Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvocKJL_wTQZcKvTu5iJJsTUsnQ.roa
File: dvocKJL_wTQZcKvTu5iJJsTUsnQ.roa (raw, json)
Hash identifier: T8pOkXOxHPbXELsll8kLZr5CFzrwdiKaih/ZYuWqyKs=
Subject key identifier: 76:FA:1C:28:92:FF:C1:34:19:70:AB:D3:BB:98:89:26:C4:D4:B2:74
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01957FCE494A37F3F6AEEE9075FAA9E9BBE1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvocKJL_wTQZcKvTu5iJJsTUsnQ.roa
Signing time: Mon 10 Mar 2025 11:26:20 +0000
ROA not before: Mon 10 Mar 2025 11:26:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 109.61.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:ce:49:4a:37:f3:f6:ae:ee:90:75:fa:a9:e9:bb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 10 11:26:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76fa1c2892ffc1341970abd3bb988926c4d4b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:10:9f:66:82:95:c9:18:25:3d:f4:97:a1:
2d:ab:24:05:c7:6c:49:b0:58:f7:a5:c1:a7:29:ec:
60:41:f2:88:f7:ab:4b:93:98:e7:fa:de:5f:57:bd:
bb:0f:41:fd:be:dd:3e:28:03:6e:a4:e7:f7:58:f0:
45:10:88:69:09:93:e3:f2:5c:bf:84:24:f9:e6:a7:
bb:2c:89:91:ec:d1:1b:65:0d:46:c6:8d:af:35:99:
91:ad:88:06:58:e3:79:43:fb:81:ac:74:26:5f:fb:
3f:67:45:28:a1:19:f2:6e:9f:e6:14:80:92:f6:99:
ba:8a:87:44:99:16:9d:28:38:af:42:1b:da:e4:4e:
94:b0:7d:e6:7d:83:25:ab:6e:2c:aa:54:49:dc:25:
23:72:60:18:9f:7c:35:35:4c:a9:ba:c6:e6:31:e6:
79:2c:f5:4f:af:a5:86:c8:f0:32:1d:e3:13:78:18:
5e:07:d8:43:66:56:39:6a:46:c0:4c:b0:14:39:db:
84:17:c1:ea:75:33:95:53:17:32:42:39:06:08:69:
12:eb:05:c9:2b:d1:a6:60:96:b8:50:97:ca:c2:35:
eb:b8:48:d4:ab:77:9f:50:96:93:01:38:a2:9b:0b:
e5:4b:b6:50:12:f8:11:69:2c:e1:51:f6:a4:26:09:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:1C:28:92:FF:C1:34:19:70:AB:D3:BB:98:89:26:C4:D4:B2:74
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvocKJL_wTQZcKvTu5iJJsTUsnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.110.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bd:5b:b0:a0:64:09:7c:97:69:3b:5b:52:ea:ee:f5:df:27:
79:0c:33:a8:36:0d:be:5d:ff:05:42:e1:a2:a5:e9:5d:71:2b:
7f:08:a7:15:a2:6a:3c:4e:2c:07:75:0a:3c:81:0d:a3:73:c1:
1f:26:f4:7d:b4:71:69:fb:d4:b3:7f:c4:b7:5a:7d:4b:07:84:
9c:4f:0d:36:70:33:2e:49:2a:05:93:9d:e2:8e:79:50:4f:82:
a8:05:01:08:56:97:f3:3b:d1:08:7d:cf:3f:73:c7:75:55:17:
61:2d:3b:3d:c6:10:76:e1:c4:7d:9a:34:6c:61:7d:08:0b:5c:
78:7e:5b:43:d9:39:9b:7b:0e:bb:84:da:4e:e8:2f:62:35:5b:
2c:fc:0e:0b:ef:5b:96:ba:86:a6:d5:01:d1:4c:87:a9:86:75:
b7:f1:71:b9:f8:3a:31:ce:a2:f3:9a:a7:e4:cb:e9:92:30:e0:
bb:1b:bf:97:42:c0:cb:84:fd:e3:d5:62:42:3f:fd:69:ca:c9:
49:6c:a3:dc:ee:c5:a1:6a:68:b0:96:62:5b:fa:56:3e:7a:92:
d5:42:4d:99:c1:7f:76:3d:88:fd:f2:3b:d1:be:67:9b:49:dc:
2d:df:70:46:c9:06:fe:2a:99:41:e2:d0:f2:ca:db:c5:a8:d0:
0f:77:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:10:08 2025 by rpki-client