Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DyoZ5qXGt1i-kV4Llrtg8o50P7I.roa
File: DyoZ5qXGt1i-kV4Llrtg8o50P7I.roa (raw, json)
Hash identifier: LT6LUbnFr86kHNliTmGRFsnmz+z4RMmCjdqnu4ohzTk=
Subject key identifier: 0F:2A:19:E6:A5:C6:B7:58:BE:91:5E:0B:96:BB:60:F2:8E:74:3F:B2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01970147DA1947939C2CC82421E78B808CFF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DyoZ5qXGt1i-kV4Llrtg8o50P7I.roa
Signing time: Sat 24 May 2025 07:52:55 +0000
ROA not before: Sat 24 May 2025 07:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 85.202.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 15:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:47:da:19:47:93:9c:2c:c8:24:21:e7:8b:80:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 24 07:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2a19e6a5c6b758be915e0b96bb60f28e743fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:56:b6:12:cd:c5:f3:2d:f4:f7:3f:a1:03:
9f:9e:0c:c8:e3:4a:cc:36:92:96:91:69:5a:68:9d:
6e:ed:7f:61:df:c0:c1:12:2a:b9:91:37:4d:a7:b8:
67:c2:62:7c:46:38:92:10:57:18:a8:44:1f:91:17:
a7:2c:27:49:2e:7f:af:d4:30:49:f6:f6:98:1f:98:
0c:3c:a6:40:33:06:57:6e:2c:25:97:82:8a:14:cb:
3d:4d:6b:56:6a:87:15:99:0b:80:3a:25:96:59:73:
7d:9b:66:13:41:26:78:d3:8c:5b:ba:dd:8a:e9:37:
94:8a:b6:3b:69:7e:4b:85:ed:79:2d:47:56:2f:37:
e5:d8:88:47:5e:17:80:7e:6b:ca:26:c4:58:05:7a:
29:77:83:35:d0:cf:3f:bc:94:69:83:ff:28:a6:de:
40:5b:70:fa:ee:cd:48:ab:e4:b5:ae:1e:6e:47:69:
2e:77:3e:5c:76:fb:7d:7d:a7:f4:78:9b:58:f3:74:
35:ab:3f:a2:ac:6c:ee:9e:78:59:96:31:96:67:17:
a1:8e:f6:99:13:2e:72:f1:a7:05:d4:0e:0f:c1:45:
fc:a4:6b:74:0c:fc:86:b8:ee:b7:f7:3f:89:68:08:
d0:df:61:b7:65:34:06:cd:38:21:68:26:6d:1d:7c:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:19:E6:A5:C6:B7:58:BE:91:5E:0B:96:BB:60:F2:8E:74:3F:B2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DyoZ5qXGt1i-kV4Llrtg8o50P7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:22:b1:8b:31:1f:83:fb:a7:1a:59:41:c2:72:7a:54:a8:21:
2e:dd:63:97:7e:07:25:ff:55:bc:3b:f9:42:73:09:2a:41:50:
80:18:5a:f4:fb:e8:26:40:4a:29:2e:21:46:49:c2:c7:b5:b7:
f8:6d:b4:56:34:24:77:b0:2b:2f:7a:49:b0:4b:ce:81:7c:03:
94:63:9f:cf:d1:4f:bc:d7:69:24:ff:ee:84:fd:71:59:2d:09:
97:c8:f1:e9:35:9c:92:a5:8b:26:02:49:db:fc:de:67:b4:4b:
71:89:a4:42:cf:fb:f0:96:12:0a:d1:34:c5:57:82:1c:88:30:
a1:bd:a4:84:23:1c:02:a0:a4:13:4a:63:26:78:8c:7b:2d:f3:
1d:34:cd:68:f2:c8:fe:3c:a9:a8:a4:9c:48:78:0a:14:2a:37:
d6:21:87:53:a9:0a:01:e1:8d:e3:7c:d2:39:9b:16:ab:80:39:
cd:af:3f:8f:74:ca:21:0b:81:29:24:dc:52:e2:d7:3a:5a:a2:
bd:d5:43:8c:bd:81:2e:05:f6:06:f3:26:10:b0:56:a2:3f:92:
fe:d5:34:95:85:9f:69:96:c7:72:2d:08:42:41:9d:69:3e:0c:
43:0a:00:9b:83:d1:23:aa:b4:ca:25:38:cc:11:c3:a6:cc:15:
83:43:83:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcBR9oZR5OcLMgkIeeLgIz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNTI0MDc1MjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjJhMTllNmE1YzZiNzU4YmU5MTVlMGI5NmJiNjBmMjhlNzQzZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+9WthLNxfMt9Pc/oQOfngzI40rM
NpKWkWlaaJ1u7X9h38DBEiq5kTdNp7hnwmJ8RjiSEFcYqEQfkRenLCdJLn+v1DBJ
9vaYH5gMPKZAMwZXbiwll4KKFMs9TWtWaocVmQuAOiWWWXN9m2YTQSZ404xbut2K
6TeUirY7aX5Lhe15LUdWLzfl2IhHXheAfmvKJsRYBXopd4M10M8/vJRpg/8opt5A
W3D67s1Iq+S1rh5uR2kudz5cdvt9faf0eJtY83Q1qz+irGzunnhZljGWZxehjvaZ
Ey5y8acF1A4PwUX8pGt0DPyGuO639z+JaAjQ32G3ZTQGzTghaCZtHXzUHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8qGealxrdYvpFeC5a7YPKOdD+yMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRHlvWjVxWEd0MWkta1Y0TGxydGc4bzUwUDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcrLMA0G
CSqGSIb3DQEBCwUAA4IBAQAvIrGLMR+D+6caWUHCcnpUqCEu3WOXfgcl/1W8O/lC
cwkqQVCAGFr0++gmQEopLiFGScLHtbf4bbRWNCR3sCsvekmwS86BfAOUY5/P0U+8
12kk/+6E/XFZLQmXyPHpNZySpYsmAknb/N5ntEtxiaRCz/vwlhIK0TTFV4IciDCh
vaSEIxwCoKQTSmMmeIx7LfMdNM1o8sj+PKmopJxIeAoUKjfWIYdTqQoB4Y3jfNI5
mxargDnNrz+PdMohC4EpJNxS4tc6WqK91UOMvYEuBfYG8yYQsFaiP5L+1TSVhZ9p
lsdyLQhCQZ1pPgxDCgCbg9EjqrTKJTjMEcOmzBWDQ4M7
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:21:22 2025 by rpki-client