Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/OxK5BQMgQWg8ILu1YzDUh3T8Iu0.roa
File: OxK5BQMgQWg8ILu1YzDUh3T8Iu0.roa (raw, json)
Hash identifier: 51S/OYgHlZkAIs96ILbELI0Jh6I9lz9l3gZF7gcWpEw=
Subject key identifier: 3B:12:B9:05:03:20:41:68:3C:20:BB:B5:63:30:D4:87:74:FC:22:ED
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 01968B466C1D9AEA8EABCF64F18A0EA19209
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/OxK5BQMgQWg8ILu1YzDUh3T8Iu0.roa
Signing time: Thu 01 May 2025 09:56:10 +0000
ROA not before: Thu 01 May 2025 09:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.143.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 08:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:46:6c:1d:9a:ea:8e:ab:cf:64:f1:8a:0e:a1:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: May 1 09:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b12b905032041683c20bbb56330d48774fc22ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:b3:f8:bb:01:93:61:da:4d:5b:6e:c8:5e:
3e:35:19:6f:23:8d:f0:c7:7e:24:5a:41:cf:9d:7a:
b8:f7:a3:53:96:7c:ae:67:4f:b8:73:12:c7:61:53:
35:ab:5b:1b:41:8d:e6:b0:c5:91:28:fc:91:89:1a:
39:db:40:92:f8:68:f4:0b:b4:77:1e:33:d5:0f:4c:
63:38:9b:80:22:0b:0e:3c:63:c5:fc:3d:a3:38:50:
09:89:26:20:fc:55:d2:fe:72:04:68:a1:c0:12:2f:
d5:87:8f:59:35:4e:9f:a5:c4:4c:e2:02:24:0c:86:
1f:6d:8f:9a:f5:20:ca:c7:61:e5:62:99:bb:f8:05:
95:22:01:35:00:fe:bd:5e:7d:6b:55:7e:01:78:b8:
65:84:ee:09:b3:b5:89:82:3a:aa:9f:db:6b:d5:05:
5f:c0:39:01:0f:df:d9:1e:f6:c9:c1:0d:c9:49:58:
2c:47:ea:8f:0b:27:0f:72:d9:d6:18:a8:14:ad:05:
8b:f7:5f:3f:6d:1f:cb:c8:24:cc:67:96:21:85:ec:
04:6e:62:5d:35:74:37:5d:89:c2:4e:43:fa:1a:5a:
78:d8:27:28:7f:8a:77:75:d6:b0:67:b9:c7:6e:df:
5f:bd:34:6c:ff:e8:db:f6:d7:48:ff:a3:9b:cf:bc:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:B9:05:03:20:41:68:3C:20:BB:B5:63:30:D4:87:74:FC:22:ED
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/OxK5BQMgQWg8ILu1YzDUh3T8Iu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.17.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d6:b8:aa:cf:d7:40:37:a6:e5:07:af:ff:a2:26:0b:28:64:
db:38:4f:eb:e3:34:12:66:ab:9a:b2:83:c4:06:b5:c1:7e:db:
c3:f7:98:2b:39:f7:d0:45:d5:6d:15:3e:11:2b:ad:d6:da:5f:
bb:16:4c:a1:55:53:f2:90:17:83:ca:17:64:50:01:2c:42:ae:
6a:78:2e:bb:56:9e:5e:bf:fd:28:36:1f:03:7a:31:22:48:f2:
95:f7:8d:57:9a:3e:1a:0c:a7:8b:1e:05:ab:fb:ac:50:27:7a:
95:35:c6:82:1e:89:e2:02:7c:8c:2e:87:74:8a:13:0b:2d:ab:
4f:8b:90:7f:ca:8c:c1:ff:ac:35:7a:bd:56:e8:0b:8a:55:dc:
de:4d:b8:54:20:17:09:9f:a4:5b:ad:a6:0a:ed:b4:46:d0:9a:
c2:a6:d6:6e:81:f3:f5:99:aa:69:60:92:70:28:be:a6:f8:29:
73:7e:6b:53:7d:02:dc:cf:ee:34:03:89:15:cc:92:03:07:22:
8e:97:6c:c8:9e:45:e8:94:fb:c1:88:c8:19:44:ca:9e:b8:a8:
42:97:21:28:5c:09:89:6c:a7:a4:d9:1e:d3:7f:97:02:66:3d:
cf:b8:57:14:b9:21:fe:15:35:77:54:04:7e:be:b4:54:ce:2c:
85:55:2f:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaLRmwdmuqOq89k8YoOoZIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2
OTUzMmEwHhcNMjUwNTAxMDk1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjEyYjkwNTAzMjA0MTY4M2MyMGJiYjU2MzMwZDQ4Nzc0ZmMyMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzyz+LsBk2HaTVtuyF4+NRlvI43w
x34kWkHPnXq496NTlnyuZ0+4cxLHYVM1q1sbQY3msMWRKPyRiRo520CS+Gj0C7R3
HjPVD0xjOJuAIgsOPGPF/D2jOFAJiSYg/FXS/nIEaKHAEi/Vh49ZNU6fpcRM4gIk
DIYfbY+a9SDKx2HlYpm7+AWVIgE1AP69Xn1rVX4BeLhlhO4Js7WJgjqqn9tr1QVf
wDkBD9/ZHvbJwQ3JSVgsR+qPCycPctnWGKgUrQWL918/bR/LyCTMZ5YhhewEbmJd
NXQ3XYnCTkP6Glp42Ccof4p3ddawZ7nHbt9fvTRs/+jb9tdI/6Obz7zJrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsSuQUDIEFoPCC7tWMw1Id0/CLtMB8GA1UdIwQY
MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt
MmJjMWFlM2RiZGJlLzEvT3hLNUJRTWdRV2c4SUx1MVl6RFVoM1Q4SXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl
LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY8RMA0G
CSqGSIb3DQEBCwUAA4IBAQDR1riqz9dAN6blB6//oiYLKGTbOE/r4zQSZquasoPE
BrXBftvD95grOffQRdVtFT4RK63W2l+7FkyhVVPykBeDyhdkUAEsQq5qeC67Vp5e
v/0oNh8DejEiSPKV941Xmj4aDKeLHgWr+6xQJ3qVNcaCHoniAnyMLod0ihMLLatP
i5B/yozB/6w1er1W6AuKVdzeTbhUIBcJn6RbraYK7bRG0JrCptZugfP1mappYJJw
KL6m+ClzfmtTfQLcz+40A4kVzJIDByKOl2zInkXolPvBiMgZRMqeuKhClyEoXAmJ
bKek2R7Tf5cCZj3PuFcUuSH+FTV3VAR+vrRUziyFVS8t
-----END CERTIFICATE-----
Generated at Wed May 14 18:48:14 2025 by rpki-client