Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/2RYmzo0j8-9NKotuMeYyYAPNgU8.roa
File: 2RYmzo0j8-9NKotuMeYyYAPNgU8.roa (raw, json)
Hash identifier: dQeKs2V9RiXvJaArh4lgDd39V7zR4BiL0g0J6y6lL3s=
Subject key identifier: D9:16:26:CE:8D:23:F3:EF:4D:2A:8B:6E:31:E6:32:60:03:CD:81:4F
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0197BEF5666622B1162115784A4157F7F682
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/2RYmzo0j8-9NKotuMeYyYAPNgU8.roa
Signing time: Mon 30 Jun 2025 03:50:42 +0000
ROA not before: Mon 30 Jun 2025 03:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:f5:66:66:22:b1:16:21:15:78:4a:41:57:f7:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jun 30 03:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d91626ce8d23f3ef4d2a8b6e31e6326003cd814f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f5:15:9c:17:55:32:03:6f:4d:82:13:8a:64:
a2:0e:68:73:b5:02:93:67:54:e4:d7:9b:79:2c:a8:
8a:f3:de:ec:a4:87:d4:3a:84:41:9b:64:34:02:93:
09:10:05:03:d8:66:01:fe:e7:89:17:05:2a:2d:06:
b0:62:00:86:0e:92:f9:89:20:79:fb:56:f1:18:6a:
5a:45:22:a2:0a:fd:7f:33:fe:41:21:c5:ac:b9:fc:
fb:39:9b:25:a0:e5:e2:58:df:d8:47:ad:88:f4:1c:
23:63:6a:54:da:85:43:99:6c:25:0b:6d:43:82:00:
19:9c:39:9b:86:7f:b1:ae:03:e9:81:db:d0:73:95:
8c:41:12:21:46:51:46:21:1c:6c:a9:c6:b4:3c:e4:
37:a2:92:51:35:21:cf:b1:f1:62:30:ef:4f:05:a8:
b5:ce:9d:9d:59:82:c6:07:4e:05:96:fc:7d:3c:71:
e4:ce:3f:fa:9d:d9:cd:91:ae:3a:07:27:d6:d6:f9:
61:01:17:cc:a1:40:bf:5a:31:44:48:9c:9e:ff:23:
80:7f:b0:43:fc:ba:be:db:ec:5a:ee:9b:00:f8:a3:
f2:f5:2c:f7:f2:b5:de:0e:f1:c4:45:77:7f:a6:5e:
a2:1b:82:1d:1c:2c:51:96:99:85:ef:95:0a:e0:c3:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:26:CE:8D:23:F3:EF:4D:2A:8B:6E:31:E6:32:60:03:CD:81:4F
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/2RYmzo0j8-9NKotuMeYyYAPNgU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a2:f2:df:00:ba:7a:c6:2e:ed:be:a6:e0:bb:c9:89:46:ef:
1d:8f:c8:45:26:d6:38:4f:fa:46:c0:ec:49:26:b6:09:e3:a1:
cb:c0:e9:2b:70:02:11:b6:e4:2a:14:e2:0b:12:af:c8:4c:d1:
17:06:6c:7a:a2:92:16:5d:b5:04:46:c5:63:09:f1:59:45:fd:
4a:5e:81:f3:0a:8c:51:a7:80:3d:d4:ae:c7:30:77:f8:61:cb:
34:fb:f2:34:af:a1:ed:90:8d:05:b2:dd:6f:84:24:cd:1e:af:
f0:1b:1b:5a:14:b3:69:4c:32:a8:57:4c:d1:55:23:d0:c0:61:
4f:92:cf:53:ea:dc:03:de:47:27:ff:81:06:52:62:b4:5f:e3:
1a:64:4c:36:d8:9c:b3:15:79:02:ef:28:95:7e:c4:e8:45:e5:
92:07:1e:b2:0b:db:a0:83:0c:54:e9:2f:a4:9b:14:25:c0:fb:
a4:be:7e:f4:a6:94:31:32:77:b5:5c:8c:79:76:f4:57:14:b2:
78:07:23:8a:5b:47:81:26:31:57:78:58:f8:54:d8:45:7a:b0:
34:28:21:2a:b0:2d:a4:64:bf:d4:c8:5e:a7:ef:9e:98:8f:7d:
39:d6:92:3f:56:d1:1c:8d:a6:c4:5b:c3:74:28:ed:5b:5b:ee:
74:95:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:36:44 2025 by rpki-client