Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/_2EzRO0pLIz9rRVlYYTF2NIenLc.roa
File: _2EzRO0pLIz9rRVlYYTF2NIenLc.roa (raw, json)
Hash identifier: yo9Ew/+OSfLQ2xuj0gS6FOvonJeYij7ntkYZkkFCUsw=
Subject key identifier: FF:61:33:44:ED:29:2C:8C:FD:AD:15:65:61:84:C5:D8:D2:1E:9C:B7
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 01960199F8289BB4BE7BC8531594DDA16EB6
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/_2EzRO0pLIz9rRVlYYTF2NIenLc.roa
Signing time: Fri 04 Apr 2025 16:19:49 +0000
ROA not before: Fri 04 Apr 2025 16:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 94.232.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 09:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:99:f8:28:9b:b4:be:7b:c8:53:15:94:dd:a1:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Apr 4 16:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff613344ed292c8cfdad15656184c5d8d21e9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:ff:d6:93:72:c7:2e:5a:98:cf:c5:e1:4f:
ec:d0:88:70:56:3f:b4:0b:ad:d6:79:a0:5f:4d:9e:
db:d5:3c:d5:b8:f9:b6:de:3c:85:7f:cb:fe:ed:99:
27:08:24:ca:65:50:4e:8f:71:6f:52:2b:69:0f:aa:
cf:51:68:c6:b4:67:f6:9b:ff:78:00:67:c9:ff:13:
4d:1c:51:3e:94:a2:2c:7b:ac:dc:b2:a3:c4:a8:15:
c5:7d:5b:17:73:ac:0f:32:93:d5:08:46:4e:f3:86:
e8:9f:cb:38:9e:c0:45:7a:7b:09:99:e9:f4:29:c9:
a8:61:6c:40:cb:94:d4:2c:70:a8:92:a7:1e:27:d3:
f9:f7:dd:40:60:7c:90:71:6b:c5:7e:d8:34:af:e1:
2f:68:9c:1f:49:3d:14:a9:51:9c:01:0c:94:17:17:
77:a0:5e:54:6a:a3:ab:b4:c7:09:4b:ce:cd:5b:51:
b0:04:35:8e:19:05:b3:8c:f6:e9:8c:49:1d:45:e7:
9a:08:5e:23:10:00:49:cc:bc:ea:82:bd:9b:74:9a:
63:b4:78:58:97:63:c3:a3:fd:ff:e2:a2:8c:ae:ed:
dd:1c:b8:8a:e7:40:3c:b8:19:eb:da:d5:c3:27:32:
dc:b7:4c:10:45:d4:dd:cb:39:68:83:7c:dc:27:b0:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:33:44:ED:29:2C:8C:FD:AD:15:65:61:84:C5:D8:D2:1E:9C:B7
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/_2EzRO0pLIz9rRVlYYTF2NIenLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:25:9d:1c:60:50:8f:c1:fb:69:cb:6d:52:dd:9e:11:88:d3:
bf:2d:ea:eb:d5:f3:69:fe:e8:84:9a:3f:f5:04:62:69:5e:c7:
eb:c7:df:ca:1f:18:7e:a3:07:83:3f:f2:b8:4a:3e:b1:eb:7d:
54:07:1c:87:ce:98:a0:d0:72:98:6f:c4:06:2c:be:f9:a2:8c:
6d:a0:eb:6e:1b:a4:24:41:05:ed:9d:9f:79:b3:64:da:f7:03:
8b:29:d7:12:50:e3:63:cb:bd:bf:3c:76:2a:77:80:dc:fe:5b:
a5:00:6b:bd:b0:f5:38:ff:f7:51:0b:28:ef:76:e8:90:f7:1c:
26:9c:9c:5e:07:7f:08:fd:bd:6d:8b:df:45:d3:4a:76:d3:18:
de:95:77:86:58:fc:00:7b:e0:ac:bf:49:dd:7b:4b:fc:31:20:
15:e1:f2:aa:36:4f:a4:d6:c4:c5:b4:99:ce:ca:82:77:af:bf:
6c:fa:9b:a3:b9:c3:1a:c3:74:8e:09:39:84:eb:ba:66:2d:0b:
de:11:34:72:9e:9a:4d:62:98:07:0a:48:dd:35:e1:da:dd:e5:
ae:e0:72:02:65:47:9b:a5:bb:73:4c:2d:f5:41:74:95:9d:1c:
31:b9:fb:06:f4:4d:05:16:a9:cb:8b:0f:a5:5b:d8:22:98:42:
f6:a4:70:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYBmfgom7S+e8hTFZTdoW62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjUwNDA0MTYxOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjYxMzM0NGVkMjkyYzhjZmRhZDE1NjU2MTg0YzVkOGQyMWU5Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl7/1pNyxy5amM/F4U/s0IhwVj+0
C63WeaBfTZ7b1TzVuPm23jyFf8v+7ZknCCTKZVBOj3FvUitpD6rPUWjGtGf2m/94
AGfJ/xNNHFE+lKIse6zcsqPEqBXFfVsXc6wPMpPVCEZO84bon8s4nsBFensJmen0
KcmoYWxAy5TULHCokqceJ9P5991AYHyQcWvFftg0r+EvaJwfST0UqVGcAQyUFxd3
oF5UaqOrtMcJS87NW1GwBDWOGQWzjPbpjEkdReeaCF4jEABJzLzqgr2bdJpjtHhY
l2PDo/3/4qKMru3dHLiK50A8uBnr2tXDJzLct0wQRdTdyzlog3zcJ7BMXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9hM0TtKSyM/a0VZWGExdjSHpy3MB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvXzJFelJPMHBMSXo5clJWbFlZVEYyTkllbkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuj+MA0G
CSqGSIb3DQEBCwUAA4IBAQAdJZ0cYFCPwftpy21S3Z4RiNO/Lerr1fNp/uiEmj/1
BGJpXsfrx9/KHxh+oweDP/K4Sj6x631UBxyHzpig0HKYb8QGLL75ooxtoOtuG6Qk
QQXtnZ95s2Ta9wOLKdcSUONjy72/PHYqd4Dc/lulAGu9sPU4//dRCyjvduiQ9xwm
nJxeB38I/b1ti99F00p20xjelXeGWPwAe+Csv0nde0v8MSAV4fKqNk+k1sTFtJnO
yoJ3r79s+pujucMaw3SOCTmE67pmLQveETRynppNYpgHCkjdNeHa3eWu4HICZUeb
pbtzTC31QXSVnRwxufsG9E0FFqnLiw+lW9gimEL2pHCN
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:09 2025 by rpki-client