Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/itsvZAGR-7UYqTTBI8NZYWwoClk.roa
File: itsvZAGR-7UYqTTBI8NZYWwoClk.roa (raw, json)
Hash identifier: 87/Yz7i3c4NAP5KY9oyqrhtHHGk1UsDxZNxI/EQeuOM=
Subject key identifier: 8A:DB:2F:64:01:91:FB:B5:18:A9:34:C1:23:C3:59:61:6C:28:0A:59
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019420D5CB2CDE77A633386624591BA19C88
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/itsvZAGR-7UYqTTBI8NZYWwoClk.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 137.56.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:2c:de:77:a6:33:38:66:24:59:1b:a1:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8adb2f640191fbb518a934c123c359616c280a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:27:1e:7a:4f:c1:dc:d1:61:c4:ce:09:59:
b7:bb:c7:36:8d:45:df:a6:20:6f:ed:5a:8e:13:03:
a1:85:fd:78:a6:d3:ec:51:db:3c:2b:64:95:8d:fb:
b4:71:d8:b1:6e:c6:16:ef:ff:58:b2:68:82:4a:6e:
03:04:b6:77:10:94:68:21:3e:88:57:a6:bb:da:c7:
ff:8c:00:0d:b4:c6:52:3a:86:1c:da:a1:f9:96:ad:
27:15:dc:36:e9:68:97:54:13:88:19:85:a6:17:bb:
4e:df:cd:3a:1b:4f:4e:f2:83:39:7f:a4:b6:04:c2:
20:f2:0b:f0:0c:31:fd:65:03:c3:d9:bb:09:f7:1b:
90:1a:aa:e8:e1:02:81:31:9f:e0:b7:f6:98:32:aa:
90:9c:05:9d:65:e9:91:5a:e8:3e:c0:73:8c:65:86:
05:dc:6d:4c:5f:19:9a:2d:ef:f8:dc:f0:1d:2c:de:
58:1b:a9:2a:70:ae:8a:26:c7:77:67:46:18:cb:c5:
2a:43:a3:68:fc:f7:b6:5f:eb:4a:21:33:3d:ff:18:
44:bf:23:0a:1e:b4:33:2b:be:5b:72:6a:59:8a:50:
9c:1e:99:5c:47:00:0e:64:d0:34:52:f6:44:b8:d0:
e8:1f:73:1c:bb:e0:ea:ad:1f:d2:63:f1:df:b2:8f:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:2F:64:01:91:FB:B5:18:A9:34:C1:23:C3:59:61:6C:28:0A:59
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/itsvZAGR-7UYqTTBI8NZYWwoClk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:69:8b:e6:de:f6:9e:80:cf:fe:b3:bf:c7:3b:df:40:be:51:
16:d1:00:b1:6c:2e:00:21:c6:71:32:e6:63:11:81:3e:b9:8f:
8d:a2:1f:23:1e:f0:f5:21:8e:00:e2:9a:b4:d6:ab:cd:e3:a5:
e6:98:be:19:6a:47:2c:63:5d:fe:ed:0c:c0:f2:a9:6e:e5:cf:
94:87:de:8c:8b:ae:c1:c0:c0:c9:44:4c:71:81:b6:e7:f1:98:
57:5e:d8:f9:02:eb:a8:36:70:8f:5c:53:98:c2:78:30:53:d1:
4d:bf:ec:2c:93:16:e8:1e:95:ec:aa:24:4a:7e:ee:fb:7f:9d:
f0:e0:89:0b:59:61:49:b3:1d:83:04:cc:a7:ce:51:22:bc:b9:
5d:31:38:b2:19:51:04:5e:4c:7a:0b:79:8b:fe:c4:72:61:f3:
4b:98:22:e3:3e:16:b0:5b:7c:5f:20:07:af:a5:f2:af:11:fa:
dc:4b:7f:48:0d:8b:3f:91:a9:60:d1:17:ad:1f:f9:2d:29:ca:
41:43:f5:9f:dd:eb:73:4b:2e:c6:7c:1c:49:97:40:7f:e3:05:
48:47:3c:95:10:9c:bf:49:32:cb:8a:6a:0f:9f:3b:18:d7:8b:
2a:e9:7f:08:5a:3c:71:60:b6:10:13:b2:f4:45:08:c0:94:b3:
ea:b9:1c:59
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQg1css3nemMzhmJFkboZyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRiMmY2NDAxOTFmYmI1MThhOTM0YzEyM2MzNTk2MTZjMjgwYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArConHnpPwdzRYcTOCVm3u8c2jUXf
piBv7VqOEwOhhf14ptPsUds8K2SVjfu0cdixbsYW7/9YsmiCSm4DBLZ3EJRoIT6I
V6a72sf/jAANtMZSOoYc2qH5lq0nFdw26WiXVBOIGYWmF7tO3806G09O8oM5f6S2
BMIg8gvwDDH9ZQPD2bsJ9xuQGqro4QKBMZ/gt/aYMqqQnAWdZemRWug+wHOMZYYF
3G1MXxmaLe/43PAdLN5YG6kqcK6KJsd3Z0YYy8UqQ6No/Pe2X+tKITM9/xhEvyMK
HrQzK75bcmpZilCcHplcRwAOZNA0UvZEuNDoH3Mcu+DqrR/SY/Hfso8b8QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFIrbL2QBkfu1GKk0wSPDWWFsKApZMB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaXRzdlpBR1ItN1VZcVRUQkk4TlpZV3dvQ2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiTgwDQYJ
KoZIhvcNAQELBQADggEBAGVpi+be9p6Az/6zv8c730C+URbRALFsLgAhxnEy5mMR
gT65j42iHyMe8PUhjgDimrTWq83jpeaYvhlqRyxjXf7tDMDyqW7lz5SH3oyLrsHA
wMlETHGBtufxmFde2PkC66g2cI9cU5jCeDBT0U2/7CyTFugeleyqJEp+7vt/nfDg
iQtZYUmzHYMEzKfOUSK8uV0xOLIZUQReTHoLeYv+xHJh80uYIuM+FrBbfF8gB6+l
8q8R+txLf0gNiz+RqWDRF60f+S0pykFD9Z/d63NLLsZ8HEmXQH/jBUhHPJUQnL9J
MsuKag+fOxjXiyrpfwhaPHFgthATsvRFCMCUs+q5HFk=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:07:42 2025 by rpki-client