Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/emqknVzFCZCSHVejTWDxd2i3m_E.roa
File: emqknVzFCZCSHVejTWDxd2i3m_E.roa (raw, json)
Hash identifier: VqNjZu7mcJvecCPm9X4bXxQc0lB0ahLXDDpBpxnvvxc=
Subject key identifier: 7A:6A:A4:9D:5C:C5:09:90:92:1D:57:A3:4D:60:F1:77:68:B7:9B:F1
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197BC9BE4693956AD04CAD7C6E5E8DC6651
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/emqknVzFCZCSHVejTWDxd2i3m_E.roa
Signing time: Sun 29 Jun 2025 16:53:42 +0000
ROA not before: Sun 29 Jun 2025 16:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 5.159.49.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
185.239.0.0/24 maxlen: 24
185.239.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 10:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:9b:e4:69:39:56:ad:04:ca:d7:c6:e5:e8:dc:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 29 16:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6aa49d5cc50990921d57a34d60f17768b79bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:07:df:7a:70:9f:a3:fe:4a:a2:2e:51:e7:
5a:e2:42:e8:7d:56:35:9a:d5:2f:8f:e4:d0:4e:79:
c3:9b:0c:15:f0:0c:80:df:51:cf:31:29:7b:52:70:
dc:5c:d1:50:86:6a:e8:2b:06:7c:5c:c5:a9:1b:ce:
fe:c6:f7:b1:e2:75:16:b9:8a:fc:cf:8d:e0:58:88:
12:f9:15:c9:3c:8d:73:3f:5b:f7:75:50:ea:b9:15:
a1:e3:fb:9f:ff:44:48:34:70:d8:a0:17:72:4a:b8:
c1:7f:08:a5:ce:0f:39:93:1b:7d:46:13:b5:ef:5a:
ae:83:36:2f:23:32:b2:d0:5d:c6:49:ed:6a:0c:28:
4e:72:38:d1:cc:34:ad:dd:9d:80:0f:1d:77:b1:c3:
81:5c:0e:43:82:07:21:fb:8b:3c:52:39:f2:4b:ab:
7e:de:35:2e:91:37:ad:ce:da:00:1c:d8:4a:cd:0c:
b0:86:fc:b5:85:e9:1d:d0:e3:08:52:06:8b:a4:d5:
a3:ad:3b:77:37:b3:79:2e:d5:44:70:cf:f2:74:d9:
87:47:63:f2:f0:cd:f9:19:ec:99:09:ce:9d:cd:01:
2b:e4:67:bb:31:e9:0f:18:0b:0c:aa:90:af:34:f3:
89:c5:19:2c:cc:ec:05:dc:02:2e:2f:0d:54:1b:01:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:A4:9D:5C:C5:09:90:92:1D:57:A3:4D:60:F1:77:68:B7:9B:F1
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/emqknVzFCZCSHVejTWDxd2i3m_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
45.94.213.0/24
185.3.200.0/24
185.239.0.0/24
185.239.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0b:6a:34:d2:42:cf:cd:55:4a:f5:d3:13:e7:fe:a7:73:5e:
e7:91:10:0d:90:e8:5e:cb:e3:25:65:04:b9:60:ca:94:5e:8d:
fc:e7:f3:23:68:f3:ae:e0:a2:5d:ae:98:f1:02:38:e2:ee:2a:
92:77:70:ec:a4:c2:e5:52:43:24:72:ad:32:a1:5e:79:04:81:
e6:44:00:d9:01:37:df:da:7c:a5:20:c9:5a:76:00:5d:8a:56:
99:bd:47:11:9f:c1:27:a2:34:25:30:b9:8b:52:0d:36:da:e4:
17:11:75:ca:c9:c2:8d:69:dd:67:dc:b8:9d:c3:29:84:af:6a:
7b:7e:00:9c:71:5f:c8:2c:dd:c7:53:41:b9:c2:74:1e:ea:cc:
0d:6d:88:42:b2:c7:18:dd:7d:89:36:67:80:e2:7a:20:b1:c6:
7f:35:b3:eb:c8:78:f9:8d:a0:b9:ef:6c:f0:e1:1f:07:4d:12:
82:49:74:37:3b:56:d6:7b:87:5a:58:f5:c3:b7:2e:84:1d:11:
8c:26:a0:41:67:7e:bd:e5:82:b2:17:cc:ad:87:b0:69:42:bd:
c5:aa:2c:96:1d:45:62:cb:96:12:f4:f6:8e:1d:94:c8:a9:4b:
0e:1e:bd:bf:9a:25:42:18:38:58:cd:35:c7:15:96:3b:5a:d5:
43:8b:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:35 2025 by rpki-client