Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/qv8xHgR0Jv7TCRXbZt-jqr7-sjs.roa
File: qv8xHgR0Jv7TCRXbZt-jqr7-sjs.roa (raw, json)
Hash identifier: Ce1B4xgEgA6EP9DwwIsZVbCi2Ahcz3NhydxAMj5rthk=
Subject key identifier: AA:FF:31:1E:04:74:26:FE:D3:09:15:DB:66:DF:A3:AA:BE:FE:B2:3B
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 01982C94CB2560C158FA54A73F55367A3E72
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/qv8xHgR0Jv7TCRXbZt-jqr7-sjs.roa
Signing time: Mon 21 Jul 2025 10:43:25 +0000
ROA not before: Mon 21 Jul 2025 10:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.46.114.0/24 maxlen: 24
185.46.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 15:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:94:cb:25:60:c1:58:fa:54:a7:3f:55:36:7a:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Jul 21 10:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaff311e047426fed30915db66dfa3aabefeb23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:66:0a:4b:3e:e6:e9:15:ef:e4:10:1c:5f:
95:52:33:57:e4:59:bc:81:bc:98:62:81:7c:2f:10:
88:1c:1d:eb:f6:39:06:9e:0a:c1:c2:06:b0:e8:53:
a0:19:c7:c5:1f:0a:f0:53:f1:e7:f1:8a:69:e0:dc:
ef:08:a4:63:e4:12:53:58:94:04:1d:06:bf:af:41:
24:52:76:ef:ca:1c:8f:7b:e2:05:a7:6d:a7:ad:1f:
47:1c:2d:9d:a8:00:f8:4e:e0:78:81:f1:61:1d:0b:
6f:4c:d5:73:05:3b:77:4a:06:16:93:d8:82:47:f5:
93:a5:d7:5f:6d:f8:e3:a4:39:23:63:1e:5f:cd:14:
15:d0:1c:42:e3:c4:75:c4:ec:9c:55:89:0d:7a:bd:
6f:77:5f:91:3e:63:46:22:98:7a:24:9a:80:d7:7a:
72:9b:e4:eb:68:98:89:8e:94:43:47:93:6c:0c:fe:
8e:86:d8:a0:8d:bc:03:26:8e:f2:c9:d5:72:b4:39:
ef:fb:e6:4a:91:b8:7c:22:6b:d8:91:5a:11:fc:3f:
9b:c3:47:8d:11:03:86:1e:e2:a8:fa:b9:48:6f:12:
85:7b:ac:9b:20:28:79:1c:13:f0:18:15:e3:31:5c:
27:be:05:41:19:d8:4c:ed:a7:a7:48:28:21:e4:17:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:31:1E:04:74:26:FE:D3:09:15:DB:66:DF:A3:AA:BE:FE:B2:3B
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/qv8xHgR0Jv7TCRXbZt-jqr7-sjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.114.0/23
Signature Algorithm: sha256WithRSAEncryption
35:d7:90:91:8e:62:64:17:ce:a1:d6:cf:a6:e6:93:43:f3:d3:
c9:12:ca:f1:84:50:88:f6:9f:ee:6f:b3:32:a7:dc:b3:20:c7:
97:37:4d:ac:4c:86:d8:d9:91:96:5f:55:1d:ef:16:4d:32:1a:
81:2e:55:52:43:00:72:5c:a2:ae:a7:d2:10:35:1c:67:ac:6c:
cd:74:47:6e:2d:cf:f4:85:7e:7c:1a:32:d1:9b:ce:05:b0:f1:
96:6f:91:5a:2d:a5:eb:cc:e9:d8:d0:7d:13:20:0a:25:69:11:
ff:46:2a:0b:8f:c1:59:28:a6:8e:82:a3:b4:3f:d1:86:90:b2:
e2:5f:67:97:bc:93:1a:2f:2c:96:cf:f6:02:bb:7b:8a:71:5e:
18:6e:67:47:55:73:bc:c5:d9:bf:20:5c:dd:d9:24:37:f2:1f:
ce:c4:39:73:b7:67:74:75:47:f6:3f:58:11:fb:73:7d:b9:03:
cc:b8:3a:04:cb:35:3e:ed:ca:8c:0d:a5:31:46:da:59:01:57:
71:8f:f9:c6:25:d8:02:d6:9e:1a:d6:b4:4e:c0:70:f6:3a:d5:
76:b2:5f:13:5b:55:a2:93:b3:3d:7d:db:5b:60:4c:81:91:fa:
eb:c1:cb:ff:21:c3:35:8c:5d:d9:a3:a2:90:22:50:7a:5b:ed:
da:af:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:42 2025 by rpki-client