Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/TJgZ171o5G1TBjCbuIKJaL9eAzM.roa
File: TJgZ171o5G1TBjCbuIKJaL9eAzM.roa (raw, json)
Hash identifier: bJpoG4z5W93LKVa9mary8Illi/gRaMXxzlUlIca1/jE=
Subject key identifier: 4C:98:19:D7:BD:68:E4:6D:53:06:30:9B:B8:82:89:68:BF:5E:03:33
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 01966BDC6E54EB9121D7E6E6B2A8ECCA119F
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/TJgZ171o5G1TBjCbuIKJaL9eAzM.roa
Signing time: Fri 25 Apr 2025 07:32:10 +0000
ROA not before: Fri 25 Apr 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 07:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:dc:6e:54:eb:91:21:d7:e6:e6:b2:a8:ec:ca:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Apr 25 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c9819d7bd68e46d5306309bb8828968bf5e0333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:71:d0:ae:80:05:83:3f:36:a3:72:96:df:
4f:79:67:d7:4e:54:36:3f:d5:b1:3b:66:d4:0e:6b:
0d:d1:08:07:65:ff:e1:16:a9:f2:9e:6a:2c:92:07:
a5:8a:76:ba:20:e1:0d:79:e9:bb:8a:b5:d0:07:d4:
59:6e:d6:03:fb:25:cb:fa:b4:07:f2:74:04:df:84:
ee:51:a5:09:83:6b:1f:f9:06:8d:52:91:1c:3d:76:
bd:67:05:f1:36:90:c8:4b:88:51:91:09:0e:16:20:
3a:62:50:e9:80:44:1b:75:81:6e:2e:94:f4:bb:90:
a5:0b:7e:e5:c9:d3:12:ce:55:44:2b:b9:2f:24:dd:
c4:3e:d7:6e:23:36:b9:97:fb:7b:b8:ce:9d:e0:bb:
37:09:c1:25:e2:17:38:e4:06:e5:08:49:89:4a:d0:
7c:5c:63:28:42:38:58:af:f6:51:08:64:26:c5:a9:
ac:fe:1b:00:fd:ee:33:a5:4f:11:f0:64:36:f7:b7:
ff:cc:cb:98:b2:e2:af:d1:63:8a:44:24:63:de:dd:
09:0d:96:7d:30:dc:db:77:cc:0e:a2:a8:be:8c:88:
d1:6f:81:71:21:55:9e:a2:90:1d:1a:ce:c4:21:ae:
b2:da:a4:b9:df:68:65:6e:49:54:3d:c6:97:94:d4:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:19:D7:BD:68:E4:6D:53:06:30:9B:B8:82:89:68:BF:5E:03:33
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/TJgZ171o5G1TBjCbuIKJaL9eAzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
48:74:cc:a2:f4:bc:2e:50:7d:94:86:b0:72:e3:2b:13:df:af:
04:d5:df:9f:11:2d:36:de:2b:6f:00:16:9f:a8:76:49:82:1f:
72:47:6d:f4:33:99:82:29:59:c0:80:01:ce:e5:a2:49:e1:26:
33:a3:ed:32:47:99:45:f9:6a:eb:5d:14:cd:a7:7b:4c:63:a3:
16:2f:cc:3a:f4:33:e9:5e:77:d0:d4:44:57:c9:b0:e0:94:fc:
b4:a7:ea:cf:44:65:de:e5:76:f2:a6:4e:0f:54:fa:b5:d7:8c:
ec:1a:17:c4:58:a4:01:56:fd:ba:b8:7d:a1:b1:62:a5:76:9d:
5b:5e:11:8e:f5:12:ee:65:23:8a:40:72:e2:c3:06:6e:2a:39:
58:b2:49:bd:dd:3b:79:32:e9:ac:2b:b8:93:83:87:55:b9:54:
62:0e:59:5f:69:d8:48:e3:4f:b5:b7:4f:5e:d7:a1:2b:dd:11:
a9:69:a9:a7:4a:32:48:8a:fd:99:4d:0b:79:cc:eb:e0:87:5b:
f0:fb:ce:ea:1a:b7:d2:7d:91:dc:e5:56:6f:69:84:57:c5:c9:
ed:c2:51:e0:89:b5:5f:9d:6c:11:cc:a8:23:ac:ac:1f:90:c9:
68:3b:90:96:03:eb:0c:19:d7:b8:14:64:4e:6e:f4:c9:73:bd:
44:86:82:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZr3G5U65Eh1+bmsqjsyhGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjUwNDI1MDczMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzk4MTlkN2JkNjhlNDZkNTMwNjMwOWJiODgyODk2OGJmNWUwMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Nx0K6ABYM/NqNylt9PeWfXTlQ2
P9WxO2bUDmsN0QgHZf/hFqnynmoskgelina6IOENeem7irXQB9RZbtYD+yXL+rQH
8nQE34TuUaUJg2sf+QaNUpEcPXa9ZwXxNpDIS4hRkQkOFiA6YlDpgEQbdYFuLpT0
u5ClC37lydMSzlVEK7kvJN3EPtduIza5l/t7uM6d4Ls3CcEl4hc45AblCEmJStB8
XGMoQjhYr/ZRCGQmxams/hsA/e4zpU8R8GQ297f/zMuYsuKv0WOKRCRj3t0JDZZ9
MNzbd8wOoqi+jIjRb4FxIVWeopAdGs7EIa6y2qS532hlbklUPcaXlNSBYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEyYGde9aORtUwYwm7iCiWi/XgMzMB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvVEpnWjE3MW81RzFUQmpDYnVJS0phTDllQXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiKMA0G
CSqGSIb3DQEBCwUAA4IBAQBIdMyi9LwuUH2UhrBy4ysT368E1d+fES023itvABaf
qHZJgh9yR230M5mCKVnAgAHO5aJJ4SYzo+0yR5lF+WrrXRTNp3tMY6MWL8w69DPp
XnfQ1ERXybDglPy0p+rPRGXe5Xbypk4PVPq114zsGhfEWKQBVv26uH2hsWKldp1b
XhGO9RLuZSOKQHLiwwZuKjlYskm93Tt5MumsK7iTg4dVuVRiDllfadhI40+1t09e
16Er3RGpaamnSjJIiv2ZTQt5zOvgh1vw+87qGrfSfZHc5VZvaYRXxcntwlHgibVf
nWwRzKgjrKwfkMloO5CWA+sMGde4FGRObvTJc71EhoKz
-----END CERTIFICATE-----
Generated at Sun May 11 19:55:14 2025 by rpki-client