Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vjOVLYEUSsJvti1HycT7X488Vag.roa
File: vjOVLYEUSsJvti1HycT7X488Vag.roa (raw, json)
Hash identifier: c7jAppYf0FXuq7Q46wLoI+GUob/H6Qxrk5jzy6Lls4s=
Subject key identifier: BE:33:95:2D:81:14:4A:C2:6F:B6:2D:47:C9:C4:FB:5F:8F:3C:55:A8
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01977CF2362E410B13D7C5BE55AC02488D43
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vjOVLYEUSsJvti1HycT7X488Vag.roa
Signing time: Tue 17 Jun 2025 08:12:17 +0000
ROA not before: Tue 17 Jun 2025 08:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 45.94.213.0/24 maxlen: 24
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 17:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:f2:36:2e:41:0b:13:d7:c5:be:55:ac:02:48:8d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 17 08:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be33952d81144ac26fb62d47c9c4fb5f8f3c55a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:31:b8:c8:3c:c4:d2:56:2a:9e:8a:8e:ef:
25:05:f7:96:b7:db:34:5a:e4:5d:17:2a:76:15:f3:
90:57:1f:f6:9b:31:18:3b:1e:bd:00:11:41:9a:eb:
9a:8d:98:fd:2f:31:5d:8d:30:fe:79:9b:f8:2a:6f:
18:99:fa:7e:5b:32:bb:b8:b4:3c:36:d8:dd:a2:f2:
58:0e:f9:3a:26:17:c2:14:c1:fc:cf:0e:84:d7:0d:
69:8f:ab:87:5a:1f:85:4e:7b:b9:2c:c5:8f:a6:56:
8e:a6:6a:f8:ba:db:15:fe:5f:b6:d0:bf:d5:7f:59:
e1:63:58:dc:78:92:d2:81:57:94:62:3a:32:b4:c5:
70:61:86:27:30:12:3d:6a:d3:70:7f:0a:07:73:49:
4c:20:09:7f:8f:1d:0c:1a:8b:b1:47:a2:2e:b5:9c:
a4:33:98:11:8b:3f:2e:8b:6a:7b:13:25:bf:95:e3:
8a:2e:fd:be:03:7c:f5:c2:6e:fb:92:24:08:3b:a2:
6a:a4:7c:92:14:df:e6:4d:6e:6f:48:c5:00:4b:1c:
9b:16:51:85:55:3a:b0:43:25:56:3f:1d:de:cf:63:
3c:81:88:e8:31:c5:9c:35:51:a7:4c:c1:2e:27:1f:
44:e8:a5:81:14:de:cf:f0:4f:98:14:5a:a9:c2:19:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:95:2D:81:14:4A:C2:6F:B6:2D:47:C9:C4:FB:5F:8F:3C:55:A8
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/vjOVLYEUSsJvti1HycT7X488Vag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0/24
89.44.240.0/23
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fe:3f:9d:25:c0:bd:e3:48:24:f7:d3:44:49:36:53:ac:65:
04:16:64:3b:98:e0:d9:3b:17:35:fe:64:1f:76:90:c1:f7:2a:
72:c6:62:67:00:4c:5d:32:d0:f0:cf:2a:c9:cf:09:c0:63:f2:
c3:48:0d:6e:18:00:54:83:91:2f:30:92:81:b9:89:a2:3e:2a:
53:74:4b:31:f9:14:7b:a3:f1:e5:2d:70:a2:eb:95:b1:9d:d0:
d7:02:c6:0d:f5:cb:22:b4:53:0b:f3:55:7e:5f:f8:b9:e8:99:
04:4f:24:f3:94:c2:18:d1:5b:da:63:36:b0:db:71:61:72:76:
f9:2b:05:8c:59:11:b5:c7:43:d1:c7:5e:02:02:80:8f:64:f7:
11:ea:8e:e7:94:7f:d4:ab:9e:31:ff:b4:21:e0:5e:fc:71:99:
7a:a6:94:dd:9e:35:1d:77:46:f3:49:7a:c8:e8:df:03:ce:b3:
be:19:bb:ad:6c:2d:0e:15:dc:c1:3b:ac:46:63:df:71:8a:dd:
30:89:22:58:92:fe:8a:99:42:d5:00:2d:cd:d5:cc:73:4f:f7:
a3:87:24:59:78:7e:3d:f3:bd:95:c3:7f:bd:99:2b:07:2a:75:
9f:98:3a:9e:e5:f9:c2:3e:07:c7:e6:25:68:6e:6f:57:d1:1d:
62:43:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:54 2025 by rpki-client