Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/zM5pvpH8OlH4YqtrzliGYsf6hrA.roa
File: zM5pvpH8OlH4YqtrzliGYsf6hrA.roa (raw, json)
Hash identifier: UKgKAw4dBO8wEZql9m0aQvKnj59ppx3i71GDcsHJegk=
Subject key identifier: CC:CE:69:BE:91:FC:3A:51:F8:62:AB:6B:CE:58:86:62:C7:FA:86:B0
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 01951C40B2F5B869A8F1BE8A4711FFA06301
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/zM5pvpH8OlH4YqtrzliGYsf6hrA.roa
Signing time: Wed 19 Feb 2025 03:29:16 +0000
ROA not before: Wed 19 Feb 2025 03:29:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48876
IP address blocks: 194.79.250.0/23 maxlen: 23
194.79.250.0/24 maxlen: 24
194.79.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 03:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:40:b2:f5:b8:69:a8:f1:be:8a:47:11:ff:a0:63:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Feb 19 03:29:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccce69be91fc3a51f862ab6bce588662c7fa86b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:3f:5c:b4:95:b6:32:0c:ff:74:6d:2a:37:
60:3b:37:d9:b9:e0:8e:5f:48:9d:77:25:3e:d9:cd:
40:a4:57:d4:b1:fd:ad:37:1c:fd:78:28:71:e0:e5:
aa:70:b3:b5:29:25:ea:ee:1a:32:62:44:99:32:34:
e2:b8:b4:b4:a5:f9:8a:fa:60:52:ca:e1:aa:1f:d2:
bc:a2:70:c0:3b:47:9f:74:b9:83:92:ff:ae:1b:f4:
44:f9:40:e8:93:20:a9:1b:41:1d:29:b1:c8:cd:42:
7d:b8:4f:e8:bb:34:bc:20:ac:f7:b8:95:e0:9b:2d:
d5:81:c6:e9:e4:5c:aa:9f:c3:57:11:71:ac:a7:79:
b8:02:45:7b:35:b4:95:5f:d3:f1:48:3a:a8:da:12:
c6:e7:8f:2c:21:f1:e1:2a:9e:e6:e9:61:ee:3c:33:
83:ac:c9:2b:06:94:5a:bc:7a:5f:a3:16:14:5c:b3:
19:70:ea:12:ba:26:88:be:f5:b3:9b:01:eb:aa:17:
53:65:50:d3:5e:0b:0a:bd:b0:36:4c:51:0c:ab:51:
93:ed:92:73:4c:a3:d4:54:61:82:fd:c6:1c:1a:15:
64:69:72:d1:10:14:a6:9f:7d:55:6f:53:c4:75:2d:
be:f5:2e:d9:67:5e:61:05:bd:fd:ba:f9:26:1b:15:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:69:BE:91:FC:3A:51:F8:62:AB:6B:CE:58:86:62:C7:FA:86:B0
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/zM5pvpH8OlH4YqtrzliGYsf6hrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:fb:6f:56:a5:5d:16:5a:28:90:6a:4a:ef:19:38:7b:49:56:
8a:2b:89:51:5e:0a:63:52:9c:71:c1:ba:db:9f:73:ae:06:62:
ed:4e:86:2e:1b:f7:ad:70:ec:01:f2:dc:e4:9e:62:5e:7c:a5:
fd:42:9e:b6:f9:66:9e:d7:6e:33:57:d8:5f:d2:9f:45:b0:77:
7c:e9:52:e0:4c:55:dc:14:af:4b:4d:3c:6f:34:77:d9:07:1b:
06:68:09:32:21:88:38:37:9e:13:11:d4:71:e6:92:ec:d3:2d:
e3:fe:72:2d:be:78:02:ac:e9:e0:70:ec:91:13:42:75:a1:46:
6a:4c:0a:14:8e:a2:cc:cc:b7:47:db:90:a3:cf:f1:c2:85:b7:
41:22:1e:67:0e:6a:f0:a7:d6:f1:a5:23:02:a1:77:36:71:77:
87:5a:7b:56:10:76:1d:18:79:b7:74:87:66:57:4a:a2:b9:f4:
c1:6e:dc:b0:a0:c3:a4:e7:36:7d:f5:70:fc:3c:ea:00:bf:7b:
b5:69:48:f0:fe:65:e1:bd:5e:c5:39:17:97:7c:d5:64:e6:30:
19:4f:eb:40:92:52:d5:b8:44:15:11:7c:51:26:a7:c8:14:61:
9d:0e:81:89:56:b2:55:d5:eb:6d:ec:08:2d:41:78:b3:9e:55:
a5:7c:99:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUcQLL1uGmo8b6KRxH/oGMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh
YjhhZmUwHhcNMjUwMjE5MDMyOTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NlNjliZTkxZmMzYTUxZjg2MmFiNmJjZTU4ODY2MmM3ZmE4NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8g/XLSVtjIM/3RtKjdgOzfZueCO
X0iddyU+2c1ApFfUsf2tNxz9eChx4OWqcLO1KSXq7hoyYkSZMjTiuLS0pfmK+mBS
yuGqH9K8onDAO0efdLmDkv+uG/RE+UDokyCpG0EdKbHIzUJ9uE/ouzS8IKz3uJXg
my3Vgcbp5Fyqn8NXEXGsp3m4AkV7NbSVX9PxSDqo2hLG548sIfHhKp7m6WHuPDOD
rMkrBpRavHpfoxYUXLMZcOoSuiaIvvWzmwHrqhdTZVDTXgsKvbA2TFEMq1GT7ZJz
TKPUVGGC/cYcGhVkaXLREBSmn31Vb1PEdS2+9S7ZZ15hBb39uvkmGxV1UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzOab6R/DpR+GKra85YhmLH+oawMB8GA1UdIwQY
MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt
OWQyNzA5MTc4NGNjLzEvek01cHZwSDhPbEg0WXF0cnpsaUdZc2Y2aHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj
LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwk/6MA0G
CSqGSIb3DQEBCwUAA4IBAQC6+29WpV0WWiiQakrvGTh7SVaKK4lRXgpjUpxxwbrb
n3OuBmLtToYuG/etcOwB8tzknmJefKX9Qp62+Wae124zV9hf0p9FsHd86VLgTFXc
FK9LTTxvNHfZBxsGaAkyIYg4N54TEdRx5pLs0y3j/nItvngCrOngcOyRE0J1oUZq
TAoUjqLMzLdH25Cjz/HChbdBIh5nDmrwp9bxpSMCoXc2cXeHWntWEHYdGHm3dIdm
V0qiufTBbtywoMOk5zZ99XD8POoAv3u1aUjw/mXhvV7FOReXfNVk5jAZT+tAklLV
uEQVEXxRJqfIFGGdDoGJVrJV1ett7AgtQXiznlWlfJkP
-----END CERTIFICATE-----
Generated at Wed May 14 04:52:58 2025 by rpki-client