Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/idzZg-kKqMcr8sgV_nNrnILzQAs.roa
File: idzZg-kKqMcr8sgV_nNrnILzQAs.roa (raw, json)
Hash identifier: dky2B3OVXhR7MbgRFt7gLdUJANy8txflSGqrTnI/R1o=
Subject key identifier: 89:DC:D9:83:E9:0A:A8:C7:2B:F2:C8:15:FE:73:6B:9C:82:F3:40:0B
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 0197A65D47365A49F12A2B1EF12BD567EF76
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/idzZg-kKqMcr8sgV_nNrnILzQAs.roa
Signing time: Wed 25 Jun 2025 09:13:40 +0000
ROA not before: Wed 25 Jun 2025 09:13:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1680
IP address blocks: 95.175.60.0/24 maxlen: 24
95.175.61.0/24 maxlen: 24
95.175.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 11:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:5d:47:36:5a:49:f1:2a:2b:1e:f1:2b:d5:67:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Jun 25 09:13:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89dcd983e90aa8c72bf2c815fe736b9c82f3400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:42:1d:93:64:b9:3f:26:90:22:94:9d:6b:
b6:83:5a:16:8c:ce:8f:1c:6d:96:29:ae:60:82:7b:
c4:a5:0a:4b:88:d3:99:0b:49:27:e9:be:e5:0f:f8:
c5:f8:56:b5:2f:14:a0:5b:75:07:c7:7a:ae:97:1c:
ce:90:5a:2f:09:20:ee:c2:98:8a:89:af:e3:9f:00:
fd:37:89:b8:40:25:6d:00:6d:30:9b:8c:fb:24:56:
97:f8:55:49:31:7f:80:42:9a:bf:3d:1e:23:0a:73:
51:cc:d3:12:c7:a8:87:45:6c:84:92:7a:7c:7f:04:
e9:a8:3c:99:10:d1:1b:e4:57:00:12:a8:eb:ae:ca:
7d:78:87:05:77:c2:6a:2d:16:0f:3e:17:48:eb:6b:
46:6b:e2:61:25:9c:0b:76:47:64:39:9b:21:65:f8:
75:29:82:3a:42:ff:0b:b2:52:13:94:b1:ce:4f:eb:
65:44:24:f9:c8:3c:02:7d:9d:81:41:fa:32:c6:30:
bc:eb:ac:96:a8:9b:3f:10:34:64:50:73:66:9c:d7:
0c:13:ba:68:a1:d3:4b:5e:ec:16:47:b3:f7:01:96:
1a:99:35:73:59:85:f0:00:a0:5e:47:02:e0:65:78:
56:13:c0:c6:a6:3e:b5:4b:19:2e:4a:bb:dd:a9:6f:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:D9:83:E9:0A:A8:C7:2B:F2:C8:15:FE:73:6B:9C:82:F3:40:0B
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/idzZg-kKqMcr8sgV_nNrnILzQAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.175.60.0-95.175.62.255
Signature Algorithm: sha256WithRSAEncryption
2e:f1:5e:ba:16:fa:f5:7c:77:f5:56:19:77:27:f7:e5:41:22:
cf:a3:07:3c:78:53:2c:20:5a:87:ae:a5:58:eb:b9:77:c0:6f:
7f:64:6c:2b:53:ca:65:2c:21:7b:20:21:29:41:6b:44:cb:54:
18:bb:08:5f:d7:6c:92:8e:ad:c6:10:16:c4:f6:62:c6:8c:58:
db:9e:43:c8:52:4a:f0:d5:43:41:20:f1:68:b8:a3:9c:6b:7b:
70:62:14:df:77:f7:7c:a2:01:7f:d4:cb:1b:36:7f:1f:5d:90:
7b:97:d7:6c:84:24:2c:6b:5a:99:19:86:3d:ec:93:b0:db:63:
19:8d:6d:39:e9:6b:c9:96:21:f5:be:05:ee:66:59:f8:95:28:
42:57:d9:28:cb:09:fa:02:70:1e:78:c7:8b:64:73:a0:f3:15:
cf:3c:f1:55:9d:f7:8c:99:e6:a3:a9:06:fa:0f:f9:d2:af:97:
c9:35:32:60:89:09:da:1c:55:11:48:3d:8e:85:5f:46:b0:e9:
3a:c3:87:0e:8c:39:08:03:6e:fd:7e:9e:26:0d:ed:4a:a7:7e:
67:33:37:7c:86:95:ee:c9:39:3f:c6:09:f5:2e:51:ef:61:b1:
bb:9b:22:cc:74:a9:21:14:69:bc:0f:63:85:c9:1e:4a:76:59:
65:db:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:54 2025 by rpki-client