Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gXBmm1Z_g84ydqhMAHR9X10RIOk.roa
File: gXBmm1Z_g84ydqhMAHR9X10RIOk.roa (raw, json)
Hash identifier: ldyqFXnv/IMeMBMNauyeb6NyasJDhIwLAvQgW6qNcOU=
Subject key identifier: 81:70:66:9B:56:7F:83:CE:32:76:A8:4C:00:74:7D:5F:5D:11:20:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F1102B6504B9D66B7273228A4D1FC90D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gXBmm1Z_g84ydqhMAHR9X10RIOk.roa
Signing time: Wed 21 May 2025 04:18:10 +0000
ROA not before: Wed 21 May 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 13:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:10:2b:65:04:b9:d6:6b:72:73:22:8a:4d:1f:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8170669b567f83ce3276a84c00747d5f5d1120e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:ec:74:b5:7e:c1:a5:6d:f6:e2:9e:ba:36:
10:70:17:29:e8:8b:71:5a:17:4c:b7:2a:64:7c:a3:
ad:0e:8a:d8:d1:fe:af:a2:91:a9:83:21:63:42:91:
7f:e3:55:b3:9b:a9:8e:f7:c2:82:df:18:1e:9c:80:
59:31:96:be:34:6a:54:de:8c:fe:1c:d4:cd:72:c7:
6d:01:b9:f8:f2:5d:26:d5:96:82:ac:25:3b:28:ae:
6c:fd:06:ef:11:3f:f3:d3:69:9a:28:d1:14:43:a8:
dc:2e:32:b4:f7:90:15:85:98:dc:71:a0:00:0b:6e:
14:f0:0e:60:e3:a3:6f:bb:30:4a:df:8f:26:be:92:
10:99:ba:59:e5:ec:4e:11:35:df:e6:bd:75:83:da:
15:0c:54:ec:ed:78:28:d6:93:13:9a:cf:8a:32:bd:
eb:dd:7f:37:02:cd:c1:18:f4:76:a7:ca:f7:a0:7b:
88:21:63:e4:fd:25:dc:57:8d:18:56:6f:65:f0:5e:
03:6c:ce:ee:87:ac:c2:2b:70:4c:8c:8e:10:1f:2d:
57:15:bf:69:bf:18:bd:68:77:8d:ca:ab:d2:19:10:
01:b0:cb:3d:03:2a:19:8c:4c:2b:d6:9d:48:8e:bb:
af:0a:5a:e6:83:41:fb:db:c0:fd:b0:45:e7:b6:ad:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:66:9B:56:7F:83:CE:32:76:A8:4C:00:74:7D:5F:5D:11:20:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gXBmm1Z_g84ydqhMAHR9X10RIOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
Signature Algorithm: sha256WithRSAEncryption
89:29:97:00:48:0c:9c:c3:b0:07:c4:e2:64:35:5c:84:44:69:
5c:9a:c2:11:03:9b:22:e9:d1:bc:5e:61:53:bd:15:15:1e:3d:
02:c4:97:d2:b4:ed:f5:68:0e:63:90:20:60:68:40:3a:f7:83:
80:79:5d:29:6c:fa:33:c3:bd:94:63:cf:80:7d:dc:d9:ef:23:
bf:23:77:07:75:46:50:28:01:1d:fc:4b:05:3d:03:5a:70:67:
c2:d9:de:ef:c8:6c:8a:94:80:1e:45:d1:e4:b5:cf:15:28:02:
43:7b:76:fc:9e:16:24:bc:f0:25:c5:60:28:d1:fa:f3:07:bd:
80:65:16:ba:23:d1:49:14:92:31:e6:14:af:4b:fb:38:8d:74:
20:cc:9d:a0:ae:5c:3b:0d:fb:5a:7d:47:8f:b6:94:e8:d3:bd:
9b:72:86:d8:03:39:0d:2a:51:bf:8f:97:20:46:22:ac:b6:6b:
97:9a:05:4d:7b:23:cf:6c:d0:e3:10:a8:c7:b5:0a:e9:91:07:
5c:70:14:36:3c:51:fe:20:d7:e5:51:fb:1d:fd:bb:5d:3f:eb:
a2:9d:d7:dd:b0:22:fc:78:5d:4f:cb:c2:32:48:93:9e:f8:a2:
d3:67:a6:d0:c5:46:17:1c:7d:c9:3e:a6:6b:03:59:40:5d:c8:
73:e5:64:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbxECtlBLnWa3JzIopNH8kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTIxMDQxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTcwNjY5YjU2N2Y4M2NlMzI3NmE4NGMwMDc0N2Q1ZjVkMTEyMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGLsdLV+waVt9uKeujYQcBcp6Itx
WhdMtypkfKOtDorY0f6vopGpgyFjQpF/41Wzm6mO98KC3xgenIBZMZa+NGpU3oz+
HNTNcsdtAbn48l0m1ZaCrCU7KK5s/QbvET/z02maKNEUQ6jcLjK095AVhZjccaAA
C24U8A5g46NvuzBK348mvpIQmbpZ5exOETXf5r11g9oVDFTs7Xgo1pMTms+KMr3r
3X83As3BGPR2p8r3oHuIIWPk/SXcV40YVm9l8F4DbM7uh6zCK3BMjI4QHy1XFb9p
vxi9aHeNyqvSGRABsMs9AyoZjEwr1p1IjruvClrmg0H728D9sEXntq0iUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFwZptWf4POMnaoTAB0fV9dESDpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ1hCbW0xWl9nODR5ZHFoTUFIUjlYMTBSSU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/5MA0G
CSqGSIb3DQEBCwUAA4IBAQCJKZcASAycw7AHxOJkNVyERGlcmsIRA5si6dG8XmFT
vRUVHj0CxJfStO31aA5jkCBgaEA694OAeV0pbPozw72UY8+AfdzZ7yO/I3cHdUZQ
KAEd/EsFPQNacGfC2d7vyGyKlIAeRdHktc8VKAJDe3b8nhYkvPAlxWAo0frzB72A
ZRa6I9FJFJIx5hSvS/s4jXQgzJ2grlw7DftafUePtpTo072bcobYAzkNKlG/j5cg
RiKstmuXmgVNeyPPbNDjEKjHtQrpkQdccBQ2PFH+INflUfsd/btdP+uindfdsCL8
eF1Py8IySJOe+KLTZ6bQxUYXHH3JPqZrA1lAXchz5WT2
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:25:46 2025 by rpki-client