Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R36gDV8Rv1vwgoVkPTurczXfbd4.roa
File: R36gDV8Rv1vwgoVkPTurczXfbd4.roa (raw, json)
Hash identifier: XCqmSNnMrZX5w2qEa4MAon2YuwcNrhdEzTbIsRWEjvc=
Subject key identifier: 47:7E:A0:0D:5F:11:BF:5B:F0:82:85:64:3D:3B:AB:73:35:DF:6D:DE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 01975A1950B998CEF7BC94F018594EF4051F
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R36gDV8Rv1vwgoVkPTurczXfbd4.roa
Signing time: Tue 10 Jun 2025 13:48:17 +0000
ROA not before: Tue 10 Jun 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.5.96.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 15:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:19:50:b9:98:ce:f7:bc:94:f0:18:59:4e:f4:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jun 10 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477ea00d5f11bf5bf08285643d3bab7335df6dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:77:1b:1c:6e:59:92:13:62:1c:25:44:c4:
96:8e:ae:c5:a1:23:0c:e7:fc:fa:59:f6:b4:bb:61:
a5:a8:d5:17:a2:5c:10:62:f1:e3:03:c8:91:01:f3:
1c:24:93:cd:55:a8:c3:e6:9d:61:43:b6:9f:4e:cd:
35:1f:b2:ae:fd:1d:dd:23:4f:1f:24:d8:90:ff:e2:
ad:ba:da:95:20:84:63:35:ac:35:d7:19:3d:5a:1e:
22:51:92:dd:9b:e0:6e:b7:92:5a:60:39:cf:5c:11:
59:1a:e5:d3:9b:6c:76:6d:77:e4:d7:b6:45:62:f1:
0d:c5:86:fa:c8:14:0c:33:9b:b2:dc:c1:b5:9a:a1:
26:db:39:3a:eb:a6:7c:56:de:85:56:18:48:f8:64:
ee:17:83:de:81:4a:5b:13:6f:da:b9:03:02:56:cb:
46:be:98:fe:de:16:8a:20:aa:bc:b9:d4:8a:1d:60:
81:e1:5d:7b:57:30:6e:5b:84:04:ec:40:0f:2c:c9:
b7:14:db:f0:5c:96:0d:d6:13:36:56:4d:51:e1:49:
36:bd:ee:30:a0:a4:eb:17:01:52:39:da:0c:43:ab:
30:87:81:15:70:0a:ab:50:77:88:32:d5:76:21:ea:
7b:fd:1f:b5:26:f9:93:42:b4:26:7f:4c:4d:27:bd:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:A0:0D:5F:11:BF:5B:F0:82:85:64:3D:3B:AB:73:35:DF:6D:DE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/R36gDV8Rv1vwgoVkPTurczXfbd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.96.0-194.5.98.255
Signature Algorithm: sha256WithRSAEncryption
a3:6f:0d:cd:a3:eb:52:84:95:12:94:90:8f:81:4e:cc:35:4e:
44:56:93:9f:cb:50:76:89:d8:5f:5d:ef:70:8d:db:1d:9c:34:
c4:d1:8b:66:b3:3e:de:3c:35:d2:bd:e4:e1:c6:b1:e7:45:2b:
cb:ab:14:41:3a:4e:bc:25:92:a7:bf:d6:bd:28:b3:54:72:1c:
81:aa:ea:90:63:2e:6d:1e:2c:b7:8a:65:76:ae:b1:1c:d4:f6:
3c:dc:b8:ee:ec:cf:20:82:60:96:1e:e3:fc:dd:47:d5:9f:1c:
cd:43:45:8f:75:52:71:a8:d6:4b:36:2f:2a:dd:0b:3c:4c:91:
a2:8f:e5:54:ac:5d:d9:b6:73:a6:a6:55:89:d5:69:06:fa:75:
b5:c7:f0:62:50:94:38:56:cb:11:4e:4f:3e:1f:4b:b7:86:f7:
79:2f:55:3d:f5:8d:37:3e:5a:29:3f:1e:d5:7b:b8:28:a7:17:
cf:46:22:16:18:38:63:a2:7f:c7:a9:6b:de:6c:a3:06:64:ad:
2a:eb:75:33:62:b3:85:c2:dd:8a:07:66:77:8a:5f:eb:da:af:
5d:43:0c:d2:7c:72:42:49:29:18:24:6b:c3:13:95:87:b2:d9:
f0:c1:f2:6d:1b:89:ee:1f:56:e6:b8:df:b8:03:07:87:00:a3:
0e:97:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:25:55 2025 by rpki-client