Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/9ZOSWXkcSnrO_Vbu1GiI1JKFjwc.roa
File: 9ZOSWXkcSnrO_Vbu1GiI1JKFjwc.roa (raw, json)
Hash identifier: R0rY4k6nwFHm8brhMlPPrxg0QaT6192bcSTXdcAsmkk=
Subject key identifier: F5:93:92:59:79:1C:4A:7A:CE:FD:56:EE:D4:68:88:D4:92:85:8F:07
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019584278EC14BBF96431983119A4E073728
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/9ZOSWXkcSnrO_Vbu1GiI1JKFjwc.roa
Signing time: Tue 11 Mar 2025 07:42:19 +0000
ROA not before: Tue 11 Mar 2025 07:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 217.147.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 15:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:27:8e:c1:4b:bf:96:43:19:83:11:9a:4e:07:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Mar 11 07:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5939259791c4a7acefd56eed46888d492858f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:9e:0e:a0:3e:dd:53:d9:71:55:78:ee:4b:
ce:10:44:3c:08:b4:df:c6:f0:a5:2f:a1:cb:9c:99:
5c:2e:33:f7:19:75:e2:bc:58:63:65:2b:a3:cb:53:
f3:4a:ab:14:e1:6c:08:f4:b8:b2:69:3e:26:b9:42:
3f:c5:27:8a:9a:34:55:15:ee:ef:cb:78:b0:66:16:
df:f2:78:02:4b:a4:31:2c:3f:92:14:95:04:0e:76:
3e:9d:d1:f9:7f:4b:40:a6:e9:73:f4:30:64:47:37:
e7:b7:b5:e3:56:00:81:82:50:54:6c:d7:2c:25:fd:
58:8d:b3:1a:86:91:f5:f8:ff:6e:06:be:d3:18:b2:
ae:77:cf:60:96:35:b7:a4:6a:f4:ac:92:b9:4c:3f:
da:f8:48:60:ea:62:46:f3:25:1f:b0:84:6d:00:c5:
f6:75:f8:be:ed:46:e6:bc:ef:fc:3d:ab:a8:e6:bb:
f5:43:4a:56:dd:7f:a2:a0:36:bb:95:3a:84:33:8f:
b8:32:9f:55:35:a1:50:0e:ec:85:8d:af:bb:e6:97:
9a:bf:ec:5e:83:54:d2:7c:e6:39:3d:49:0c:8b:d6:
de:db:75:53:c0:36:69:aa:40:ec:1f:b9:ef:df:26:
af:ec:19:e5:39:23:99:db:d8:17:41:ae:fa:1d:d0:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:92:59:79:1C:4A:7A:CE:FD:56:EE:D4:68:88:D4:92:85:8F:07
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/9ZOSWXkcSnrO_Vbu1GiI1JKFjwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:16:c4:98:91:b4:8b:eb:06:4e:70:ed:be:9f:85:a9:80:c3:
84:a9:b5:f6:66:41:2d:6e:27:02:55:61:70:4e:bb:da:a4:df:
e3:76:ac:44:c3:4a:3a:e1:f8:24:1a:71:a7:03:ee:9b:ba:c1:
aa:4f:ca:31:45:95:80:10:7f:74:f9:fb:d2:31:38:87:b9:8d:
c2:61:68:c8:3d:d5:d2:38:e1:17:20:81:67:85:f0:66:cc:b4:
b0:d9:0a:7e:cc:b1:18:75:2e:50:d4:6a:50:2a:77:12:5e:e0:
8e:24:19:31:69:c4:1b:e2:2e:ed:37:87:69:36:9e:3b:33:4e:
69:d0:58:13:81:6b:e0:db:28:fe:4e:4b:9e:14:f2:e8:e1:7d:
aa:8c:b8:26:77:9e:1c:22:ec:34:48:fa:39:12:8a:a4:3e:b8:
98:63:1d:22:99:5c:0c:6f:53:f0:47:ec:85:45:b9:3b:ac:c3:
55:52:f5:85:9e:47:b4:07:43:46:b5:28:57:bb:bb:78:84:b0:
81:00:05:49:6b:b7:e6:20:26:56:7f:f2:bf:58:f1:67:25:73:
31:94:23:f3:24:51:6c:64:e8:ac:cb:76:41:8a:9f:c8:4d:85:
26:73:79:a5:03:91:ea:23:3d:9e:83:96:6e:92:17:ad:73:7e:
71:d5:ad:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWEJ47BS7+WQxmDEZpOBzcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2
NTZkNWEwHhcNMjUwMzExMDc0MjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTkzOTI1OTc5MWM0YTdhY2VmZDU2ZWVkNDY4ODhkNDkyODU4ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSueDqA+3VPZcVV47kvOEEQ8CLTf
xvClL6HLnJlcLjP3GXXivFhjZSujy1PzSqsU4WwI9LiyaT4muUI/xSeKmjRVFe7v
y3iwZhbf8ngCS6QxLD+SFJUEDnY+ndH5f0tApulz9DBkRzfnt7XjVgCBglBUbNcs
Jf1YjbMahpH1+P9uBr7TGLKud89gljW3pGr0rJK5TD/a+Ehg6mJG8yUfsIRtAMX2
dfi+7UbmvO/8Pauo5rv1Q0pW3X+ioDa7lTqEM4+4Mp9VNaFQDuyFja+75peav+xe
g1TSfOY5PUkMi9be23VTwDZpqkDsH7nv3yav7BnlOSOZ29gXQa76HdCsHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWTkll5HEp6zv1W7tRoiNSShY8HMB8GA1UdIwQY
MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt
MTc2OWZlZjZiZTk2LzEvOVpPU1dYa2NTbnJPX1ZidTFHaUkxSktGandjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2
LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOlMA0G
CSqGSIb3DQEBCwUAA4IBAQDBFsSYkbSL6wZOcO2+n4WpgMOEqbX2ZkEtbicCVWFw
TrvapN/jdqxEw0o64fgkGnGnA+6busGqT8oxRZWAEH90+fvSMTiHuY3CYWjIPdXS
OOEXIIFnhfBmzLSw2Qp+zLEYdS5Q1GpQKncSXuCOJBkxacQb4i7tN4dpNp47M05p
0FgTgWvg2yj+TkueFPLo4X2qjLgmd54cIuw0SPo5EoqkPriYYx0imVwMb1PwR+yF
Rbk7rMNVUvWFnke0B0NGtShXu7t4hLCBAAVJa7fmICZWf/K/WPFnJXMxlCPzJFFs
ZOisy3ZBip/ITYUmc3mlA5HqIz2eg5Zukhetc35x1a0G
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:30:55 2025 by rpki-client