Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/CjprQcejkFUNL24lamtIqUanG7w.roa
File: CjprQcejkFUNL24lamtIqUanG7w.roa (raw, json)
Hash identifier: GjdXwZbJMlj2HBCsZaH7bLZ/XnLr0hypvG18NyUu5dY=
Subject key identifier: 0A:3A:6B:41:C7:A3:90:55:0D:2F:6E:25:6A:6B:48:A9:46:A7:1B:BC
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 0197357DF9978A874A0428A4EE878999542D
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/CjprQcejkFUNL24lamtIqUanG7w.roa
Signing time: Tue 03 Jun 2025 11:12:17 +0000
ROA not before: Tue 03 Jun 2025 11:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41174
IP address blocks: 185.84.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 12:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:7d:f9:97:8a:87:4a:04:28:a4:ee:87:89:99:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Jun 3 11:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a3a6b41c7a390550d2f6e256a6b48a946a71bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:ad:01:ad:5e:8f:5c:ff:6c:f9:5a:ad:4c:
d5:d8:66:88:93:98:a1:f1:12:54:42:46:ca:45:94:
bf:4a:c5:9b:8e:cd:20:35:ba:13:32:56:9b:54:1a:
dd:b5:ac:4e:46:5b:aa:ee:7a:bc:01:7b:67:a8:34:
4b:af:8d:e0:f4:ce:db:56:6d:af:e8:fa:a5:33:de:
eb:67:99:4b:70:e5:4d:b8:42:7c:6b:49:26:c7:08:
bd:53:64:89:a5:f7:64:68:21:4a:f5:ac:d4:b5:37:
3e:02:c5:cb:cf:cc:c2:25:28:aa:a4:ed:e8:11:b4:
ff:58:fe:6d:32:45:57:66:d5:95:b8:ed:aa:41:e9:
54:1e:80:3c:9a:7b:f1:09:7b:f0:e0:17:a2:2e:b6:
33:47:1e:5b:35:21:3d:6a:85:4f:5d:67:93:61:dc:
6c:69:c0:8e:2d:ff:f1:a5:17:f2:d1:64:bf:3c:b8:
e1:84:d2:d8:2c:57:48:26:f1:24:99:0e:fd:d8:77:
20:5e:05:19:53:8e:d5:2f:77:d6:e5:23:b1:89:aa:
c2:be:38:0d:1e:1b:2c:b3:94:2e:40:5c:25:0e:5d:
42:d0:ff:67:c6:1b:f4:9e:04:fd:7b:bd:f9:64:7d:
cd:8d:08:10:fa:be:9f:25:ff:83:ef:b2:07:a1:45:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:6B:41:C7:A3:90:55:0D:2F:6E:25:6A:6B:48:A9:46:A7:1B:BC
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/CjprQcejkFUNL24lamtIqUanG7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e9:45:c7:0b:ae:e6:95:a0:a7:d1:42:ac:9c:37:f6:fe:97:
26:61:5b:5b:59:48:57:13:a2:ba:85:ba:eb:46:cd:46:ff:64:
81:2a:83:c8:8b:6a:7a:c9:69:80:11:33:54:28:0e:6c:19:98:
dd:97:15:e5:5c:92:3f:ce:9d:9f:2f:a1:12:d7:63:07:ce:36:
e7:4e:cb:70:76:38:1e:20:d2:95:46:ea:f4:42:3c:4e:3a:c0:
01:4c:47:bd:2f:e0:fe:96:b6:c0:d0:9a:32:6e:0b:cd:09:87:
86:7d:be:82:8c:e8:a5:42:16:0a:35:61:b6:2b:51:93:80:d1:
f4:70:10:79:68:5c:26:94:a9:ab:f7:93:53:65:52:f0:18:a9:
d8:60:94:4f:e3:9e:8d:97:9a:23:92:e3:1c:14:25:e9:90:99:
50:f8:db:a1:00:54:ad:0b:91:6a:c1:2c:b7:3d:93:f7:91:36:
83:36:d5:bf:01:43:5b:b7:eb:8d:01:3d:03:0c:f1:39:13:08:
f1:c1:27:57:77:a4:14:97:d4:25:ff:83:60:53:7f:00:aa:15:
f9:30:82:fe:11:b9:df:10:af:b4:ab:b2:62:f4:01:56:5b:af:
5e:ba:d0:62:24:4f:64:51:ab:7f:01:23:0f:3e:4d:c7:47:cf:
3f:b7:4c:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc1ffmXiodKBCik7oeJmVQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh
ZWRkYjMwHhcNMjUwNjAzMTExMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTNhNmI0MWM3YTM5MDU1MGQyZjZlMjU2YTZiNDhhOTQ2YTcxYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q6tAa1ej1z/bPlarUzV2GaIk5ih
8RJUQkbKRZS/SsWbjs0gNboTMlabVBrdtaxORluq7nq8AXtnqDRLr43g9M7bVm2v
6PqlM97rZ5lLcOVNuEJ8a0kmxwi9U2SJpfdkaCFK9azUtTc+AsXLz8zCJSiqpO3o
EbT/WP5tMkVXZtWVuO2qQelUHoA8mnvxCXvw4BeiLrYzRx5bNSE9aoVPXWeTYdxs
acCOLf/xpRfy0WS/PLjhhNLYLFdIJvEkmQ792HcgXgUZU47VL3fW5SOxiarCvjgN
Hhsss5QuQFwlDl1C0P9nxhv0ngT9e735ZH3NjQgQ+r6fJf+D77IHoUXGpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAo6a0HHo5BVDS9uJWprSKlGpxu8MB8GA1UdIwQY
MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt
ZmVjNmMyNzAxZWRhLzEvQ2pwclFjZWprRlVOTDI0bGFtdElxVWFuRzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh
LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVQ2MA0G
CSqGSIb3DQEBCwUAA4IBAQB66UXHC67mlaCn0UKsnDf2/pcmYVtbWUhXE6K6hbrr
Rs1G/2SBKoPIi2p6yWmAETNUKA5sGZjdlxXlXJI/zp2fL6ES12MHzjbnTstwdjge
INKVRur0QjxOOsABTEe9L+D+lrbA0JoybgvNCYeGfb6CjOilQhYKNWG2K1GTgNH0
cBB5aFwmlKmr95NTZVLwGKnYYJRP456Nl5ojkuMcFCXpkJlQ+NuhAFStC5FqwSy3
PZP3kTaDNtW/AUNbt+uNAT0DDPE5EwjxwSdXd6QUl9Ql/4NgU38AqhX5MIL+Ebnf
EK+0q7Ji9AFWW69eutBiJE9kUat/ASMPPk3HR88/t0xB
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:24 2025 by rpki-client