Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7w6oovQGXeWQrSvAUHoxhljE19Q.roa
File: 7w6oovQGXeWQrSvAUHoxhljE19Q.roa (raw, json)
Hash identifier: ar9Yx7Hkn+qPbC7cq7arifED9PO3WYbedkH91SSjakw=
Subject key identifier: EF:0E:A8:A2:F4:06:5D:E5:90:AD:2B:C0:50:7A:31:86:58:C4:D7:D4
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA319B2D062C67F7CF30FF75BC601A
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7w6oovQGXeWQrSvAUHoxhljE19Q.roa
Signing time: Sun 06 Jul 2025 22:27:42 +0000
ROA not before: Sun 06 Jul 2025 22:27:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.138.72.0/24 maxlen: 24
185.94.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:31:9b:2d:06:2c:67:f7:cf:30:ff:75:bc:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0ea8a2f4065de590ad2bc0507a318658c4d7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:51:61:4c:15:d1:4c:56:b5:aa:a6:a1:21:
c1:f7:bf:41:8f:c0:c7:48:38:c0:4f:39:50:b9:16:
94:84:13:13:b9:9a:be:fe:f4:4e:70:b5:04:26:de:
34:d7:54:7a:b2:14:ec:c9:74:4d:14:1f:3d:ae:00:
c2:71:42:15:9b:b3:8d:c1:99:98:21:6f:e0:30:36:
24:47:be:7b:20:a4:7e:f1:0a:9f:0a:50:a4:cf:6e:
1a:c7:53:19:38:8b:08:bd:dd:61:38:0f:67:cf:29:
4f:52:02:60:53:4e:9d:41:7a:b9:74:00:8a:d1:e6:
fd:ad:37:8c:66:a6:78:33:eb:b0:8c:ac:98:e6:53:
72:61:2b:aa:25:52:4e:9a:47:8d:72:60:9f:7a:41:
27:c3:01:05:16:36:49:8e:71:a2:1d:49:3b:79:4e:
5f:1e:4b:4c:91:38:26:34:fd:f0:c2:26:23:56:75:
a1:e5:15:e7:86:f7:2f:d0:5a:7f:c6:f9:5a:48:4f:
27:20:de:20:d7:cf:a2:7c:47:c2:f7:55:d0:73:f3:
70:0a:0b:02:70:a3:f5:cb:3b:f7:ed:5f:58:45:1b:
bc:6c:64:7b:8b:75:e5:00:ed:9a:57:31:25:53:53:
68:f1:5a:f1:6f:48:81:75:6b:9a:32:e4:98:96:ec:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:A8:A2:F4:06:5D:E5:90:AD:2B:C0:50:7A:31:86:58:C4:D7:D4
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7w6oovQGXeWQrSvAUHoxhljE19Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.72.0/24
185.94.166.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:1e:55:c7:5a:f6:b7:f8:2f:2f:a1:3b:63:54:c4:5a:fe:
57:e7:cb:6a:bd:e0:63:c5:d1:33:d0:3c:b4:ef:cf:bf:01:79:
b4:c8:43:e0:8e:12:2e:b3:6e:f9:1b:ce:e9:49:aa:b6:76:c2:
cd:e6:e6:2d:97:b6:a0:48:ff:c5:ef:40:af:fd:27:d2:27:6b:
79:0d:38:64:a2:aa:e5:c4:85:e3:17:9b:3b:02:d4:ba:82:00:
2d:61:4a:2e:1b:de:8f:51:88:44:c5:85:b1:ca:59:2a:dd:05:
79:0d:c6:25:91:29:c9:40:cf:b9:0c:0c:fa:1d:65:85:5f:97:
08:76:a4:65:7f:d1:bb:55:0f:2c:04:d2:1c:62:56:ba:b3:ba:
60:df:f2:9b:fb:e7:87:63:96:25:72:37:34:4a:3a:8f:59:96:
81:f1:84:5f:5f:a2:44:a6:6e:9f:a7:2c:31:21:8d:1a:4e:b7:
4f:a9:fc:c7:53:da:94:88:b0:44:39:75:32:7d:d9:91:4a:0d:
84:0a:cb:2b:a5:06:e2:5f:6f:21:72:a7:f9:11:11:ec:ee:8a:
4d:2a:46:45:7a:d7:32:b1:c2:19:78:43:09:f5:3f:11:d1:40:
5e:30:9a:96:c7:71:44:1d:20:30:0d:5c:68:10:28:96:76:bf:
93:ec:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:45:07 2025 by rpki-client