Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/FlpnKXkUUpxq6HBlY3XqqFmdfro.roa
File: FlpnKXkUUpxq6HBlY3XqqFmdfro.roa (raw, json)
Hash identifier: 5DYihNmLs1Nl5UBiiMbesGThonHQVG/gzMBGHIhvhWU=
Subject key identifier: 16:5A:67:29:79:14:52:9C:6A:E8:70:65:63:75:EA:A8:59:9D:7E:BA
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0197E8FB3CB06D78B766B7D17AB3993794EC
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/FlpnKXkUUpxq6HBlY3XqqFmdfro.roa
Signing time: Tue 08 Jul 2025 07:41:08 +0000
ROA not before: Tue 08 Jul 2025 07:41:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 13:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:fb:3c:b0:6d:78:b7:66:b7:d1:7a:b3:99:37:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jul 8 07:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=165a67297914529c6ae870656375eaa8599d7eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:ca:45:61:52:4d:48:ac:07:eb:3a:b6:56:
4f:3a:00:99:2a:dd:62:40:6b:cb:c9:bb:9b:8c:9c:
fb:a9:62:24:aa:98:ac:29:08:10:af:97:95:26:23:
e1:ee:e7:39:65:c6:7a:a2:55:2b:8d:ea:38:db:23:
2f:4c:19:49:13:8d:3b:d8:80:dc:25:14:83:d6:13:
a4:9b:4e:96:77:c6:d8:69:28:3d:4e:c5:f7:b3:a8:
78:a2:41:22:e4:1d:bb:fe:7e:39:69:47:5a:12:f7:
02:d9:60:7d:22:f7:d6:ee:71:55:38:f4:b7:2b:b1:
e0:16:cd:7a:35:61:cf:f6:ad:48:36:7a:0b:47:38:
c9:f7:d5:d8:80:c3:32:12:ec:de:74:5c:52:56:27:
7b:3d:f8:23:f4:1e:32:73:13:dd:07:7c:35:39:f6:
44:4f:e4:dc:79:09:41:7f:54:0b:ea:bb:a4:0c:b1:
49:05:b3:1d:c2:1f:12:1d:1f:9e:06:e8:35:13:bd:
f2:be:42:a7:d1:09:9f:88:69:c5:54:29:b0:d3:e1:
27:37:66:69:2d:4f:09:4d:ba:52:30:81:2a:fd:53:
24:1e:58:61:b8:91:f0:02:93:09:ea:3f:82:55:9e:
f7:3e:a2:94:4a:0c:d1:88:ef:50:1e:07:95:c7:00:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5A:67:29:79:14:52:9C:6A:E8:70:65:63:75:EA:A8:59:9D:7E:BA
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/FlpnKXkUUpxq6HBlY3XqqFmdfro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:52:59:bf:fe:64:b6:81:c0:52:76:02:d3:29:7e:4f:93:5b:
ff:29:cd:c7:9b:1e:af:66:df:5a:3a:9b:1f:15:d0:cf:63:b4:
c2:42:88:9f:f7:9a:fb:a9:05:74:38:ab:ad:f6:53:d3:67:4b:
eb:8e:91:e9:34:87:49:b3:70:24:e0:57:d0:44:58:9b:ab:37:
88:40:9e:3d:42:34:ad:57:30:02:cf:cc:34:93:e1:4e:15:1e:
da:62:d3:28:cc:88:e6:11:c7:70:c2:18:01:51:1e:b3:18:0e:
da:98:ea:07:78:9d:52:99:17:72:d5:53:6e:09:47:11:6b:8f:
8f:84:2a:3d:f6:f3:10:00:8c:60:fa:8c:6b:c2:cc:3e:c1:1a:
27:25:27:2c:ac:d7:67:0f:02:a6:9c:bc:5e:0a:94:ac:f9:85:
42:2b:6b:b4:52:fd:7d:5f:20:18:77:7b:8f:8e:67:4f:39:d1:
e6:ac:a4:7f:f6:3f:72:f4:50:7b:9f:1b:f9:dd:d6:35:0a:eb:
b1:a2:c0:2d:9a:7e:ea:5b:82:88:4b:d1:5f:d9:7a:95:e7:73:
5b:ff:09:91:e5:75:f4:72:26:0c:ad:e7:bb:ce:75:ef:52:ef:
f5:d8:c3:c6:1a:b9:fc:5b:29:af:30:fd:9e:c0:52:b5:58:05:
4a:83:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:27 2025 by rpki-client