Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5ObR5x2Amkv5qm39OUWvU7HsD8.roa
File: Z5ObR5x2Amkv5qm39OUWvU7HsD8.roa (raw, json)
Hash identifier: cjXxeGD1afHbXR2W7Yb0WbbnQmhvkq2+1nDZbw1VucE=
Subject key identifier: 67:93:9B:47:9C:76:02:69:2F:E6:A9:B7:F4:E5:16:BD:4E:C7:B0:3F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01966198E016698412165B7F1C1EBB2482F1
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5ObR5x2Amkv5qm39OUWvU7HsD8.roa
Signing time: Wed 23 Apr 2025 07:42:10 +0000
ROA not before: Wed 23 Apr 2025 07:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 04:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:98:e0:16:69:84:12:16:5b:7f:1c:1e:bb:24:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 23 07:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67939b479c7602692fe6a9b7f4e516bd4ec7b03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:2b:28:66:f8:fc:50:58:4d:af:86:2c:3b:
39:3c:b0:e9:46:3c:5a:9c:d4:05:ab:71:78:0b:06:
c9:d7:42:3d:51:63:12:ec:96:29:cd:3c:c3:a6:ef:
13:8f:3f:0b:03:09:77:c2:4b:66:78:4c:90:b6:2a:
e0:5a:29:5e:e7:db:d3:19:36:b5:94:9e:aa:4a:8d:
8d:9e:e2:2c:23:ac:50:f3:3e:ad:3b:77:f6:63:ca:
2e:86:34:9f:8d:4c:e9:48:8a:ef:5d:fb:56:72:cf:
1a:00:66:04:f6:f2:42:92:87:84:e4:cc:11:61:69:
9b:d5:9e:8b:19:f4:c2:9e:52:a8:bc:5a:3a:64:a8:
11:cd:50:1c:d6:1d:25:92:98:03:6e:45:99:0a:65:
e7:d5:d0:64:79:25:0e:87:e9:1a:84:fb:24:26:80:
19:e6:89:60:f1:86:5b:03:a8:fe:1a:29:23:2d:89:
36:c0:9d:62:c7:9e:2e:95:89:f2:02:f7:9c:22:0b:
09:70:b4:e8:55:83:d1:83:0b:35:33:b2:40:54:fc:
e4:44:33:94:11:2f:fb:0e:73:ca:1f:d8:a2:0b:94:
76:a2:05:19:fa:8f:b4:01:a9:66:97:71:02:07:aa:
c5:f2:c8:24:fb:24:2f:df:45:f6:9e:fc:53:72:c0:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:9B:47:9C:76:02:69:2F:E6:A9:B7:F4:E5:16:BD:4E:C7:B0:3F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5ObR5x2Amkv5qm39OUWvU7HsD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0-141.226.246.255
Signature Algorithm: sha256WithRSAEncryption
3b:58:89:05:11:ef:a0:51:1e:0e:bc:ce:d8:2d:e8:f6:d3:24:
d9:b9:ad:d2:14:71:af:58:e5:6f:a0:05:95:df:97:15:ab:81:
78:cd:1a:94:0b:04:09:26:aa:1c:16:8a:8d:8a:32:24:43:c6:
62:07:e1:ba:7e:b1:1c:f1:11:ea:c3:7c:d9:89:3f:18:60:39:
18:92:2e:c1:5a:cb:eb:51:f8:57:f1:99:a0:5d:91:bb:45:62:
5b:a2:61:a2:08:dd:44:d2:75:24:2e:96:5f:74:f2:ab:f7:15:
69:3d:51:7c:41:ce:2f:27:77:a6:10:a7:2d:01:31:fe:34:97:
ed:ea:68:18:af:f8:5e:d2:c2:9e:0f:eb:04:50:9d:04:b8:8d:
2b:26:e0:d5:18:11:ec:af:53:47:76:b5:08:fd:6b:06:c5:02:
08:d3:0a:10:3e:19:bf:3f:b2:91:70:de:9e:1d:06:e7:9e:25:
67:a2:4f:af:a0:e2:9e:5e:f5:45:e6:58:d6:6b:85:63:a2:2a:
30:6f:b5:95:e8:14:0c:53:23:9c:c2:57:b8:b1:67:1a:53:65:
a2:94:30:e4:16:0b:e1:c8:dd:01:71:28:42:f8:68:58:38:dd:
71:ce:24:bd:90:5a:88:fc:cb:02:83:6c:e8:ee:85:77:26:27:
25:e4:d1:59
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZZhmOAWaYQSFlt/HB67JILxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwNDIzMDc0MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzkzOWI0NzljNzYwMjY5MmZlNmE5YjdmNGU1MTZiZDRlYzdiMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rMrKGb4/FBYTa+GLDs5PLDpRjxa
nNQFq3F4CwbJ10I9UWMS7JYpzTzDpu8Tjz8LAwl3wktmeEyQtirgWile59vTGTa1
lJ6qSo2NnuIsI6xQ8z6tO3f2Y8ouhjSfjUzpSIrvXftWcs8aAGYE9vJCkoeE5MwR
YWmb1Z6LGfTCnlKovFo6ZKgRzVAc1h0lkpgDbkWZCmXn1dBkeSUOh+kahPskJoAZ
5olg8YZbA6j+GikjLYk2wJ1ix54ulYnyAvecIgsJcLToVYPRgws1M7JAVPzkRDOU
ES/7DnPKH9iiC5R2ogUZ+o+0Aalml3ECB6rF8sgk+yQv30X2nvxTcsCdKQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGeTm0ecdgJpL+apt/TlFr1Ox7A/MB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvWjVPYlI1eDJBbWt2NXFtMzlPVVd2VTdIc0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACN4vUD
BACN4vYwDQYJKoZIhvcNAQELBQADggEBADtYiQUR76BRHg68ztgt6PbTJNm5rdIU
ca9Y5W+gBZXflxWrgXjNGpQLBAkmqhwWio2KMiRDxmIH4bp+sRzxEerDfNmJPxhg
ORiSLsFay+tR+FfxmaBdkbtFYluiYaII3UTSdSQull908qv3FWk9UXxBzi8nd6YQ
py0BMf40l+3qaBiv+F7Swp4P6wRQnQS4jSsm4NUYEeyvU0d2tQj9awbFAgjTChA+
Gb8/spFw3p4dBueeJWeiT6+g4p5e9UXmWNZrhWOiKjBvtZXoFAxTI5zCV7ixZxpT
ZaKUMOQWC+HI3QFxKEL4aFg43XHOJL2QWoj8ywKDbOjuhXcmJyXk0Vk=
-----END CERTIFICATE-----
Generated at Tue May 6 10:50:40 2025 by rpki-client