Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/buSG9JWhNUzESQwu9Z8dEEMSOEw.roa
File: buSG9JWhNUzESQwu9Z8dEEMSOEw.roa (raw, json)
Hash identifier: P07tZD5MEK2GDW5y1TEmgRwSyYbVPbCcDH+k38Cxku4=
Subject key identifier: 6E:E4:86:F4:95:A1:35:4C:C4:49:0C:2E:F5:9F:1D:10:43:12:38:4C
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0197C26AB529AE020C34D818AD7A5861F910
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/buSG9JWhNUzESQwu9Z8dEEMSOEw.roa
Signing time: Mon 30 Jun 2025 19:57:42 +0000
ROA not before: Mon 30 Jun 2025 19:57:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Jul 2025 07:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6a:b5:29:ae:02:0c:34:d8:18:ad:7a:58:61:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jun 30 19:57:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee486f495a1354cc4490c2ef59f1d104312384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:81:9e:d5:37:7f:a7:af:58:e7:58:06:6d:
37:fd:0e:fb:a1:4e:f6:06:63:ec:2a:24:78:8f:ef:
92:33:c0:5a:d8:81:91:5b:56:60:35:33:6f:c6:b3:
5e:a9:88:fc:22:8b:9e:dd:54:3d:e2:25:21:a2:01:
03:c9:fd:bd:52:9b:40:2c:66:4f:80:0c:7e:0b:a6:
6f:67:05:dd:17:fc:46:d0:93:e9:c2:7b:8e:c1:e6:
a2:7f:2b:fc:55:0f:5a:ff:70:f2:c2:85:4c:27:0a:
1d:f7:0f:5e:a7:df:9d:b7:3b:ea:07:a0:da:eb:7e:
5b:c8:cf:b2:af:22:a4:fc:9e:73:bf:71:a5:09:ff:
89:1b:6b:6a:9c:b4:4e:b1:46:30:e1:cb:c6:3d:d9:
e8:2f:85:28:d5:c7:24:ee:d7:7e:09:94:5f:ea:89:
3f:c1:b9:9d:ec:98:25:29:f4:5d:c2:b2:b1:a3:98:
ba:86:1d:a3:cb:02:62:39:16:4f:38:24:7d:f2:88:
e9:17:ef:3c:b3:b9:b5:62:78:d4:c9:2f:21:97:57:
59:44:d7:8d:13:0b:da:91:3c:70:5b:89:c5:9a:59:
07:e3:9e:39:93:aa:f4:bf:ec:2b:14:3b:2e:0d:8d:
be:78:86:f0:15:80:26:88:58:17:c2:f8:06:4f:c1:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:86:F4:95:A1:35:4C:C4:49:0C:2E:F5:9F:1D:10:43:12:38:4C
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/buSG9JWhNUzESQwu9Z8dEEMSOEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d6:f3:83:b9:98:c5:31:d6:4c:28:99:47:fb:b5:1f:ec:f4:
2d:16:f6:b7:7d:69:1a:49:52:62:8d:00:71:06:30:95:c1:02:
d7:05:12:f7:53:22:0a:23:b3:82:df:50:28:ce:f9:e4:42:1c:
65:05:19:3f:87:0e:af:85:e4:9e:30:78:8e:0e:e8:b0:1b:91:
c5:55:4c:fc:4a:7a:f7:da:53:a5:e4:9a:9f:96:d6:fe:7a:03:
f8:b1:87:cd:37:6c:1c:c6:b7:f0:5f:9d:4f:d6:ee:b3:da:67:
bc:92:67:90:57:18:62:69:3e:77:0d:a0:83:35:10:60:79:fc:
f7:66:af:66:46:a9:01:26:b6:47:99:9e:bd:fc:71:b5:ab:5f:
59:8e:7b:04:94:35:8c:19:42:11:74:5a:95:e7:23:d2:7b:55:
64:59:54:cf:8d:46:a3:1e:36:9b:84:f9:d2:08:cc:c4:88:29:
01:5d:af:8c:a4:43:e4:af:dd:8d:97:78:10:af:77:5f:8c:28:
73:68:86:e0:74:9b:0b:88:93:f3:5a:22:3a:1d:c6:4b:a5:8c:
a9:87:6a:b8:cc:fd:11:cd:a1:25:7e:a3:bd:44:69:35:f2:c7:
56:b4:6c:94:88:34:b3:cc:d6:e0:5c:8d:d2:b7:32:d3:7c:b7:
a9:e5:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:34 2025 by rpki-client