Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/10dxlvXTHI2U5zr-9M09VpwvpZc.roa
File: 10dxlvXTHI2U5zr-9M09VpwvpZc.roa (raw, json)
Hash identifier: 13uZ+gUJ7y+BofpN7AEVYGkBc6eKvruoTpmKQIUr79g=
Subject key identifier: D7:47:71:96:F5:D3:1C:8D:94:E7:3A:FE:F4:CD:3D:56:9C:2F:A5:97
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197A69B89230D0269FC9576B686BB09DF2C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/10dxlvXTHI2U5zr-9M09VpwvpZc.roa
Signing time: Wed 25 Jun 2025 10:21:40 +0000
ROA not before: Wed 25 Jun 2025 10:21:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 17:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:9b:89:23:0d:02:69:fc:95:76:b6:86:bb:09:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 25 10:21:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7477196f5d31c8d94e73afef4cd3d569c2fa597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:ba:ec:8e:aa:96:52:b0:06:85:c8:51:ad:
e5:d9:cf:be:4f:3b:ac:f3:c0:6e:6c:f0:49:a9:5f:
96:48:38:59:29:e1:51:cd:db:3b:3c:d6:61:02:3c:
8d:da:ad:6f:ca:b2:72:0f:d1:35:54:d9:d6:10:44:
15:3d:53:d4:b2:e6:3d:49:db:15:cf:fd:c1:1a:28:
be:39:74:1e:a1:be:16:77:06:ad:0d:9e:3e:31:7e:
d2:86:37:57:f3:8f:53:64:c2:04:7c:eb:bb:73:e0:
9f:86:7b:42:92:e6:b4:e5:9c:71:ea:19:64:77:88:
25:cf:09:a0:81:b0:6b:a4:ed:fe:d2:ac:aa:70:41:
00:9d:37:05:a9:38:4e:e5:55:0d:a1:36:b0:37:04:
b7:87:f6:46:85:a3:b2:ac:34:46:0c:1f:42:48:89:
10:2d:b0:92:e8:39:be:46:8e:18:7a:52:88:3d:72:
71:3a:c0:77:f5:32:12:90:be:4e:e9:b2:52:6b:0e:
7c:01:f8:be:46:89:60:f6:c1:62:c5:d7:1c:56:2e:
a3:ce:2a:ff:4c:b2:2d:dd:c4:aa:f0:15:34:78:4e:
dd:51:85:14:f6:81:ea:98:e3:bb:92:a7:3b:eb:ec:
4e:81:91:f6:c0:ff:08:ac:3c:62:ce:f8:82:58:04:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:71:96:F5:D3:1C:8D:94:E7:3A:FE:F4:CD:3D:56:9C:2F:A5:97
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/10dxlvXTHI2U5zr-9M09VpwvpZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0-45.94.214.255
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
47:26:cc:d5:af:a1:99:15:ba:bc:bd:10:8b:b3:be:08:ce:78:
78:a5:b6:52:c5:f7:05:03:ad:27:af:00:d3:69:2f:2a:bc:62:
d5:ea:df:8c:24:22:9c:47:e3:2c:13:9c:fb:4a:80:e6:e2:59:
fd:9f:0c:cb:40:07:03:c0:b2:c1:f3:8f:7a:f4:b6:f8:59:5b:
69:fd:50:ec:12:91:3e:fd:95:47:86:6a:82:92:3c:27:33:a9:
24:52:41:6a:92:25:1f:58:88:8b:c8:ca:fd:15:7b:f9:08:55:
19:13:8b:d9:4d:ca:11:12:db:1f:ee:39:4e:ca:cc:da:6d:60:
55:c9:0d:5b:e9:39:20:34:28:b4:4a:98:a3:9d:75:f3:27:55:
5b:92:ed:74:7d:1f:2a:ae:b8:24:54:ec:44:8c:f9:54:19:a5:
75:2b:df:db:84:94:17:1b:b7:20:36:69:e6:96:3a:a1:9d:c5:
92:8c:f2:86:4d:1c:6a:aa:d6:cf:75:f3:da:82:c1:8c:26:10:
8f:9d:f0:87:53:4e:de:ce:e3:23:01:0e:f8:24:37:89:11:77:
a5:41:1e:1f:cb:78:eb:a5:1a:19:25:9e:95:03:b9:04:ac:ce:
cd:19:a1:dd:18:84:7d:39:38:4e:fe:a7:d8:3c:ae:55:28:1a:
8b:e4:66:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:12 2025 by rpki-client