Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E8etbBA1Q6YJjYholBRRBXsoN4U.roa
File: E8etbBA1Q6YJjYholBRRBXsoN4U.roa (raw, json)
Hash identifier: l2j/xei7wvASHtB9i5v80tVFxtw9+XEW6DNRGkCqukE=
Subject key identifier: 13:C7:AD:6C:10:35:43:A6:09:8D:88:68:94:14:51:05:7B:28:37:85
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019814C0A3D7B77CB2415901D263B272EC5E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E8etbBA1Q6YJjYholBRRBXsoN4U.roa
Signing time: Wed 16 Jul 2025 19:40:25 +0000
ROA not before: Wed 16 Jul 2025 19:40:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42240
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 08:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:c0:a3:d7:b7:7c:b2:41:59:01:d2:63:b2:72:ec:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 16 19:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c7ad6c103543a6098d8868941451057b283785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:1e:88:2a:f2:f5:00:ce:47:c7:50:a4:41:
4a:18:96:aa:33:e5:c7:fd:08:02:47:b0:79:be:47:
fd:18:d0:d8:56:69:de:a4:ed:0d:49:68:d6:d7:36:
83:9d:b2:7d:ed:8b:cb:7a:f9:f0:ac:6e:c4:39:51:
c6:0b:f8:5f:17:d7:de:bd:1c:a8:b7:db:f1:7d:00:
2b:ea:57:99:e5:fd:71:19:63:24:79:28:a7:09:48:
26:98:ce:88:e8:f6:9f:c3:18:09:bc:ab:ab:a0:cc:
ba:46:26:1f:9b:b2:35:dc:c4:20:6e:db:eb:f9:d3:
a2:35:0e:23:94:29:bd:8e:5a:9f:03:88:56:87:0b:
91:10:a1:c6:86:08:71:07:11:04:3f:af:c4:53:d5:
8a:43:44:24:01:a5:7c:dc:21:32:cd:68:ca:f7:82:
81:db:9b:b7:17:03:c2:02:b4:a2:2a:28:fc:6e:e9:
4f:10:b4:e5:ac:aa:73:06:43:bd:a5:15:a8:29:2f:
f6:77:57:4e:1b:16:19:5f:41:f3:ad:e5:d6:57:9b:
15:52:50:65:93:9e:81:18:1b:08:7b:4a:21:5b:02:
84:f0:4b:94:2f:53:c8:3e:e2:11:61:95:5d:b8:4d:
13:c6:93:5a:2c:07:12:70:2c:44:8b:14:d0:e4:5c:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:AD:6C:10:35:43:A6:09:8D:88:68:94:14:51:05:7B:28:37:85
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E8etbBA1Q6YJjYholBRRBXsoN4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9d:a6:06:7f:87:50:33:b0:f3:0a:ab:8a:e2:bf:43:65:f2:
11:f7:c0:60:6b:7f:5d:90:fb:96:f9:71:f7:03:4c:5c:aa:4e:
f3:00:fe:76:57:1a:71:50:93:23:6d:ab:cf:0e:fb:ad:d7:91:
6d:aa:5c:e4:e9:81:c4:aa:e0:72:a4:25:4f:82:87:69:9d:33:
0b:a5:8b:10:6e:ea:d2:29:bb:b3:0c:05:94:cc:38:22:9f:df:
0f:cf:a5:7d:3d:f6:32:2f:b2:c0:87:56:a4:78:f4:85:a9:97:
91:6d:f9:3b:18:69:cf:33:cf:83:ed:32:9a:9d:31:89:8b:aa:
53:dd:36:ca:03:9e:30:46:11:17:2c:55:0c:e0:fe:d6:7a:2f:
42:df:6e:6e:a7:5c:ba:4c:49:cf:9d:6b:5f:00:5c:00:f6:ab:
05:2e:b1:78:a7:6c:77:d6:0b:f3:4e:c2:fe:2c:e5:ab:30:04:
4a:44:69:a3:5a:d3:09:32:a5:6d:92:ba:25:8d:3e:24:db:0d:
71:e4:26:2e:76:b0:39:17:4b:62:c0:b4:87:3a:f1:1e:7c:4a:
80:f9:64:81:bd:24:87:d2:34:46:2a:2c:51:c1:71:0b:26:30:
9c:64:0a:89:47:1b:8a:1f:38:94:a7:40:7f:84:df:b0:fd:07:
0d:30:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:55:51 2025 by rpki-client