Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6mOXH0tbOEhjOlxnh7Qvb4SBPfA.roa
File: 6mOXH0tbOEhjOlxnh7Qvb4SBPfA.roa (raw, json)
Hash identifier: c4Yt/PZwcsfBgby6pciZZUK/ydCpw8zjsGCnWX7OBVs=
Subject key identifier: EA:63:97:1F:4B:5B:38:48:63:3A:5C:67:87:B4:2F:6F:84:81:3D:F0
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019672D121C7459342681C6CC0FA96133DAC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6mOXH0tbOEhjOlxnh7Qvb4SBPfA.roa
Signing time: Sat 26 Apr 2025 15:57:10 +0000
ROA not before: Sat 26 Apr 2025 15:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.22.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 08:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d1:21:c7:45:93:42:68:1c:6c:c0:fa:96:13:3d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 26 15:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea63971f4b5b3848633a5c6787b42f6f84813df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:70:de:fd:e8:55:81:b9:31:4a:30:d8:a7:
95:5a:f3:e6:8e:45:18:a5:72:ae:91:c6:da:12:d3:
77:70:15:ac:77:49:2b:f3:f8:9d:02:39:f6:ab:19:
22:89:de:a5:34:5c:33:5b:d9:55:38:aa:ba:28:2f:
c1:a2:bb:31:a0:75:c6:19:02:22:df:7f:c9:c5:7d:
9a:74:65:36:20:4c:54:af:52:68:79:8a:91:e2:6d:
f7:c2:b9:2e:ad:4a:14:29:2d:1a:10:1b:da:77:b6:
ba:50:33:81:e0:14:fe:81:05:fd:92:79:8f:6b:9a:
64:7f:0d:34:b0:98:83:60:69:41:db:b9:12:31:f2:
5e:ad:12:54:42:0f:69:0b:04:9a:8f:1b:e3:34:43:
5d:2d:e3:78:68:f0:ea:a6:b2:63:8d:94:df:1e:45:
fe:9f:3f:6a:9f:24:be:3a:73:c4:ae:68:d8:d4:73:
8e:15:6f:92:97:45:f0:11:94:47:d4:5c:e1:9e:e9:
82:73:40:70:cf:73:79:42:86:44:b0:a6:2f:5e:5c:
63:25:7e:3b:63:e5:cb:f5:46:28:b0:15:87:90:8d:
5f:0b:d5:a7:2c:91:44:ab:c2:c8:93:53:e0:95:7d:
14:fa:f7:67:d1:5c:24:48:7e:5d:65:47:00:bf:4d:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:97:1F:4B:5B:38:48:63:3A:5C:67:87:B4:2F:6F:84:81:3D:F0
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6mOXH0tbOEhjOlxnh7Qvb4SBPfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c7:e5:dd:69:53:89:de:b9:75:8c:05:0d:c9:87:05:47:ee:
09:20:7f:f5:42:65:c5:c7:60:41:d4:14:8b:d0:6b:43:d6:a8:
2a:f2:e4:be:cc:97:74:73:a8:7c:23:e6:c7:01:40:e1:bb:41:
de:69:a2:2e:9c:fc:e0:17:0c:ce:1b:83:00:74:aa:2f:d4:d8:
54:47:1d:a2:e4:77:94:a7:c0:70:57:a7:fe:e6:43:02:c9:38:
37:e1:37:d1:4e:40:59:a1:50:ac:c7:c3:e5:27:9b:08:48:72:
d2:4e:9d:5b:75:bc:47:1f:e2:9c:e8:72:f5:5f:43:e0:7b:dc:
dc:92:4d:73:57:72:e8:c4:77:e5:a3:c3:2d:6b:54:ec:ac:2d:
01:9c:34:fb:ee:38:9a:d5:57:c1:63:89:76:a6:35:e2:b6:aa:
d2:a6:6a:f9:13:65:2a:14:94:fd:39:b7:c2:a7:6a:06:27:bb:
6b:89:19:0b:77:1a:e7:9f:03:25:bb:f9:6d:f7:15:74:46:82:
22:a9:9a:b1:b8:96:44:9f:f0:f9:8e:73:90:56:ce:15:fa:63:
da:f8:3f:d6:d0:67:3e:48:c0:be:ba:37:5d:b5:d0:fc:00:23:
33:b8:32:04:6a:c8:a7:f9:3e:30:84:46:f5:11:2c:5c:b8:af:
4f:1e:ff:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZy0SHHRZNCaBxswPqWEz2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwNDI2MTU1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTYzOTcxZjRiNWIzODQ4NjMzYTVjNjc4N2I0MmY2Zjg0ODEzZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTBw3v3oVYG5MUow2KeVWvPmjkUY
pXKukcbaEtN3cBWsd0kr8/idAjn2qxkiid6lNFwzW9lVOKq6KC/BorsxoHXGGQIi
33/JxX2adGU2IExUr1JoeYqR4m33wrkurUoUKS0aEBvad7a6UDOB4BT+gQX9knmP
a5pkfw00sJiDYGlB27kSMfJerRJUQg9pCwSajxvjNENdLeN4aPDqprJjjZTfHkX+
nz9qnyS+OnPErmjY1HOOFW+Sl0XwEZRH1FzhnumCc0Bwz3N5QoZEsKYvXlxjJX47
Y+XL9UYosBWHkI1fC9WnLJFEq8LIk1PglX0U+vdn0VwkSH5dZUcAv034hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpjlx9LWzhIYzpcZ4e0L2+EgT3wMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvNm1PWEgwdGJPRWhqT2x4bmg3UXZiNFNCUGZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYaMA0G
CSqGSIb3DQEBCwUAA4IBAQBEx+XdaVOJ3rl1jAUNyYcFR+4JIH/1QmXFx2BB1BSL
0GtD1qgq8uS+zJd0c6h8I+bHAUDhu0HeaaIunPzgFwzOG4MAdKov1NhURx2i5HeU
p8BwV6f+5kMCyTg34TfRTkBZoVCsx8PlJ5sISHLSTp1bdbxHH+Kc6HL1X0Pge9zc
kk1zV3LoxHflo8Mta1TsrC0BnDT77jia1VfBY4l2pjXitqrSpmr5E2UqFJT9ObfC
p2oGJ7triRkLdxrnnwMlu/lt9xV0RoIiqZqxuJZEn/D5jnOQVs4V+mPa+D/W0Gc+
SMC+ujddtdD8ACMzuDIEasin+T4whEb1ESxcuK9PHv+z
-----END CERTIFICATE-----
Generated at Mon May 12 23:12:07 2025 by rpki-client