Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Vg6BXeSKqin_TOVAQdZfEpjEnBI.roa
File: Vg6BXeSKqin_TOVAQdZfEpjEnBI.roa (raw, json)
Hash identifier: HJS2x4gF71Vv84EZyZzZ+fQl98ObK9/aoJSZb1/1io8=
Subject key identifier: 56:0E:81:5D:E4:8A:AA:29:FF:4C:E5:40:41:D6:5F:12:98:C4:9C:12
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA374DE7161B163E52DE92C502761B
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Vg6BXeSKqin_TOVAQdZfEpjEnBI.roa
Signing time: Sun 06 Jul 2025 22:27:43 +0000
ROA not before: Sun 06 Jul 2025 22:27:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 45.138.73.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.188.0/23 maxlen: 23
193.124.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:37:4d:e7:16:1b:16:3e:52:de:92:c5:02:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560e815de48aaa29ff4ce54041d65f1298c49c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:24:9f:5d:6d:b0:77:4c:5c:5b:db:d1:30:
71:10:2f:9d:64:37:8f:30:ce:f8:cb:95:b0:31:21:
ed:da:f9:30:f7:9e:96:1f:cc:d0:b6:fe:8f:57:b2:
8a:4c:5f:43:c4:89:19:18:6e:1a:37:c4:8f:db:b5:
d5:a9:bd:11:1d:cf:ed:84:6d:f6:f5:71:8c:69:98:
c7:eb:68:74:a1:a0:35:c0:f9:52:a2:55:39:f6:4d:
50:47:30:44:fd:5d:09:fd:66:88:71:5c:fa:0f:ac:
40:cb:a6:a9:f8:79:20:f2:62:29:c9:e7:57:55:c4:
db:d5:a0:3d:bf:c6:89:ca:69:1a:53:f3:4a:45:06:
e7:24:9a:09:17:6c:61:7b:15:82:d2:14:86:b2:41:
f9:38:c9:b1:f9:18:e2:07:dd:a6:65:f5:09:67:71:
b7:99:af:1e:16:dd:80:4e:43:af:b6:b1:a3:59:dd:
22:98:1f:52:88:fd:e9:1d:95:43:58:cc:7b:84:16:
ec:60:e9:8c:de:db:8b:4a:2b:98:22:bc:a1:f3:5d:
09:08:f2:4e:6b:4c:92:73:7f:be:1b:51:b3:89:9d:
9d:ba:de:ef:b1:a6:db:e0:b2:3a:22:fe:d5:b8:29:
3d:48:d7:03:e5:3f:46:69:f2:db:a6:60:bd:d3:79:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:81:5D:E4:8A:AA:29:FF:4C:E5:40:41:D6:5F:12:98:C4:9C:12
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Vg6BXeSKqin_TOVAQdZfEpjEnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.73.0/24
46.17.105.0/24
91.217.76.0/24
185.94.164.0/23
193.124.182.0/23
193.124.188.0-193.124.190.255
Signature Algorithm: sha256WithRSAEncryption
55:a3:3e:0a:9e:2d:04:6d:2e:45:de:34:08:5d:6a:2f:c5:62:
e8:9a:05:0c:5a:b6:c1:70:33:01:1b:4b:cf:fb:2d:5d:ed:fb:
3f:6a:f0:9b:dd:75:0a:a2:51:72:68:bc:e5:69:31:45:ac:38:
6e:bf:b1:56:df:73:f7:94:15:8c:62:d3:2f:2e:ee:c3:2f:0c:
84:ea:b2:e7:16:79:cb:a4:4f:e5:6e:83:ef:7a:44:1d:60:bb:
24:e2:89:e2:c0:25:71:ab:44:d6:99:02:2b:63:e2:37:c3:6b:
6c:97:39:8c:5e:4a:b8:d2:bb:98:c1:df:66:6d:aa:15:d6:63:
b3:d3:e1:ae:d5:7e:e3:91:b7:38:06:c7:bd:22:37:5e:96:e8:
20:d1:87:cb:1e:ad:56:f7:c8:b2:a3:60:61:dd:8b:dc:0a:29:
cf:67:a6:87:38:66:8e:aa:70:71:83:2c:98:b2:62:19:3c:3e:
30:a3:44:c2:4f:42:26:1e:02:8a:b1:48:b8:95:cd:25:ed:ce:
39:1a:10:bc:50:37:58:ca:84:7b:ca:20:8d:7c:93:47:3c:ea:
ef:f4:d0:2a:ba:67:29:b5:b3:99:fe:10:78:d9:59:a5:36:60:
a1:e3:8a:62:77:7f:4c:53:c5:a1:e2:7c:88:a9:80:67:13:b8:
ad:4c:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:37:27 2025 by rpki-client