Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/0KSeLkruVIE05g-F7PTMBTyEXNk.roa
File: 0KSeLkruVIE05g-F7PTMBTyEXNk.roa (raw, json)
Hash identifier: VwBdBjnLCAW1wRdskQt7BHpsZ+tAECHooVcYlY8uc5o=
Subject key identifier: D0:A4:9E:2E:4A:EE:54:81:34:E6:0F:85:EC:F4:CC:05:3C:84:5C:D9
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01982D6588C2F69F4FAB8541CF43CE67B0D4
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/0KSeLkruVIE05g-F7PTMBTyEXNk.roa
Signing time: Mon 21 Jul 2025 14:31:25 +0000
ROA not before: Mon 21 Jul 2025 14:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6698
IP address blocks: 91.239.78.0/23 maxlen: 23
213.111.148.0/24 maxlen: 24
213.111.149.0/24 maxlen: 24
213.111.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 10:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:65:88:c2:f6:9f:4f:ab:85:41:cf:43:ce:67:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Jul 21 14:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0a49e2e4aee548134e60f85ecf4cc053c845cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:ef:9e:a1:b0:ce:a6:45:bd:22:16:88:f2:
53:b9:3c:93:d3:e1:27:bb:1a:04:eb:e4:29:24:69:
ee:08:f7:cb:5c:c5:d7:09:3a:42:59:0c:b3:d7:61:
39:03:bc:ea:35:03:a8:94:b4:d9:76:f3:e3:f7:14:
3a:06:4a:fa:74:54:a1:8c:ce:0b:14:55:3f:3b:2a:
17:e6:2c:e7:ed:7c:03:ee:e5:44:ee:99:c3:8a:7f:
a7:ae:30:0e:9a:50:ff:56:87:c1:6a:ee:06:cc:1d:
04:e9:ab:d2:88:4d:13:c5:57:82:84:b9:ce:72:42:
97:47:0b:ab:1f:d8:54:9c:37:d3:9e:3f:59:93:39:
63:f8:60:13:3a:d5:88:6e:61:3f:7b:7e:8e:54:e1:
dd:52:71:95:1f:b0:93:4c:f5:c3:37:47:d2:f2:bd:
b7:9d:dd:bb:94:63:0b:87:c7:80:ec:0c:78:8f:63:
08:ce:c4:2d:20:9f:de:ee:98:9b:f3:eb:de:3f:6b:
d0:4c:29:2f:cb:34:8f:a5:77:bc:e7:3a:1c:4e:9e:
06:a7:c0:0a:a2:90:90:9a:bb:7c:8b:ee:ea:45:5e:
57:d2:2c:c7:c4:20:23:1e:c8:18:d8:95:d0:ff:80:
fd:df:1a:61:e6:5c:b6:77:4b:82:06:96:21:e3:e1:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:9E:2E:4A:EE:54:81:34:E6:0F:85:EC:F4:CC:05:3C:84:5C:D9
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/0KSeLkruVIE05g-F7PTMBTyEXNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.78.0/23
213.111.148.0-213.111.150.255
Signature Algorithm: sha256WithRSAEncryption
34:d6:54:6b:0e:86:d8:a2:d6:f6:a9:1c:c0:66:7a:43:89:7c:
66:c5:fc:ed:5e:91:a0:c2:4a:af:78:25:c2:f8:b5:8e:ff:c1:
9b:aa:5f:1c:92:ce:ca:b7:ee:c2:29:77:20:86:e8:12:cc:24:
86:77:42:42:24:48:22:63:4e:70:e2:30:d8:79:e5:c3:69:2f:
29:6c:83:c4:39:24:60:05:75:54:98:0f:18:cb:7d:d0:04:a5:
8f:7a:fb:1c:ea:a6:1e:41:36:f4:21:8d:f0:7c:e4:c0:c3:45:
fc:ff:89:b9:1e:a8:8c:f4:6c:a1:04:8e:85:72:5e:9a:66:2a:
18:03:f1:81:33:ca:5d:3b:b1:4d:bb:3d:d9:9b:96:60:d8:5f:
81:cc:0a:2c:07:9a:6e:7d:71:b9:94:9b:29:3c:07:6c:76:e1:
fe:98:15:6f:9a:8b:36:ef:98:43:69:dd:f4:ba:a7:8c:5d:fb:
4b:b8:4d:35:64:f3:e4:f2:de:6a:50:18:e9:e3:98:4f:e0:6d:
3a:0c:31:c6:9b:d5:2c:21:82:e5:61:d8:73:09:3a:d3:6a:e6:
97:28:27:12:d5:d9:ab:9f:f7:75:a1:29:e9:34:11:1a:77:13:
c4:c2:e1:0e:f7:a5:e7:16:0a:e0:f3:cc:ee:f4:78:2c:9c:2d:
a6:1d:38:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:26 2025 by rpki-client