Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/txVZzn-S3uqvk54NdnmljKgssxc.roa
File: txVZzn-S3uqvk54NdnmljKgssxc.roa (raw, json)
Hash identifier: pvuauaMorZegIEr5R9hW/5zA0cgEvRVFCAt0opX9qhc=
Subject key identifier: B7:15:59:CE:7F:92:DE:EA:AF:93:9E:0D:76:79:A5:8C:A8:2C:B3:17
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 019667FCEAF423177F8972104C809C46E50D
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/txVZzn-S3uqvk54NdnmljKgssxc.roa
Signing time: Thu 24 Apr 2025 13:29:10 +0000
ROA not before: Thu 24 Apr 2025 13:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16095
IP address blocks: 193.221.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:fc:ea:f4:23:17:7f:89:72:10:4c:80:9c:46:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Apr 24 13:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b71559ce7f92deeaaf939e0d7679a58ca82cb317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:d5:0f:1b:59:67:54:2e:66:d0:c9:0e:80:
d5:e6:c4:68:e8:db:4f:4d:dd:fc:c9:fd:b7:e3:10:
a4:42:e8:2a:46:6e:d8:73:b3:f2:67:56:d3:b3:ba:
04:c1:1d:dd:81:4f:bc:5b:d3:ff:9f:50:5e:29:74:
a3:9a:43:f7:26:bf:bf:1a:ef:7c:ac:76:5f:6b:97:
46:79:e5:de:75:09:66:8f:98:93:a5:33:25:89:7b:
20:68:f4:11:6f:ce:8c:e7:fb:29:f2:fd:ba:b4:9f:
5d:01:77:f7:91:e0:82:55:bd:1e:9a:9f:3c:f1:76:
b0:01:3f:12:83:1c:f9:1c:2e:32:ec:a4:cd:77:3d:
b2:c0:cd:40:eb:a7:37:11:b6:4d:72:ea:5b:21:a6:
c4:95:33:c9:9e:46:9c:1d:a8:80:ae:b5:ad:c7:dd:
ad:12:5a:50:2d:ef:49:8c:57:e2:53:73:bb:7a:68:
31:64:4b:9c:d8:86:7b:43:b0:4a:ee:38:26:99:b3:
3f:60:6c:25:b9:c3:44:f7:02:47:2d:67:0c:85:8f:
61:c1:1e:44:5e:fb:7e:49:2e:5e:a9:05:f0:c5:a0:
87:5e:da:70:29:0e:7b:ae:46:cd:11:4c:be:3a:df:
29:ef:ba:5a:36:c7:e4:89:f0:d6:e8:37:7a:2b:29:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:59:CE:7F:92:DE:EA:AF:93:9E:0D:76:79:A5:8C:A8:2C:B3:17
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/txVZzn-S3uqvk54NdnmljKgssxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7f:19:0d:09:cd:f7:6e:30:42:13:aa:79:c2:3a:17:c6:ce:
56:92:c7:96:5e:00:94:09:c3:81:e5:ef:74:19:07:c1:f7:e2:
6d:69:e1:ca:e4:0e:8a:1c:e0:a7:7a:60:a4:88:62:fc:0d:b7:
15:04:b5:79:ae:30:54:c8:6f:0b:1a:58:49:41:3f:38:2f:1b:
86:ac:6d:77:d3:9b:29:6c:fb:d6:bf:74:e6:a2:97:eb:ae:e7:
c2:bc:06:9b:59:2d:5a:e0:7e:50:57:4c:15:34:9e:36:9e:46:
f1:b4:b2:7b:61:f0:16:4c:cb:57:2b:e7:a7:2c:9f:81:fd:12:
10:c4:6b:9c:47:40:4b:b3:30:c5:15:d9:5e:9f:0f:59:56:b7:
8b:f9:ad:f4:8a:7b:7b:63:ca:d8:67:9d:9c:f3:76:16:57:4a:
48:89:d7:61:67:e5:de:54:e7:59:f7:43:5d:84:1f:e2:45:23:
c2:7f:6f:39:f1:ef:5f:8d:9a:f5:04:41:0e:64:ed:b4:ad:b9:
91:50:b4:47:0b:b5:56:c6:c7:86:b8:29:5a:c5:48:89:ea:dd:
31:f6:99:b8:47:e9:8c:c6:87:25:27:97:c2:cd:ba:65:c7:ca:
83:14:97:48:14:40:98:a9:4d:ae:09:42:fd:04:b9:25:1d:fa:
fe:7e:44:83
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZZn/Or0Ixd/iXIQTICcRuUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhN2NmYWM2YWYxMDg2NjBkOTRlMmZjZWQ2MWU2MWZmMjE5
YzBhNTYwHhcNMjUwNDI0MTMyOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzE1NTljZTdmOTJkZWVhYWY5MzllMGQ3Njc5YTU4Y2E4MmNiMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G7VDxtZZ1QuZtDJDoDV5sRo6NtP
Td38yf234xCkQugqRm7Yc7PyZ1bTs7oEwR3dgU+8W9P/n1BeKXSjmkP3Jr+/Gu98
rHZfa5dGeeXedQlmj5iTpTMliXsgaPQRb86M5/sp8v26tJ9dAXf3keCCVb0emp88
8XawAT8Sgxz5HC4y7KTNdz2ywM1A66c3EbZNcupbIabElTPJnkacHaiArrWtx92t
ElpQLe9JjFfiU3O7emgxZEuc2IZ7Q7BK7jgmmbM/YGwlucNE9wJHLWcMhY9hwR5E
Xvt+SS5eqQXwxaCHXtpwKQ57rkbNEUy+Ot8p77paNsfkifDW6Dd6KymMawIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLcVWc5/kt7qr5OeDXZ5pYyoLLMXMB8GA1UdIwQY
MBaAFPp8+savEIZg2U4vztYeYf8hnApWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uejZ4cThRaG1EWlRpX08xaDVoX3lHY0NsWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFl
LTMyYTQxYmEzZTNjNS8xL3R4Vlp6bi1TM3Vxdms1NE5kbm1saktnc3N4Yy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFlLTMyYTQxYmEzZTNj
NS8xLzEtbno2eHE4UWhtRFpUaV9PMWg1aF95R2NDbFkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADB3Xww
DQYJKoZIhvcNAQELBQADggEBAKx/GQ0JzfduMEITqnnCOhfGzlaSx5ZeAJQJw4Hl
73QZB8H34m1p4crkDooc4Kd6YKSIYvwNtxUEtXmuMFTIbwsaWElBPzgvG4asbXfT
myls+9a/dOail+uu58K8BptZLVrgflBXTBU0njaeRvG0snth8BZMy1cr56csn4H9
EhDEa5xHQEuzMMUV2V6fD1lWt4v5rfSKe3tjythnnZzzdhZXSkiJ12Fn5d5U51n3
Q12EH+JFI8J/bznx71+NmvUEQQ5k7bStuZFQtEcLtVbGx4a4KVrFSInq3TH2mbhH
6YzGhyUnl8LNumXHyoMUl0gUQJipTa4JQv0EuSUd+v5+RIM=
-----END CERTIFICATE-----
Generated at Sat May 3 07:00:46 2025 by rpki-client