Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4WGVfhyGWgWkCuBQJkiyUk5aOjI.roa
File: 4WGVfhyGWgWkCuBQJkiyUk5aOjI.roa (raw, json)
Hash identifier: PbE+wdVoVqWYrE5y+C5AnYY+Nw7e8ZcvBmcYjbJAqQ0=
Subject key identifier: E1:61:95:7E:1C:86:5A:05:A4:0A:E0:50:26:48:B2:52:4E:5A:3A:32
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 0194228A090D2DDCDCE5AC2096BC628AD09F
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4WGVfhyGWgWkCuBQJkiyUk5aOjI.roa
Signing time: Wed 01 Jan 2025 15:44:19 +0000
ROA not before: Wed 01 Jan 2025 15:44:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201119
IP address blocks: 37.16.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8a:09:0d:2d:dc:dc:e5:ac:20:96:bc:62:8a:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 15:44:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e161957e1c865a05a40ae0502648b2524e5a3a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:a5:e5:bf:1a:72:30:17:5c:62:c5:86:cf:
43:fd:1e:42:76:5a:56:57:69:a0:76:0a:c1:7c:ff:
08:a0:ae:19:cd:69:74:be:2b:16:15:57:b8:4c:61:
0e:ec:66:1d:fc:48:37:d8:9c:8c:8d:ee:15:18:74:
37:21:c7:b2:22:20:52:3d:02:b7:db:1b:da:95:66:
56:ff:f5:e6:4f:63:91:76:26:4c:67:e2:ef:05:42:
04:bd:4a:02:aa:2f:18:2f:36:24:6d:7d:48:26:f9:
ab:ae:fb:87:69:2a:31:b4:1e:41:d2:5e:64:01:57:
0f:d8:a7:60:da:8c:30:95:7f:d2:58:3e:9b:0d:91:
8d:73:c0:87:a8:63:cf:3c:22:f9:c9:d0:46:29:6f:
75:59:df:a5:e9:31:25:5a:35:b8:b1:ba:b8:95:66:
e7:05:0a:49:52:3b:59:21:6b:34:94:3c:77:3c:27:
50:24:11:41:56:ad:d0:29:23:d9:36:23:43:7e:e5:
4a:71:32:ea:b7:b8:e0:06:26:fa:19:15:47:53:0e:
32:6e:d4:ac:95:5e:3b:72:b2:2e:c6:43:db:8e:f9:
16:9a:21:e7:79:8e:e9:2d:9d:72:5c:cc:10:56:a6:
ee:e5:d1:13:be:d5:9a:f9:f3:a1:92:13:46:e6:c1:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:95:7E:1C:86:5A:05:A4:0A:E0:50:26:48:B2:52:4E:5A:3A:32
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4WGVfhyGWgWkCuBQJkiyUk5aOjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6d:37:c1:7f:ee:eb:84:ec:f2:47:e6:dd:7d:30:b3:4d:d7:
0e:4f:ff:c4:06:7f:39:73:ee:c9:8b:2d:05:70:6b:de:52:9d:
3e:6e:33:32:02:73:0e:2c:43:63:53:67:7f:ad:dc:69:0a:ac:
3e:92:38:81:ae:b4:87:de:1f:23:e7:5b:78:97:e2:a5:3f:14:
b8:c8:aa:ed:8f:fa:b0:52:08:42:a6:a9:ac:80:8e:95:00:d2:
58:bd:62:64:91:be:74:1b:c2:4e:7f:b0:b6:65:66:98:f8:e5:
ce:ea:34:87:d7:61:23:06:d9:50:53:c0:11:f3:aa:86:06:ae:
8e:78:cd:e2:5c:7f:8f:39:d9:f9:99:08:96:6b:b9:3c:fe:fe:
e2:9e:3e:06:06:1d:f0:be:74:b2:35:a3:21:cc:63:da:c3:b0:
41:2c:35:f5:77:1e:43:45:31:74:67:60:14:a0:56:77:5c:d5:
ce:60:05:b0:17:e3:88:86:71:78:27:33:0d:e3:24:5d:99:f0:
0d:54:6e:11:dc:86:ac:8e:1d:54:a2:4b:b5:5a:42:77:42:17:
19:c8:2f:1b:b5:10:ad:f9:dd:ff:93:5f:71:f8:61:0f:cc:f5:
e4:ac:9a:fc:aa:a2:25:2b:98:5e:fe:0d:f9:b3:47:a7:f5:06:
3f:ad:5e:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiigkNLdzc5awglrxiitCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjUwMTAxMTU0NDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTYxOTU3ZTFjODY1YTA1YTQwYWUwNTAyNjQ4YjI1MjRlNWEzYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGel5b8acjAXXGLFhs9D/R5CdlpW
V2mgdgrBfP8IoK4ZzWl0visWFVe4TGEO7GYd/Eg32JyMje4VGHQ3IceyIiBSPQK3
2xvalWZW//XmT2ORdiZMZ+LvBUIEvUoCqi8YLzYkbX1IJvmrrvuHaSoxtB5B0l5k
AVcP2Kdg2owwlX/SWD6bDZGNc8CHqGPPPCL5ydBGKW91Wd+l6TElWjW4sbq4lWbn
BQpJUjtZIWs0lDx3PCdQJBFBVq3QKSPZNiNDfuVKcTLqt7jgBib6GRVHUw4ybtSs
lV47crIuxkPbjvkWmiHneY7pLZ1yXMwQVqbu5dETvtWa+fOhkhNG5sF+HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFhlX4chloFpArgUCZIslJOWjoyMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvNFdHVmZoeUdXZ1drQ3VCUUpraXlVazVhT2pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBaMA0G
CSqGSIb3DQEBCwUAA4IBAQCabTfBf+7rhOzyR+bdfTCzTdcOT//EBn85c+7Jiy0F
cGveUp0+bjMyAnMOLENjU2d/rdxpCqw+kjiBrrSH3h8j51t4l+KlPxS4yKrtj/qw
UghCpqmsgI6VANJYvWJkkb50G8JOf7C2ZWaY+OXO6jSH12EjBtlQU8AR86qGBq6O
eM3iXH+POdn5mQiWa7k8/v7inj4GBh3wvnSyNaMhzGPaw7BBLDX1dx5DRTF0Z2AU
oFZ3XNXOYAWwF+OIhnF4JzMN4yRdmfANVG4R3Iasjh1Uoku1WkJ3QhcZyC8btRCt
+d3/k19x+GEPzPXkrJr8qqIlK5he/g35s0en9QY/rV5N
-----END CERTIFICATE-----
Generated at Thu May 15 11:24:22 2025 by rpki-client