:30:68:
7c:c8:25:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZdei7u90jLGiHfZ9rfYyarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwNDIyMTIzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjZiZTE1YTU3ZWM2NDFiNDBhNmY0MzNiZWQ3MmUwNjU2NmYzM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOKRwiF30aaiZFPl+SGYqzh2oDDw
C3RkiEexb+vy9BpcSsLAGaxOF58mMvN/aLTdcnJ4pGkgIadL/q7DrjYrQ892Y0K0
mPTEmM3E3lTyJlvJoOZwAsNCsdgb1VWfH9LVyB/776ek8T2GLlVZyunjBFz94gP9
fDV1DPtxq71/IHuBqX+BIPVJ590UcssKxGIpPTGJokCHzTxcz+9yiyEfI/9dJpCQ
BjSbsf8uIDbZscSELNvOqGjScH0qVzG6/vuX4t8Npl8s/BG4cENUioTPppAgZcyG
DeVtqeMHe7e2gpUrnbARLjDoZWHdPu6bBrgLgqBeFblE/TrKxwjf0iVILQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJr4VpX7GQbQKb0M77XLgZWbzP9MB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvMG12aFdsZnNaQnRBcHZRenZ0Y3VCbFp2TV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlcMA0G
CSqGSIb3DQEBCwUAA4IBAQCYi8Bsit7l+HQOz6EAneXmOF4NdecQ/y7dvQJQ1CoY
9EWY5T40LaskLY1639JNKGmpH373y+LsBQ/atSQNaCPoVxBeKSrU1NEv4SZKVbm+
iePGsXgrO7omXNNbXzSCtqnJ1KEmK9qKpkA6ScSStZDI8ZtFpFX19HFetyZCwNrQ
NqBGGTDNq6Y7QqAfOKdFEDWZexiYAE58uBnboaavcYP8K5HIPnoJ5KdyxXzJ78jY
2sWPE2OCT+pl+C0+kk36qUKPMhYi6zaINWKd4yyI2rt5pn+aM+BE9eGyaqHvpfNf
OWweAGGcY0bf9Tyq1aa1u44f75Igi0cyfELdMGh8yCWt
-----END CERTIFICATE-----
Generated at Tue May 6 20:21:25 2025 by rpki-client