Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/i12yR3VlNON6XUyN9ujkiDOw6uA.roa
File: i12yR3VlNON6XUyN9ujkiDOw6uA.roa (raw, json)
Hash identifier: u9P96QLDG7OSgzsq790YwmfE96sYlmA5QAN854R1nuY=
Subject key identifier: 8B:5D:B2:47:75:65:34:E3:7A:5D:4C:8D:F6:E8:E4:88:33:B0:EA:E0
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197A81C0E4129493F7F1691C91D701AB260
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/i12yR3VlNON6XUyN9ujkiDOw6uA.roa
Signing time: Wed 25 Jun 2025 17:21:40 +0000
ROA not before: Wed 25 Jun 2025 17:21:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 06:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:1c:0e:41:29:49:3f:7f:16:91:c9:1d:70:1a:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 25 17:21:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5db247756534e37a5d4c8df6e8e48833b0eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:f2:aa:82:b8:f7:79:73:ac:d2:42:2f:5a:
33:14:67:79:f1:70:ff:8b:32:47:22:75:82:bd:fb:
c1:bb:1d:14:76:b1:84:a4:cb:a2:b3:07:d3:5f:cd:
e5:b0:f0:82:4c:44:94:be:06:32:e3:77:38:af:97:
27:b8:9e:48:c5:35:58:00:c0:b5:b5:51:37:04:d1:
ca:0b:5e:ea:09:e8:3e:b8:79:3d:1f:65:5a:c5:fd:
c7:41:df:ea:cb:e9:4e:ad:ad:e1:72:46:5b:0a:9d:
45:10:e7:df:7d:59:03:a8:33:59:ba:1f:e7:6f:72:
82:79:64:66:63:89:c7:67:e6:a9:7a:a0:13:cb:7c:
45:9a:6d:48:a6:7f:35:b4:f0:a0:a0:b7:6f:70:7c:
c1:ce:9e:ce:3e:19:1a:90:e6:17:e5:11:3e:6a:5c:
d4:b9:c6:18:72:57:0f:b5:0f:e3:90:a0:fb:95:30:
69:53:f3:52:bf:55:19:1a:58:45:1e:95:05:29:9b:
bf:f1:82:fb:3a:02:66:9c:bf:8a:4f:62:64:4c:87:
5f:44:1d:cc:d8:99:0a:33:3b:cf:29:86:60:72:7e:
bc:9a:83:c1:44:af:47:c2:77:04:be:f0:5f:f5:8f:
f6:fd:0c:65:1f:48:b2:12:f7:09:2c:5e:24:c3:e3:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:B2:47:75:65:34:E3:7A:5D:4C:8D:F6:E8:E4:88:33:B0:EA:E0
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/i12yR3VlNON6XUyN9ujkiDOw6uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0-45.94.214.255
89.44.240.0/23
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c5:99:e4:48:fc:24:c9:14:ff:67:b4:91:8f:e3:81:33:64:
e7:a6:23:b2:93:83:51:c5:f0:26:40:7c:5d:a3:81:81:fe:45:
97:93:fe:e0:5e:3d:29:82:61:1a:b5:2d:8f:b2:f5:d8:82:b2:
fb:ef:99:29:08:9b:8a:da:68:c7:99:53:a1:3b:b9:da:ba:3a:
fd:02:18:37:c5:a8:1c:1e:ac:b3:de:f2:c2:1f:ac:fc:b9:16:
9b:fa:e3:4d:5d:02:40:6d:c8:20:1b:32:95:68:df:42:2b:6f:
1a:41:51:64:91:c2:f7:84:6b:26:05:26:2a:57:bc:aa:b7:6b:
08:a2:30:9a:0b:c9:77:43:78:8a:a9:03:d0:e3:47:87:8d:2a:
a3:ba:40:0a:9e:f6:ee:0a:ae:cc:d4:79:0c:f6:aa:1c:02:50:
e9:b2:00:4a:82:f4:d9:83:87:06:32:e4:23:a2:09:f5:b9:5b:
68:58:58:4e:2b:41:22:7b:8c:b8:65:aa:6a:60:b2:f8:08:a6:
62:59:52:3d:d7:77:96:69:c1:08:8e:f5:20:c0:2a:32:82:36:
8e:9c:a8:a0:b9:26:8f:eb:26:4d:ef:3e:3e:c4:1b:df:38:c2:
d5:d9:78:25:3e:a8:c1:18:a4:73:e5:61:e8:fb:9b:b5:c4:ed:
5a:1e:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:42 2025 by rpki-client