Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/SlKrsUqhRYxYhBSNz7ws_g3cGiQ.roa
File: SlKrsUqhRYxYhBSNz7ws_g3cGiQ.roa (raw, json)
Hash identifier: Jv3UGOHOPf4UiRpjSYCJ5t9k/77kVD5Y2GWQYZvIw5Q=
Subject key identifier: 4A:52:AB:B1:4A:A1:45:8C:58:84:14:8D:CF:BC:2C:FE:0D:DC:1A:24
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019620721FCA430B1FA14E92598B8F529350
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/SlKrsUqhRYxYhBSNz7ws_g3cGiQ.roa
Signing time: Thu 10 Apr 2025 16:04:32 +0000
ROA not before: Thu 10 Apr 2025 16:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 104.207.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 22 Apr 2025 06:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:72:1f:ca:43:0b:1f:a1:4e:92:59:8b:8f:52:93:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 10 16:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a52abb14aa1458c5884148dcfbc2cfe0ddc1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:a6:a2:3c:6f:6f:d4:cb:b5:15:de:8b:58:
d9:78:b4:d5:a9:cb:00:42:22:29:5e:f7:60:ba:4c:
ec:ed:ad:bc:ba:4b:42:ef:ca:e3:5a:72:97:b8:56:
5f:1b:91:50:48:6d:14:17:e3:d5:2d:0a:91:5f:d5:
2c:6f:6a:51:50:a4:c9:a7:f7:10:27:22:f8:1e:f0:
e4:47:86:89:f9:95:39:18:3c:8f:09:83:dc:57:e6:
6a:3d:72:ec:92:44:00:0a:91:91:d7:19:47:87:32:
fb:8a:29:c2:43:ba:c6:b1:b2:88:f6:c6:43:81:3e:
42:4d:52:f9:73:1a:eb:d0:0d:86:21:a5:14:f9:59:
00:3a:d3:56:ca:69:7b:85:e4:a4:8c:ad:c4:72:5e:
c7:83:60:5e:c1:5e:a0:4d:0b:96:b1:b2:dc:83:b2:
b6:b7:28:93:e1:96:c6:96:9d:07:0f:a4:ff:2c:93:
6b:70:e3:ee:52:86:d9:83:01:9b:f5:e0:25:80:e6:
cc:be:53:9a:1c:76:37:50:0d:37:c8:6c:10:ed:30:
9e:5e:bc:45:73:83:4e:92:c6:65:56:e1:5f:49:71:
db:34:31:f7:a6:e2:b4:e3:df:1a:37:df:de:c1:28:
0b:59:3c:ff:cf:08:17:e1:2a:d9:72:95:67:59:4d:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:AB:B1:4A:A1:45:8C:58:84:14:8D:CF:BC:2C:FE:0D:DC:1A:24
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/SlKrsUqhRYxYhBSNz7ws_g3cGiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
55:43:c7:42:41:f6:54:2a:5f:c2:4b:a9:4a:02:3e:d7:81:50:
a2:63:98:1a:ee:02:8d:31:a1:e5:6b:7e:1a:85:7e:8e:3d:2c:
a4:23:bc:87:56:71:f4:9e:76:34:35:7c:ef:ae:93:96:4f:86:
0f:fc:2a:12:d6:62:61:16:2d:f2:e3:49:c1:7e:a6:3e:05:9f:
0b:2f:d4:77:85:cc:46:b0:47:08:f5:e3:9b:18:83:8a:43:c0:
2c:9b:76:0b:07:22:35:09:31:b8:5e:ab:04:b5:c0:c1:bd:16:
db:f1:06:06:c3:a1:a3:88:f2:05:a5:be:f4:56:63:be:39:7a:
ea:ab:65:eb:5b:00:e9:82:02:c7:df:b5:af:f1:5f:9e:1d:49:
3a:72:8e:dc:e8:25:32:11:1e:aa:14:07:a2:39:87:4a:ec:0d:
af:51:89:9a:6e:93:bc:f0:54:4f:ea:b4:cb:d2:c7:78:2c:d1:
e7:c2:2f:5f:ce:11:7d:c1:70:29:c3:cf:15:a6:a5:f6:87:de:
fc:fd:d5:bb:b6:c4:e9:0b:f0:24:d6:85:54:72:eb:0c:a6:f9:
f2:e8:5d:e8:5f:81:19:2a:c9:c2:22:4e:70:16:4b:6c:8d:56:
af:23:20:49:e6:e4:2a:4f:46:43:7c:cb:30:f7:7b:ed:76:84:
34:13:4c:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYgch/KQwsfoU6SWYuPUpNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjUwNDEwMTYwNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTUyYWJiMTRhYTE0NThjNTg4NDE0OGRjZmJjMmNmZTBkZGMxYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66mojxvb9TLtRXei1jZeLTVqcsA
QiIpXvdgukzs7a28uktC78rjWnKXuFZfG5FQSG0UF+PVLQqRX9Usb2pRUKTJp/cQ
JyL4HvDkR4aJ+ZU5GDyPCYPcV+ZqPXLskkQACpGR1xlHhzL7iinCQ7rGsbKI9sZD
gT5CTVL5cxrr0A2GIaUU+VkAOtNWyml7heSkjK3Ecl7Hg2BewV6gTQuWsbLcg7K2
tyiT4ZbGlp0HD6T/LJNrcOPuUobZgwGb9eAlgObMvlOaHHY3UA03yGwQ7TCeXrxF
c4NOksZlVuFfSXHbNDH3puK0498aN9/ewSgLWTz/zwgX4SrZcpVnWU0wiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpSq7FKoUWMWIQUjc+8LP4N3BokMB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvU2xLcnNVcWhSWXhZaEJTTno3d3NfZzNjR2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaM8gMA0G
CSqGSIb3DQEBCwUAA4IBAQBVQ8dCQfZUKl/CS6lKAj7XgVCiY5ga7gKNMaHla34a
hX6OPSykI7yHVnH0nnY0NXzvrpOWT4YP/CoS1mJhFi3y40nBfqY+BZ8LL9R3hcxG
sEcI9eObGIOKQ8Asm3YLByI1CTG4XqsEtcDBvRbb8QYGw6GjiPIFpb70VmO+OXrq
q2XrWwDpggLH37Wv8V+eHUk6co7c6CUyER6qFAeiOYdK7A2vUYmabpO88FRP6rTL
0sd4LNHnwi9fzhF9wXApw88VpqX2h978/dW7tsTpC/Ak1oVUcusMpvny6F3oX4EZ
KsnCIk5wFktsjVavIyBJ5uQqT0ZDfMsw93vtdoQ0E0xv
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:43 2025 by rpki-client