Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/Dm2XJUYP85s_O5e5rHinhI-K6q4.roa
File: Dm2XJUYP85s_O5e5rHinhI-K6q4.roa (raw, json)
Hash identifier: 0Zpdt5l0EiYbcf06nk3BkT3knfv+DyaQHXgV+Z3zsXk=
Subject key identifier: 0E:6D:97:25:46:0F:F3:9B:3F:3B:97:B9:AC:78:A7:84:8F:8A:EA:AE
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0196A521B0BE7BB2F796069F6D2AD7A13135
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/Dm2XJUYP85s_O5e5rHinhI-K6q4.roa
Signing time: Tue 06 May 2025 10:26:10 +0000
ROA not before: Tue 06 May 2025 10:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 194.76.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 19:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:21:b0:be:7b:b2:f7:96:06:9f:6d:2a:d7:a1:31:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: May 6 10:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6d9725460ff39b3f3b97b9ac78a7848f8aeaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:41:fc:9d:04:4a:ea:a4:dc:96:6b:09:f5:
7a:ec:9f:34:89:ad:02:c1:e0:6d:d8:aa:44:50:94:
4a:84:46:d1:05:7a:2a:48:5c:f6:6f:c4:29:a6:a4:
4d:2e:3c:8e:56:7a:a4:96:73:53:7e:62:a9:f4:f9:
a2:24:26:2b:86:d9:0b:46:a7:0a:22:6b:0e:da:18:
3b:08:f7:89:96:a7:db:e0:38:2f:17:3b:d4:11:82:
c8:0c:79:f5:34:50:f6:84:d8:ef:12:07:c3:cd:08:
1d:11:b6:32:b4:08:e7:62:fc:42:32:ab:2c:fb:2b:
c6:66:f3:a7:cf:3c:91:7d:39:3a:5e:51:d9:38:7e:
1a:2f:78:58:f0:d2:e0:92:e8:8f:6f:b4:90:be:f4:
a1:39:f0:55:85:54:9c:20:88:1a:3a:52:96:f4:ae:
e1:ee:fc:e3:4b:3c:14:f3:a5:55:da:18:53:df:04:
66:f4:7c:3a:46:1f:cc:36:c4:ef:74:39:62:87:62:
60:7d:fe:8b:8a:11:9a:ae:0f:f2:61:cf:94:f2:58:
91:01:52:96:a8:95:ae:71:01:d5:46:cb:58:cf:47:
42:8b:3c:89:61:03:5a:0a:aa:37:b4:c9:ca:9f:00:
fd:2d:b1:04:a8:dd:0a:e0:54:24:5e:7f:ef:68:05:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6D:97:25:46:0F:F3:9B:3F:3B:97:B9:AC:78:A7:84:8F:8A:EA:AE
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/Dm2XJUYP85s_O5e5rHinhI-K6q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2b:a3:c6:f3:d8:d7:04:ec:02:07:75:d5:d6:15:f2:ad:f7:
b8:54:0b:e8:48:b7:ad:5f:9c:b5:66:35:16:f2:52:60:6b:0b:
e1:78:be:f1:d3:ed:68:b0:58:4e:cb:64:31:f1:e3:94:31:d5:
c7:fd:e8:e7:71:eb:f9:9e:b3:aa:c1:9a:29:f7:6c:b1:30:3f:
e6:c1:4b:06:06:47:ea:f6:7d:c3:90:3a:2f:52:1d:82:ba:3f:
34:ef:da:e3:e5:54:d8:f7:2a:22:e3:d0:af:bd:71:a0:4b:55:
d3:c7:a7:08:e7:ef:f7:f5:13:29:e4:f0:76:65:de:2f:5a:61:
37:59:89:04:c6:b8:0d:3a:1e:5f:d1:2e:fc:cb:2b:fe:5c:30:
d2:a7:44:8c:4a:c0:19:73:a9:4e:fb:40:39:1f:51:64:4a:7b:
e6:3c:ea:08:16:2c:94:ac:4c:2a:b7:68:bc:68:57:be:be:22:
fa:17:9e:61:82:99:72:d4:5e:e8:d7:4d:e3:ce:49:c4:ab:21:
fa:ef:e6:3b:5e:10:65:81:a9:80:3f:11:cc:28:a4:65:fe:ad:
9d:bf:e7:39:81:91:74:c0:90:4a:e8:9a:c3:26:7b:34:53:81:
31:b1:30:73:75:ec:45:2f:ae:bb:36:dc:ff:e4:15:f8:fb:ba:
36:59:81:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZalIbC+e7L3lgafbSrXoTE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh
NTdiOTMwHhcNMjUwNTA2MTAyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTZkOTcyNTQ2MGZmMzliM2YzYjk3YjlhYzc4YTc4NDhmOGFlYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a9B/J0ESuqk3JZrCfV67J80ia0C
weBt2KpEUJRKhEbRBXoqSFz2b8QppqRNLjyOVnqklnNTfmKp9PmiJCYrhtkLRqcK
ImsO2hg7CPeJlqfb4DgvFzvUEYLIDHn1NFD2hNjvEgfDzQgdEbYytAjnYvxCMqss
+yvGZvOnzzyRfTk6XlHZOH4aL3hY8NLgkuiPb7SQvvShOfBVhVScIIgaOlKW9K7h
7vzjSzwU86VV2hhT3wRm9Hw6Rh/MNsTvdDlih2Jgff6LihGarg/yYc+U8liRAVKW
qJWucQHVRstYz0dCizyJYQNaCqo3tMnKnwD9LbEEqN0K4FQkXn/vaAWKmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5tlyVGD/ObPzuXuax4p4SPiuquMB8GA1UdIwQY
MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt
ZWNlNTc3ZTMwN2FkLzEvRG0yWEpVWVA4NXNfTzVlNXJIaW5oSS1LNnE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk
LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwky6MA0G
CSqGSIb3DQEBCwUAA4IBAQAdK6PG89jXBOwCB3XV1hXyrfe4VAvoSLetX5y1ZjUW
8lJgawvheL7x0+1osFhOy2Qx8eOUMdXH/ejncev5nrOqwZop92yxMD/mwUsGBkfq
9n3DkDovUh2Cuj8079rj5VTY9yoi49CvvXGgS1XTx6cI5+/39RMp5PB2Zd4vWmE3
WYkExrgNOh5f0S78yyv+XDDSp0SMSsAZc6lO+0A5H1FkSnvmPOoIFiyUrEwqt2i8
aFe+viL6F55hgply1F7o103jzknEqyH67+Y7XhBlgamAPxHMKKRl/q2dv+c5gZF0
wJBK6JrDJns0U4ExsTBzdexFL667Ntz/5BX4+7o2WYF+
-----END CERTIFICATE-----
Generated at Wed May 14 02:35:21 2025 by rpki-client