Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/tLimYLtIbjGQtuDZF5BhgtMvbUk.roa
File: tLimYLtIbjGQtuDZF5BhgtMvbUk.roa (raw, json)
Hash identifier: mxmH8gC9dtvbREku8WFjMfxJhwUtr2VKuMUDCAFL7t4=
Subject key identifier: B4:B8:A6:60:BB:48:6E:31:90:B6:E0:D9:17:90:61:82:D3:2F:6D:49
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0197EFC97D8241CBB7900939EAD8CCB500F2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/tLimYLtIbjGQtuDZF5BhgtMvbUk.roa
Signing time: Wed 09 Jul 2025 15:24:08 +0000
ROA not before: Wed 09 Jul 2025 15:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 193.35.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 14:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:c9:7d:82:41:cb:b7:90:09:39:ea:d8:cc:b5:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 9 15:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b8a660bb486e3190b6e0d917906182d32f6d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:26:7d:53:41:f5:83:03:4f:2c:02:23:12:
b0:f3:29:3f:3e:6d:31:fc:4e:a2:88:e8:62:f3:3d:
40:6c:e9:0e:6c:d1:ab:4b:a4:d6:8c:46:0f:9d:98:
fd:41:9e:54:68:35:ed:d9:58:25:f9:76:d9:ba:56:
6a:d3:b5:f3:c2:5f:37:91:77:8d:cf:d4:6a:f3:8c:
1f:6a:67:87:12:ea:46:5b:9e:60:f7:e0:b5:13:f3:
b5:34:45:75:60:88:4f:75:37:88:ad:56:77:33:08:
dc:f8:e5:df:8f:ae:e7:70:06:d2:12:60:a2:d0:2b:
24:5a:85:bc:a9:5f:1c:59:9c:cd:1b:cb:5d:87:79:
be:85:c5:98:11:0a:4d:65:d8:d1:ea:4e:17:bc:64:
9a:09:bd:2b:1a:be:f0:d3:33:f8:1e:c3:6e:d0:49:
f7:e2:b8:e2:a6:6d:06:93:70:39:33:43:6d:3c:08:
30:3d:50:94:9c:d8:c6:f5:15:1e:00:a7:1c:e2:f8:
46:d4:1d:6b:1d:ab:86:37:ec:22:b8:97:da:4a:fe:
65:07:d1:d6:b9:f5:ae:62:e4:fa:36:ea:42:a7:8f:
dd:fe:83:8d:28:9c:38:ba:41:52:aa:08:a4:4f:5b:
69:8f:a8:24:db:9a:a2:e8:8b:c3:5f:bb:f5:4f:a8:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:A6:60:BB:48:6E:31:90:B6:E0:D9:17:90:61:82:D3:2F:6D:49
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/tLimYLtIbjGQtuDZF5BhgtMvbUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d0:95:4d:1b:b6:9f:a7:25:be:11:58:4c:e9:73:d5:3e:b7:
b7:e5:ab:1b:c0:88:81:3c:39:d1:1a:6c:a0:a4:fa:5d:2e:72:
7d:0f:a9:fe:68:29:00:95:75:8e:c7:e2:f9:58:46:af:d1:ca:
00:f2:1a:45:d6:1d:86:0c:75:0e:03:53:5d:68:54:aa:77:1d:
c3:9e:60:57:8f:04:56:8b:d1:fe:91:81:7c:54:d1:2a:0a:96:
0f:3c:1e:bd:89:09:71:a2:1b:5e:3c:cf:34:4c:6e:c6:94:ca:
b7:84:3c:52:19:39:d5:b1:a2:83:99:81:d3:72:71:9f:d5:d4:
3b:8b:a9:f7:e0:95:4b:5d:0b:31:a7:50:49:a3:d3:7b:b2:4c:
f2:f8:ca:94:36:19:d3:92:a1:91:81:b4:32:32:8b:44:51:43:
48:0b:8b:23:4a:91:16:68:22:d2:e0:d2:26:37:1d:a1:9c:28:
33:5c:e0:33:fa:ed:49:8c:51:df:47:ee:05:60:ab:87:58:ff:
ff:88:5e:3a:b5:02:0d:47:f7:b6:66:44:0b:61:b7:a4:d9:24:
f2:7f:60:c8:55:16:4d:b4:37:fb:63:75:9e:50:ed:d4:89:ec:
be:43:93:c1:5a:45:9a:34:75:29:bd:fa:5d:43:d5:5f:55:fe:
4e:7a:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:45:51 2025 by rpki-client