Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nCMnK5iXY0xnX5JahUyU7J9H1qA.roa
File: nCMnK5iXY0xnX5JahUyU7J9H1qA.roa (raw, json)
Hash identifier: cr+XF9XQ6wYvtQg+QA8rawlH2HimRbEX69ua5yHQ868=
Subject key identifier: 9C:23:27:2B:98:97:63:4C:67:5F:92:5A:85:4C:94:EC:9F:47:D6:A0
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B27FEDFF19962E2486CC8B79103172
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nCMnK5iXY0xnX5JahUyU7J9H1qA.roa
Signing time: Mon 14 Jul 2025 16:09:09 +0000
ROA not before: Mon 14 Jul 2025 16:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41904
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b2:7f:ed:ff:19:96:2e:24:86:cc:8b:79:10:31:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c23272b9897634c675f925a854c94ec9f47d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:f4:d6:fa:4d:f6:fb:9d:5b:d1:ae:4b:ed:
7f:2a:94:a9:30:12:ef:26:4b:23:d4:3c:e7:ed:80:
5d:b5:d1:95:e2:41:42:10:bd:79:a5:d6:24:68:fd:
c1:62:f9:3a:48:24:02:c1:2a:4f:66:55:cb:62:d1:
4c:9e:dc:b1:23:d5:5e:1e:01:bf:d6:a4:0b:37:9e:
7f:74:f1:8a:28:7c:de:ce:2a:a7:e0:01:cb:ca:c5:
13:9a:4f:b4:a0:0f:53:ef:fc:35:4d:7e:88:8c:cc:
d5:f6:e9:e9:d0:0c:59:01:06:ca:a9:63:fa:94:ae:
2f:8b:d3:b9:f4:ea:5f:4f:71:11:d1:34:0e:21:96:
b8:4b:6e:86:28:80:96:5d:84:1e:b2:55:fe:0e:f3:
49:69:ad:22:d4:17:49:84:d0:be:2b:62:7e:b2:63:
61:b1:57:6f:e8:c3:d3:9a:41:70:33:62:30:2d:b5:
64:c7:07:b8:76:b0:fe:90:12:e9:d0:4f:70:c8:6c:
a3:0f:26:05:bc:c2:b5:58:74:ad:c9:a3:4e:1e:50:
1d:ad:b5:c1:6e:e0:48:52:87:2b:2f:d7:3b:b7:8a:
e5:81:1f:3c:58:ca:1a:83:c3:91:4d:00:d8:a2:79:
69:63:70:2d:0f:c1:81:69:83:bd:58:e3:5c:41:f6:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:27:2B:98:97:63:4C:67:5F:92:5A:85:4C:94:EC:9F:47:D6:A0
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nCMnK5iXY0xnX5JahUyU7J9H1qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:15:10:37:91:0c:0c:89:a6:77:96:fc:8a:a2:8a:61:4f:2e:
66:77:72:40:ed:60:eb:68:bc:3b:34:b9:84:48:7a:45:8f:c8:
64:e4:5b:6f:ff:29:96:75:38:dc:48:08:13:e6:ba:f5:03:68:
33:5b:93:d4:69:1d:10:ed:1a:b7:10:26:6a:1f:47:c5:b1:7c:
cf:0b:84:27:2a:cc:41:59:16:84:28:01:2c:78:e2:2f:cd:02:
81:d7:05:2d:f4:2b:3c:57:7b:9e:4b:5f:4c:4d:21:78:5c:81:
12:e1:b9:3f:1a:4e:f6:d4:9b:11:83:4b:a8:1a:bd:0f:75:13:
f4:b0:cc:bb:56:7f:78:33:fc:f6:14:15:b8:1f:00:bd:64:f5:
01:67:4b:88:b5:d6:50:75:26:82:89:49:72:3c:a6:be:ff:14:
b9:43:a0:59:18:29:ad:d4:d0:7a:cf:5e:0e:af:3b:79:cc:3c:
be:a9:57:0b:c6:2a:5f:c6:2f:fd:db:4d:b7:31:ff:aa:dc:97:
1e:00:0a:c1:97:d7:0e:16:46:05:87:e9:31:f9:99:ff:8e:af:
bd:30:a6:bc:8a:7a:eb:df:9e:e7:19:0c:1b:11:dd:28:ce:5c:
80:2c:64:32:a4:78:7b:5f:e3:2e:f0:09:a7:16:e7:31:10:34:
3a:7b:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:38:27 2025 by rpki-client