Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/ydlljgCzh3pEm0rrCobQpMoB3Bk.roa
File: ydlljgCzh3pEm0rrCobQpMoB3Bk.roa (raw, json)
Hash identifier: G2aCbrZPFfrt4ElX5WQzCdJr6ALbFHdZ6hptT5qH//8=
Subject key identifier: C9:D9:65:8E:00:B3:87:7A:44:9B:4A:EB:0A:86:D0:A4:CA:01:DC:19
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 0196FC5A3EA4E9D48373C1417A437F094A27
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/ydlljgCzh3pEm0rrCobQpMoB3Bk.roa
Signing time: Fri 23 May 2025 08:54:54 +0000
ROA not before: Fri 23 May 2025 08:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62412
IP address blocks: 192.140.228.0/24 maxlen: 24
192.140.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 06:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:5a:3e:a4:e9:d4:83:73:c1:41:7a:43:7f:09:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: May 23 08:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d9658e00b3877a449b4aeb0a86d0a4ca01dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:63:3a:c4:7c:7e:ea:5f:b1:16:8b:93:f9:
29:92:6b:71:91:5d:7b:ff:0f:22:66:3b:28:90:46:
71:7d:7d:f3:19:e3:1b:88:d5:e4:6a:86:cc:5a:17:
77:29:ec:da:b8:34:2c:3c:14:b9:a2:1c:9a:e4:69:
18:e0:37:9c:97:07:5b:55:2d:98:d8:14:d7:6b:3d:
44:f1:6b:78:52:94:3c:ce:46:8d:1e:8a:dd:a9:e0:
a4:d3:d0:3d:7a:59:7f:02:52:2a:55:4c:61:27:0a:
83:d1:45:6a:36:79:6f:d5:4c:a1:ea:23:d5:2d:7f:
ce:ac:60:23:e3:b4:89:4c:20:55:1c:82:fb:37:e2:
67:c8:cb:6d:39:34:ff:a0:bd:a3:02:ea:a7:f5:c0:
e9:81:97:d6:d5:40:6e:c1:f2:e5:bb:e9:df:d8:40:
73:7b:20:8f:b8:d5:0c:9e:77:ad:bf:39:78:45:e1:
d3:71:81:4c:00:b4:ac:1a:2a:db:b3:fd:be:2c:bd:
1c:02:94:af:11:de:f5:9c:30:5e:81:16:81:2f:d7:
ea:e0:f0:86:fa:a3:24:30:f4:71:a4:d9:19:88:0a:
af:62:2e:07:67:f1:7b:b0:40:71:f6:ec:1a:cc:39:
26:53:ac:06:14:de:c2:b9:db:29:f9:36:6b:6d:3f:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:65:8E:00:B3:87:7A:44:9B:4A:EB:0A:86:D0:A4:CA:01:DC:19
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/ydlljgCzh3pEm0rrCobQpMoB3Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e5:4b:b9:37:e3:d0:f8:91:d6:45:9b:1a:73:0e:00:54:b5:
1b:07:da:5a:05:6a:e0:1d:41:97:76:ed:4e:2f:2e:6d:28:a7:
7e:a9:54:d4:a6:0b:ad:7e:bc:16:72:e8:f4:48:08:58:95:b5:
e3:14:d7:af:6f:ff:b4:31:f4:3d:bc:1b:e7:ec:d5:ce:f8:00:
91:b6:10:f0:30:1a:ae:5f:1d:6d:ad:b6:26:32:ce:52:e6:65:
56:b6:45:90:90:c3:67:65:b6:c4:ca:34:5b:4d:27:e8:64:19:
db:9a:96:27:3d:e9:fc:23:91:01:a4:d6:a3:54:cc:ae:ac:8b:
cd:ec:21:9d:c0:5c:95:f5:5b:14:34:f1:f1:5a:78:95:d1:ce:
c0:b3:be:01:0c:d9:54:38:b1:2e:8c:01:f3:21:f9:a9:70:39:
58:16:53:49:db:e0:77:34:42:ea:a9:51:06:6e:51:cc:41:31:
53:79:2c:11:2c:08:76:8d:cd:71:99:21:3a:4d:46:95:11:5e:
d2:50:74:d5:e1:3d:c5:a7:58:19:c4:ea:d6:e2:1b:73:d9:8b:
43:be:f0:c5:d4:13:a6:53:4d:04:63:cb:46:c1:30:28:ac:b6:
60:b5:fe:63:71:f1:52:b1:89:25:a9:ee:2b:87:a8:37:6a:c8:
12:0c:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:22:29 2025 by rpki-client