Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iR9ID5596CKcBhqfEL4-n8gRjUI.roa
File: iR9ID5596CKcBhqfEL4-n8gRjUI.roa (raw, json)
Hash identifier: h2U8DdngeVkAHxb3KxxMj0jOnE8QSVjIxZCb+flWJ2g=
Subject key identifier: 89:1F:48:0F:9E:7D:E8:22:9C:06:1A:9F:10:BE:3E:9F:C8:11:8D:42
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0197967055EC827FB1A7DEC7255DBBD099EB
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iR9ID5596CKcBhqfEL4-n8gRjUI.roa
Signing time: Sun 22 Jun 2025 07:00:33 +0000
ROA not before: Sun 22 Jun 2025 07:00:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.56.26.0/24 maxlen: 24
109.122.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 20:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:70:55:ec:82:7f:b1:a7:de:c7:25:5d:bb:d0:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 22 07:00:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=891f480f9e7de8229c061a9f10be3e9fc8118d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:31:db:04:67:88:56:23:2f:d9:f0:5c:65:
e9:b0:da:4b:ce:b4:bf:16:c7:27:1b:a9:4b:ba:f9:
5f:a0:29:fa:c0:91:48:39:16:44:ef:ed:0c:7b:17:
9e:c8:f8:07:48:e9:d5:a7:15:1a:9b:63:b3:91:93:
8e:d3:1b:cf:43:ed:73:84:26:fe:72:79:c4:2a:08:
0b:81:a2:e7:44:27:26:8c:52:9e:10:b8:65:e7:ea:
4f:f3:4f:78:af:cb:18:24:d1:26:e5:ca:17:4b:36:
69:98:3a:bd:66:cd:80:e3:4e:4f:55:20:fe:47:8c:
94:b7:3f:a8:9f:c3:0d:e0:4f:8c:f8:f3:61:4d:e8:
f4:15:2e:49:57:aa:e5:24:8f:ad:48:c6:83:b2:a8:
4b:6b:9b:08:f9:d7:1e:22:26:81:98:b8:12:c0:f2:
84:64:3c:4d:1d:d4:74:2a:da:5e:6c:2a:93:82:e5:
92:d5:ce:1c:16:40:88:6a:9b:d0:29:cf:ff:29:2c:
2e:25:6b:aa:af:9c:d1:1f:fb:04:a7:91:0d:54:89:
cc:92:1a:18:45:24:04:72:e9:a2:eb:17:24:30:cf:
18:05:e1:06:72:08:db:b1:60:08:1b:4f:3d:57:b7:
70:12:2b:0d:15:00:a0:43:78:a7:88:6f:2d:f7:fd:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:48:0F:9E:7D:E8:22:9C:06:1A:9F:10:BE:3E:9F:C8:11:8D:42
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/iR9ID5596CKcBhqfEL4-n8gRjUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3b:34:95:2c:ca:1a:05:31:f4:b3:c5:57:61:b0:8f:2d:f9:
11:b8:5c:f9:66:17:bc:cd:f5:4c:35:06:ce:13:c5:ab:b3:f3:
f8:62:d0:7d:8f:7b:03:ac:a1:79:29:d5:62:b6:d0:74:be:4b:
6f:3c:b3:00:46:44:3c:86:85:b5:a9:aa:f7:49:e3:0f:d9:1f:
47:f5:4d:91:8b:fc:0e:d1:66:e2:43:03:55:3a:20:ee:68:8c:
58:10:d7:03:61:fa:36:99:6a:c7:9e:eb:af:2d:0a:1e:53:21:
83:41:23:d6:6e:e4:7a:44:91:5f:ba:34:e6:31:98:8a:96:98:
5d:73:26:f3:45:36:34:af:bc:dd:4f:c3:51:14:39:87:99:6a:
36:9a:ae:5d:dd:70:d9:c4:8d:73:05:50:0b:9b:31:88:50:8c:
12:a0:e5:e8:3c:89:6e:0f:58:0e:cd:90:14:97:e0:29:da:09:
d6:71:b8:75:a9:5e:93:96:d9:52:86:ee:2a:d6:e0:97:fa:3e:
ce:09:11:68:88:9b:8a:8f:bd:a4:0e:54:24:7a:1c:32:86:23:
ae:b6:b6:aa:45:8b:ff:2b:62:e1:5a:de:d5:eb:e0:32:76:b6:
86:b7:bd:f1:6a:90:0d:e0:8f:2a:82:fe:da:98:2b:ab:a3:b9:
08:9b:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:57:49 2025 by rpki-client