Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q8elEqpbTJNoY5FXhWXlplF4Yak.roa
File: Q8elEqpbTJNoY5FXhWXlplF4Yak.roa (raw, json)
Hash identifier: V+XLJhKc7QbcI5VQfZYIooWyYKY/wdMPqj9gsuJCf0k=
Subject key identifier: 43:C7:A5:12:AA:5B:4C:93:68:63:91:57:85:65:E5:A6:51:78:61:A9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01971888999D55545294DF96820912BC8DB4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q8elEqpbTJNoY5FXhWXlplF4Yak.roa
Signing time: Wed 28 May 2025 20:14:54 +0000
ROA not before: Wed 28 May 2025 20:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 205.237.92.0/23 maxlen: 23
205.237.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 17 Jun 2025 16:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:88:99:9d:55:54:52:94:df:96:82:09:12:bc:8d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 28 20:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c7a512aa5b4c93686391578565e5a6517861a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:6b:70:02:c6:da:4f:7d:8f:ba:f4:e6:e2:
1a:84:25:0f:ff:e4:25:d7:f3:34:d2:7c:58:57:02:
98:56:f6:83:87:39:cb:5c:28:9e:89:a4:4d:b9:a8:
25:8c:4b:b2:70:14:5b:a6:34:9b:b8:29:50:fb:a2:
36:28:da:69:39:78:b9:20:c7:9a:35:b0:54:5e:30:
33:3d:42:86:1c:28:41:16:15:f5:c7:77:bc:f4:d4:
45:96:c1:f0:3e:c2:8e:e5:dd:8d:4b:c1:d7:4d:95:
3f:49:fc:8d:1d:de:27:1e:43:39:4e:07:da:79:54:
60:1a:2c:a1:de:1c:5b:8d:97:08:12:4e:2f:ee:7e:
fd:22:aa:f4:81:af:6f:b5:81:84:dd:41:42:28:3d:
4f:9e:b3:ae:75:e9:a1:31:10:15:03:aa:72:65:0e:
02:8d:0e:aa:57:a1:d5:6e:78:a2:3f:01:1f:31:f0:
7a:8b:95:86:e6:8c:dd:c1:5e:f8:25:99:fe:66:6f:
e9:08:55:65:6c:d7:45:0e:52:30:b0:31:ce:12:50:
03:3d:c3:94:3c:1e:f7:81:d2:6d:62:c6:fd:68:db:
16:d2:da:f1:7b:17:01:4d:67:d7:db:1a:d9:b6:83:
49:d3:5e:e1:91:df:16:3d:ab:da:a3:4d:24:5c:d9:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:A5:12:AA:5B:4C:93:68:63:91:57:85:65:E5:A6:51:78:61:A9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q8elEqpbTJNoY5FXhWXlplF4Yak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
46:71:76:f8:bc:a4:f3:ab:2f:90:7b:2b:8a:b0:48:46:22:a0:
8e:67:79:64:1f:67:7f:dc:d3:5b:c0:e3:51:83:da:5c:7a:bc:
70:44:05:46:3e:09:92:43:3a:d7:60:88:18:68:36:17:d2:a7:
0b:1d:99:ae:44:fe:1e:2b:84:c7:80:85:b9:4a:23:ba:55:1e:
64:66:ab:98:71:73:42:75:62:9f:f6:4f:29:52:97:7d:ee:d9:
36:a4:26:2d:df:8e:25:79:a6:b9:51:aa:cc:45:70:59:eb:85:
b2:87:7c:76:27:d6:1b:98:58:e0:9b:88:25:3a:61:12:23:a3:
6a:68:a4:4b:b3:7f:6b:ff:5e:da:15:b4:78:8b:bb:24:15:89:
ac:e3:df:1b:6a:6c:2f:92:c9:04:62:49:fc:20:ab:c4:7e:23:
6a:ae:46:b7:20:b7:f5:6c:15:47:15:2f:b9:bc:5e:eb:60:71:
f8:bf:1f:41:74:47:d4:7b:4c:4d:04:56:90:e0:8b:a4:3f:2c:
a5:42:05:c2:c7:d3:9b:38:79:55:e1:41:96:ae:b3:68:1e:b1:
15:e6:5f:ba:3f:5d:8b:d5:f8:87:8f:1c:bb:19:17:2a:45:43:
ef:e3:6e:6d:11:d8:ee:ed:f0:fb:40:e9:2c:bf:50:2f:a7:b7:
1e:4e:37:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcYiJmdVVRSlN+WggkSvI20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNTI4MjAxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2M3YTUxMmFhNWI0YzkzNjg2MzkxNTc4NTY1ZTVhNjUxNzg2MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrhrcALG2k99j7r05uIahCUP/+Ql
1/M00nxYVwKYVvaDhznLXCieiaRNuagljEuycBRbpjSbuClQ+6I2KNppOXi5IMea
NbBUXjAzPUKGHChBFhX1x3e89NRFlsHwPsKO5d2NS8HXTZU/SfyNHd4nHkM5Tgfa
eVRgGiyh3hxbjZcIEk4v7n79Iqr0ga9vtYGE3UFCKD1PnrOudemhMRAVA6pyZQ4C
jQ6qV6HVbniiPwEfMfB6i5WG5ozdwV74JZn+Zm/pCFVlbNdFDlIwsDHOElADPcOU
PB73gdJtYsb9aNsW0trxexcBTWfX2xrZtoNJ017hkd8WPavao00kXNl1WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPHpRKqW0yTaGORV4Vl5aZReGGpMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUThlbEVxcGJUSk5vWTVGWGhXWGxwbEY0WWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCze1cMA0G
CSqGSIb3DQEBCwUAA4IBAQBGcXb4vKTzqy+QeyuKsEhGIqCOZ3lkH2d/3NNbwONR
g9pcerxwRAVGPgmSQzrXYIgYaDYX0qcLHZmuRP4eK4THgIW5SiO6VR5kZquYcXNC
dWKf9k8pUpd97tk2pCYt344leaa5UarMRXBZ64Wyh3x2J9YbmFjgm4glOmESI6Nq
aKRLs39r/17aFbR4i7skFYms498bamwvkskEYkn8IKvEfiNqrka3ILf1bBVHFS+5
vF7rYHH4vx9BdEfUe0xNBFaQ4IukPyylQgXCx9ObOHlV4UGWrrNoHrEV5l+6P12L
1fiHjxy7GRcqRUPv425tEdju7fD7QOksv1Avp7ceTje+
-----END CERTIFICATE-----
Generated at Fri Jun 20 17:22:18 2025 by rpki-client