Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/FeZwE2ozvhW-75eytpgW9RvNYWQ.roa
File: FeZwE2ozvhW-75eytpgW9RvNYWQ.roa (raw, json)
Hash identifier: akBFpVev7FjJZrRw+zJeFT2tt5HPQWuejpgldzkfjD8=
Subject key identifier: 15:E6:70:13:6A:33:BE:15:BE:EF:97:B2:B6:98:16:F5:1B:CD:61:64
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 0197A2147A96E9B5A511BBE483AED453F0A6
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/FeZwE2ozvhW-75eytpgW9RvNYWQ.roa
Signing time: Tue 24 Jun 2025 13:15:40 +0000
ROA not before: Tue 24 Jun 2025 13:15:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8823
IP address blocks: 94.154.2.0/24 maxlen: 24
185.240.72.0/22 maxlen: 22
193.35.80.0/22 maxlen: 22
2a07:2680::/29 maxlen: 29
2a0c:7580::/29 maxlen: 29
2a0d:6140::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Jun 2025 13:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:14:7a:96:e9:b5:a5:11:bb:e4:83:ae:d4:53:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Jun 24 13:15:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e670136a33be15beef97b2b69816f51bcd6164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:fc:91:2a:0c:9f:0f:83:cd:f2:9e:da:d3:
3a:16:00:6e:2d:ab:62:79:63:e4:c7:f8:87:b9:ae:
db:f8:09:09:d3:a3:77:46:a4:1f:9a:6c:a0:72:63:
dd:ba:d0:89:7e:e0:e9:16:22:36:de:b2:6e:17:2d:
e3:9a:31:ff:ea:c9:bd:f6:36:8f:d7:a0:af:4f:f9:
af:ce:1c:70:b3:d5:8e:bd:44:28:88:60:67:98:85:
06:75:0d:2e:6f:7c:2a:6a:e7:5a:ae:0b:68:aa:8b:
ae:4a:7c:24:58:08:9f:ea:cf:6a:99:c1:39:a1:7d:
6d:11:95:68:de:f9:8e:1c:11:e9:5e:75:13:f9:e0:
6c:5c:6e:8d:81:43:4b:ab:80:e7:6d:e6:ba:96:01:
2b:4a:59:1c:28:b0:b1:ac:f0:b3:60:d7:ed:12:3f:
8d:6a:71:53:a4:2a:a1:b2:01:b1:b2:0c:98:07:58:
10:1e:41:fc:9a:d3:a6:d3:07:a1:f5:ac:bf:bb:89:
57:e4:ee:11:8c:ca:7e:bb:f7:10:e7:6c:b1:60:00:
3d:51:31:e4:2e:03:c4:f9:91:06:24:d8:3c:06:25:
34:98:97:61:2f:0c:50:c2:a9:8a:11:1c:01:a0:b9:
d2:21:10:99:1c:c9:ce:f1:61:c1:c0:58:90:e9:e2:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E6:70:13:6A:33:BE:15:BE:EF:97:B2:B6:98:16:F5:1B:CD:61:64
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/FeZwE2ozvhW-75eytpgW9RvNYWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.2.0/24
185.240.72.0/22
193.35.80.0/22
IPv6:
2a07:2680::/29
2a0c:7580::/29
2a0d:6140::/29
Signature Algorithm: sha256WithRSAEncryption
02:38:9b:da:a1:21:2f:9f:62:66:63:5f:dd:eb:4a:99:6a:24:
32:e1:0e:82:79:c1:a1:9f:80:22:74:c3:60:6b:02:fd:5c:d4:
a8:63:5d:15:44:e4:07:aa:33:a4:c9:3d:ca:55:2c:cb:e4:f5:
60:17:af:a1:e4:a6:c9:4a:00:19:ed:51:73:ee:d4:e3:30:43:
e7:3c:be:00:d2:5b:a5:07:db:1d:34:96:32:50:6c:f6:9c:2e:
de:ae:df:bf:61:73:44:4c:f3:57:e7:92:9f:44:f6:69:97:e6:
8f:ee:53:8c:3b:0e:2b:c2:ef:d4:59:e4:08:bd:0f:14:24:a8:
d8:a6:2a:9c:22:68:90:a9:b4:63:b2:8c:6c:08:f6:88:b4:51:
b2:0c:fe:16:5e:86:8b:80:6c:b1:0e:4c:19:3f:2e:b8:64:9f:
b9:1f:bc:43:aa:69:c4:23:30:f8:0f:e9:d6:d5:2a:43:1a:1c:
98:ca:08:7e:fa:11:c2:ab:73:7b:35:80:ee:82:b5:58:26:a4:
cd:34:ec:d7:77:27:aa:4d:41:71:db:33:2e:7e:1a:09:40:5a:
ba:e0:87:13:11:de:5a:e1:c4:38:d6:ea:73:e9:60:fd:f5:e8:
90:e6:18:34:72:66:79:79:90:33:57:39:b8:1d:16:f6:5d:f0:
f0:29:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:49:15 2025 by rpki-client