Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/hCVftUVpxFFDZtFGbJyGb1iQU1Y.roa
File: hCVftUVpxFFDZtFGbJyGb1iQU1Y.roa (raw, json)
Hash identifier: ea9ztJKC1hc+z8kHei8zlZjRGOc5O7wFhroJQ86/IFc=
Subject key identifier: 84:25:5F:B5:45:69:C4:51:43:66:D1:46:6C:9C:86:6F:58:90:53:56
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019725161A13DDE0876244B18A770241AB66
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/hCVftUVpxFFDZtFGbJyGb1iQU1Y.roa
Signing time: Sat 31 May 2025 06:44:54 +0000
ROA not before: Sat 31 May 2025 06:44:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209439
IP address blocks: 95.111.128.0/19 maxlen: 24
149.232.189.0/24 maxlen: 24
2a00:8b80::/32 maxlen: 32
2a09:3dc0::/29 maxlen: 30
Validation: Failed, certificate revoked on Sat 31 May 2025 20:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:16:1a:13:dd:e0:87:62:44:b1:8a:77:02:41:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 31 06:44:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84255fb54569c4514366d1466c9c866f58905356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:f2:6a:ad:16:cc:cd:7f:94:28:41:fa:4b:
5f:28:71:dc:f6:51:c4:b2:42:40:00:c0:f7:3f:ee:
98:71:12:6a:b4:50:f1:e0:b9:cf:cc:25:28:b4:b2:
9b:80:42:eb:53:75:6c:96:98:d2:1a:05:69:3e:93:
bf:8b:52:14:61:25:0d:b4:ce:56:77:f4:60:df:5c:
76:99:41:7b:bf:06:a0:eb:c0:e9:c1:1e:28:0b:e8:
22:96:d9:e9:8d:78:b9:99:5c:e6:1f:e6:35:c0:8b:
df:29:a8:c6:69:14:ac:8d:96:a5:ff:74:e3:c2:34:
41:8f:40:0e:fc:61:3e:78:47:77:62:8c:fe:b6:53:
7f:57:2b:ad:7b:dc:65:85:af:be:e3:d1:5e:68:2f:
eb:6e:b6:e2:74:15:9a:30:7b:df:fa:13:55:48:dd:
fd:25:c4:a0:c6:db:07:9c:64:0b:f6:3f:64:33:49:
45:ee:e4:ad:2c:fb:6d:bd:7a:d0:a2:ff:8f:13:3a:
72:8b:bd:a4:8d:6b:d6:d0:2c:fb:db:03:96:cb:1f:
df:fc:4c:21:31:3e:2b:b2:01:ba:94:16:bc:a5:19:
e2:e0:96:b2:1f:76:36:73:91:88:2c:1f:56:bb:a3:
31:25:33:44:96:a4:f5:77:9a:dd:ad:af:cb:df:da:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:5F:B5:45:69:C4:51:43:66:D1:46:6C:9C:86:6F:58:90:53:56
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/hCVftUVpxFFDZtFGbJyGb1iQU1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.128.0/19
149.232.189.0/24
IPv6:
2a00:8b80::/32
2a09:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:b7:e1:82:e3:c3:f4:02:a8:fa:58:f8:ea:5b:5e:9a:37:c8:
60:b6:70:b5:6a:63:0d:2d:93:4e:82:13:e5:05:bc:27:8a:5b:
67:2e:c1:f4:3e:c0:45:7d:73:d9:52:a1:72:b9:c4:a9:b4:5e:
99:22:c1:f2:1d:9c:04:36:a9:18:10:bd:0e:dd:0e:b7:25:62:
00:19:07:81:5c:59:12:a4:63:b9:39:50:8f:68:53:f6:83:1b:
1f:70:b5:db:0d:db:dd:b8:75:01:57:0f:ec:34:78:04:b3:c8:
5c:a8:ce:0f:93:ef:64:1c:51:8a:30:b1:f5:99:29:fe:c9:de:
97:6d:ce:ee:71:dc:7e:ef:db:ed:58:76:86:50:0c:83:7e:2c:
e2:e1:9b:a3:41:80:f3:ee:ce:09:8c:66:99:db:cb:30:ca:f2:
b3:7f:aa:db:80:de:eb:37:aa:d8:ac:05:49:7a:f2:4e:c2:bb:
d6:28:f4:96:3d:7d:38:c7:16:15:54:d1:33:f0:4b:a7:fe:ad:
1d:e2:2f:e2:c4:dc:86:d1:8d:1c:16:dd:c0:2a:7b:67:50:a8:
91:74:ef:7c:15:4b:ac:04:fe:32:97:e0:c8:69:f2:54:29:6d:
85:be:c4:ef:24:82:aa:5c:4b:95:78:e9:5f:3c:2d:16:c2:3f:
a6:ad:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:32:47 2025 by rpki-client