Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e0gA2IjoBJZseg5X94eV_1ICnV0.roa
File: e0gA2IjoBJZseg5X94eV_1ICnV0.roa (raw, json)
Hash identifier: tuYn2iTgJFRWUrp5F40m3v+TfKJhYmmc7dSMoH54hFk=
Subject key identifier: 7B:48:00:D8:88:E8:04:96:6C:7A:0E:57:F7:87:95:FF:52:02:9D:5D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019818B621DB069A9E330A2009D5DDF8F4B1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e0gA2IjoBJZseg5X94eV_1ICnV0.roa
Signing time: Thu 17 Jul 2025 14:07:26 +0000
ROA not before: Thu 17 Jul 2025 14:07:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215645
IP address blocks: 185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 16:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:b6:21:db:06:9a:9e:33:0a:20:09:d5:dd:f8:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 17 14:07:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b4800d888e804966c7a0e57f78795ff52029d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:28:01:b4:40:10:94:1b:76:45:4b:c8:82:
69:e4:4e:3e:2c:ff:a3:89:ea:d5:90:c8:56:2b:60:
b7:ef:68:ee:c5:d3:ff:d3:1e:67:3f:84:3b:89:0e:
5e:71:06:80:77:b8:17:8b:4e:cb:5c:9c:e4:73:ec:
d1:6d:39:af:84:9f:ef:81:21:35:be:44:a2:af:b4:
01:70:33:96:47:36:68:54:9e:69:39:ce:86:03:60:
c4:d6:89:96:2d:e4:8c:72:1a:56:bc:20:89:68:b8:
d5:d9:c5:e2:f7:6f:92:c0:4b:16:3c:6b:52:3c:4a:
e6:5f:f1:40:5e:87:ce:33:d9:df:47:b0:10:e3:11:
75:f6:29:48:34:5f:e8:6f:4f:a8:2d:88:a6:02:f6:
be:ea:7c:6a:2f:e2:50:1b:13:60:db:28:8b:f6:d3:
f5:5d:68:d6:1e:22:77:62:e3:9c:e3:54:df:5a:0a:
75:77:4c:33:12:7f:a7:aa:f6:37:4a:1c:60:e5:90:
24:ae:93:f2:e8:c5:9b:4c:a4:61:dd:5a:95:6f:fa:
f0:2c:2d:2a:fa:e3:14:63:ac:65:b7:cd:0b:3c:35:
e6:f2:96:2c:db:89:17:5d:0d:f1:2c:9b:ac:52:ff:
cd:bb:39:51:f9:99:35:71:6a:17:77:bd:6f:77:34:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:00:D8:88:E8:04:96:6C:7A:0E:57:F7:87:95:FF:52:02:9D:5D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e0gA2IjoBJZseg5X94eV_1ICnV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.181.0/24
185.254.28.0/24
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8a:56:1c:96:5f:ec:44:34:6e:75:00:7d:ca:4f:1b:30:e2:
33:76:14:65:df:59:44:a0:a3:ac:e5:e0:6f:01:b7:c9:2b:ea:
31:b4:2b:c8:fb:1d:95:cb:51:d9:30:2a:e4:5a:db:54:eb:aa:
b0:2c:87:29:c5:36:b6:84:72:10:8c:e6:6d:cd:cf:3f:f7:8f:
2b:62:f6:7e:5a:f4:09:1a:1b:5a:c6:a0:c1:25:44:7a:51:d8:
11:ae:72:04:77:ae:15:d6:b5:82:b0:d0:7a:14:50:0a:92:e2:
37:a5:51:93:23:21:e5:83:f3:80:5d:c4:33:7d:50:bd:97:07:
ff:5c:a2:bd:61:dc:ec:53:9c:11:d6:e4:18:6e:30:ca:69:68:
ef:91:36:62:7b:d3:12:94:ff:57:d6:35:da:c4:13:3c:9d:b9:
f3:2a:c7:8f:c2:57:b8:66:c3:13:5e:8c:d8:a4:3a:fd:63:05:
e1:dd:e5:75:aa:99:d9:3c:2e:cc:fd:c4:1b:41:76:fd:49:8b:
27:24:b7:cf:6e:04:c9:96:e6:d6:57:a9:7b:32:53:8c:a3:9c:
05:05:cc:2c:92:d0:0a:55:38:a8:54:a2:3f:dc:72:a4:ca:a2:
b4:72:08:c4:a6:e5:be:0e:c8:18:0a:47:de:92:70:6b:dd:14:
e2:c6:1a:37
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZgYtiHbBpqeMwogCdXd+PSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwNzE3MTQwNzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQ4MDBkODg4ZTgwNDk2NmM3YTBlNTdmNzg3OTVmZjUyMDI5ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eIoAbRAEJQbdkVLyIJp5E4+LP+j
ierVkMhWK2C372juxdP/0x5nP4Q7iQ5ecQaAd7gXi07LXJzkc+zRbTmvhJ/vgSE1
vkSir7QBcDOWRzZoVJ5pOc6GA2DE1omWLeSMchpWvCCJaLjV2cXi92+SwEsWPGtS
PErmX/FAXofOM9nfR7AQ4xF19ilINF/ob0+oLYimAva+6nxqL+JQGxNg2yiL9tP1
XWjWHiJ3YuOc41TfWgp1d0wzEn+nqvY3Shxg5ZAkrpPy6MWbTKRh3VqVb/rwLC0q
+uMUY6xlt80LPDXm8pYs24kXXQ3xLJusUv/NuzlR+Zk1cWoXd71vdzSHuQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHtIANiI6ASWbHoOV/eHlf9SAp1dMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvZTBnQTJJam9CSlpzZWc1WDk0ZVZfMUlDblYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAufO1AwQA
uf4cAwQAwSOZMA0GCSqGSIb3DQEBCwUAA4IBAQB7ilYcll/sRDRudQB9yk8bMOIz
dhRl31lEoKOs5eBvAbfJK+oxtCvI+x2Vy1HZMCrkWttU66qwLIcpxTa2hHIQjOZt
zc8/948rYvZ+WvQJGhtaxqDBJUR6UdgRrnIEd64V1rWCsNB6FFAKkuI3pVGTIyHl
g/OAXcQzfVC9lwf/XKK9YdzsU5wR1uQYbjDKaWjvkTZie9MSlP9X1jXaxBM8nbnz
KsePwle4ZsMTXozYpDr9YwXh3eV1qpnZPC7M/cQbQXb9SYsnJLfPbgTJlubWV6l7
MlOMo5wFBcwsktAKVTioVKI/3HKkyqK0cgjEpuW+DsgYCkfeknBr3RTixho3
-----END CERTIFICATE-----
Generated at Fri Jul 25 18:33:12 2025 by rpki-client