Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/c3i5V6gFatIR2iL19ETVEReZK9s.roa
File: c3i5V6gFatIR2iL19ETVEReZK9s.roa (raw, json)
Hash identifier: yM4oVLPmpdT1Fel5fJGhdfbBb1IO28rpq/UdbL20iwo=
Subject key identifier: 73:78:B9:57:A8:05:6A:D2:11:DA:22:F5:F4:44:D5:11:17:99:2B:DB
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0197CFB124C33906E6BCB4C9F867EDBBB125
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/c3i5V6gFatIR2iL19ETVEReZK9s.roa
Signing time: Thu 03 Jul 2025 09:49:42 +0000
ROA not before: Thu 03 Jul 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
194.97.137.0/24 maxlen: 24
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.21.0/24 maxlen: 24
195.30.50.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
195.30.121.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:a04::/48 maxlen: 48
2001:608:e03::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 18 Jul 2025 11:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:b1:24:c3:39:06:e6:bc:b4:c9:f8:67:ed:bb:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jul 3 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7378b957a8056ad211da22f5f444d51117992bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:a2:0b:59:7f:57:fa:1d:a4:6d:ec:62:b9:
36:9d:c6:79:58:92:bd:6f:6a:1f:cd:bd:46:d8:d8:
78:49:cc:6e:d2:91:21:56:7f:b1:6b:70:10:28:49:
aa:b0:b9:1f:81:4b:c5:e1:42:5a:e1:23:bd:41:f0:
06:f1:c4:2c:b1:13:72:99:14:c8:12:69:d3:b4:21:
96:cd:fc:42:8e:d6:0a:4d:89:e8:13:bf:29:eb:ca:
6a:04:21:c2:ae:f1:96:71:a1:15:e7:e2:da:24:13:
99:68:c0:6b:c1:42:bf:66:74:17:07:bc:f5:32:68:
b1:79:5f:70:53:fd:2d:42:eb:f5:7c:5e:8c:d0:21:
52:8f:a2:b8:eb:b7:97:ae:02:d6:b0:0d:9e:aa:70:
4a:aa:a5:8a:24:bd:34:cc:37:b6:6e:72:69:29:d0:
4f:81:cb:bd:9d:94:27:31:ce:83:04:c0:de:ad:0e:
17:85:44:4e:f8:e8:3f:91:e0:33:be:f6:a8:95:bb:
e3:6b:8b:e2:28:6f:bc:a2:fd:4c:c8:ea:5a:6e:27:
0f:0a:02:fd:3c:c0:0a:1a:03:e1:24:8b:1c:9f:e8:
95:9b:3c:f7:1a:44:f3:e4:b0:b7:9b:80:02:e6:e1:
72:f1:2f:c7:7e:1a:62:eb:33:45:e6:76:41:76:a8:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:B9:57:A8:05:6A:D2:11:DA:22:F5:F4:44:D5:11:17:99:2B:DB
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/c3i5V6gFatIR2iL19ETVEReZK9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
85:82:27:8f:62:b9:c7:09:1d:d2:ae:3f:49:ee:9d:71:2e:bb:
34:e5:d2:3e:34:1f:cc:33:f3:11:01:61:6f:50:01:a3:f2:7e:
68:3b:f3:9e:24:19:06:18:29:e9:b5:1c:90:d6:df:43:7f:26:
53:5f:3e:fb:41:1d:14:a6:b8:91:63:e9:b3:8d:58:ed:b9:5f:
08:9f:a9:e3:a7:2a:e0:ab:73:11:5b:e4:78:63:71:69:23:3c:
6f:df:d5:7b:6e:e4:bc:7d:d3:80:01:8f:2c:58:6f:5e:0a:53:
fd:31:0a:96:9c:df:dc:09:aa:ac:9a:f3:f9:25:5b:22:c0:08:
aa:71:b9:d6:98:c3:c5:1a:56:3a:fb:11:12:c7:5f:b1:60:5c:
e5:c0:e0:7a:ce:de:dd:e3:54:cf:e9:31:e9:8b:68:71:b0:f3:
58:f3:c0:82:db:fa:72:5d:64:11:59:e4:77:b0:cb:64:5a:c5:
c6:d6:69:71:d3:aa:87:1c:00:e6:6f:68:fe:14:03:46:88:b7:
a0:f4:f5:5b:7d:ab:22:b5:f0:b5:cc:17:dc:ca:1e:53:1c:71:
e8:b2:4e:17:19:52:df:5d:3f:2e:76:49:44:d1:dd:24:fd:6e:
95:c1:62:6a:be:bb:03:2a:aa:b4:30:48:a0:db:16:39:20:71:
b6:15:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:15:17 2025 by rpki-client