Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/lMr94eayaMpZ31o3cNzKZw8ixHA.roa
File: lMr94eayaMpZ31o3cNzKZw8ixHA.roa (raw, json)
Hash identifier: /poas3hfXC0lidKvgvMh3GI6Q/pwfAxDjdjA57sOiZU=
Subject key identifier: 94:CA:FD:E1:E6:B2:68:CA:59:DF:5A:37:70:DC:CA:67:0F:22:C4:70
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197E4C5449F2BCC8C640C6175FE9B3A7876
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/lMr94eayaMpZ31o3cNzKZw8ixHA.roa
Signing time: Mon 07 Jul 2025 12:03:42 +0000
ROA not before: Mon 07 Jul 2025 12:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212666
IP address blocks: 31.133.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 16:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:c5:44:9f:2b:cc:8c:64:0c:61:75:fe:9b:3a:78:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 7 12:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94cafde1e6b268ca59df5a3770dcca670f22c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:9d:02:52:78:8a:e2:bc:89:0e:2f:6c:86:
1b:ee:ee:e9:e6:b5:9f:eb:4d:f4:5e:be:b4:55:12:
7f:bd:38:61:90:be:9a:3e:d1:5e:69:93:55:06:4d:
00:4a:5e:12:42:7f:9e:60:5d:14:97:58:9e:48:e6:
6b:53:bb:2a:e0:c5:3e:61:5a:06:ff:b1:3c:3f:85:
a8:c1:42:28:ea:e0:58:1d:3a:ee:2b:b2:e7:2b:7c:
c7:c5:df:75:ac:5f:85:89:c3:41:69:78:b7:ae:b6:
79:6a:f6:42:69:92:b9:13:60:f5:3f:df:dc:7c:0f:
d4:cd:36:a7:4d:ab:4e:59:a4:f5:6d:0b:93:68:a8:
98:69:e0:e0:fe:12:2c:00:9d:56:29:53:22:5f:45:
17:51:96:57:70:f4:f0:6a:ff:ae:9d:d3:29:62:5a:
1b:39:f0:be:a7:f6:4c:3e:e9:0c:31:6c:d8:1e:86:
c2:96:2c:18:06:55:f7:94:5b:85:86:59:6a:3f:e1:
c4:dc:6b:58:6d:76:3e:c6:94:19:64:3f:a0:f9:c8:
64:64:d5:f6:99:36:4a:cb:66:85:f3:25:a6:fa:4a:
b1:de:26:01:24:e6:16:d8:c9:ff:5a:b4:f1:c0:29:
2d:7b:41:be:f8:42:54:c2:b2:b1:9a:58:ef:74:b8:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:FD:E1:E6:B2:68:CA:59:DF:5A:37:70:DC:CA:67:0F:22:C4:70
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/lMr94eayaMpZ31o3cNzKZw8ixHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:4f:d3:c7:f6:cd:13:fa:c8:2f:6e:33:c1:e5:96:e6:cc:bd:
ea:70:94:f3:97:e4:3e:53:df:0f:6d:c8:d6:ea:f2:f1:7c:32:
95:d5:03:37:d2:24:ca:1e:d4:f4:0c:b8:23:48:2d:ec:b2:7c:
c3:d1:f1:9f:62:a2:db:f1:98:c0:d6:85:a5:61:c0:fe:70:8d:
81:34:4d:60:e2:1b:c1:61:7c:4d:a0:0e:17:30:82:98:dc:5e:
a4:54:ad:9d:08:f7:fc:29:c7:44:2c:ee:1c:ba:75:5c:9c:0f:
55:95:76:eb:85:49:b6:93:c7:23:c1:de:f9:04:d2:1e:bf:e6:
2d:5b:af:7a:67:9b:1e:b0:af:f4:4e:e4:ab:6c:a6:7e:0a:3d:
23:ea:09:12:66:97:14:27:22:fb:c6:19:98:fa:45:c6:68:22:
4f:a0:a9:ad:da:df:a6:b7:33:ec:9e:00:62:96:7e:df:20:76:
f2:44:20:93:7b:08:5c:6e:d6:4c:14:c6:8d:17:25:35:06:45:
80:c5:0f:23:3d:8f:5d:d7:e1:9e:a2:13:21:f8:bd:b6:7b:d4:
f6:05:e5:f5:ad:91:b3:1f:04:1e:2c:36:dd:23:94:55:de:9c:
2e:1c:85:72:f5:5b:b4:8e:c9:ef:1b:5e:0c:43:11:b8:98:96:
ae:99:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:30 2025 by rpki-client