Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/6w7wS5KNgzSK1Im1Xy0jy7Rak_A.roa
File: 6w7wS5KNgzSK1Im1Xy0jy7Rak_A.roa (raw, json)
Hash identifier: kb4r5iTeDo+AUt8AwZy9uDZeCkyBk+JsxZqHVNc40kc=
Subject key identifier: EB:0E:F0:4B:92:8D:83:34:8A:D4:89:B5:5F:2D:23:CB:B4:5A:93:F0
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01976AEDC91D47B8FFCDF4A557A3F6BB1FC8
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/6w7wS5KNgzSK1Im1Xy0jy7Rak_A.roa
Signing time: Fri 13 Jun 2025 20:14:17 +0000
ROA not before: Fri 13 Jun 2025 20:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8254
IP address blocks: 46.28.64.0/21 maxlen: 21
46.28.71.0/24 maxlen: 24
85.90.197.0/24 maxlen: 24
85.90.198.0/24 maxlen: 24
217.12.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jun 2025 21:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:ed:c9:1d:47:b8:ff:cd:f4:a5:57:a3:f6:bb:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 13 20:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0ef04b928d83348ad489b55f2d23cbb45a93f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:8d:47:b6:27:96:b5:9d:44:33:c1:15:ba:
82:0e:7c:a7:6b:ae:e2:c7:32:84:37:88:06:05:5d:
92:15:8e:ef:c9:18:13:93:6d:f1:32:92:a1:3b:10:
6e:04:cf:7c:20:c0:c3:e1:1e:ba:02:7b:e1:07:83:
78:b4:2e:0b:4f:8c:05:04:17:3a:98:f9:44:88:b2:
70:0c:1b:ce:9d:95:dc:ef:e1:cf:f5:3a:33:68:30:
7a:49:7c:fb:32:f6:d6:10:48:94:98:06:6e:65:16:
b6:81:2d:bb:c7:51:25:fb:71:1f:82:d4:c0:00:da:
21:fd:c8:17:29:bf:9f:ab:60:9c:e9:dc:f3:96:25:
4d:2a:74:d2:d7:59:e1:7f:01:62:cf:6a:24:30:83:
90:75:27:ec:ea:8c:69:47:6b:34:bd:74:6c:4e:f3:
69:fc:7a:6f:46:4d:6a:9f:4c:6a:cf:9e:54:7e:70:
6f:90:42:00:62:5b:40:90:65:74:64:19:1a:2d:de:
1e:c3:22:69:8a:59:55:19:f6:bb:6a:e4:a4:44:b7:
d2:43:3f:10:89:b9:fc:10:7b:b0:9f:62:f6:39:bd:
d2:5f:30:28:4a:be:d7:4a:cf:77:3c:a3:6e:f8:47:
02:a4:a8:a5:67:4c:e9:ce:52:89:70:59:a3:a2:77:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:F0:4B:92:8D:83:34:8A:D4:89:B5:5F:2D:23:CB:B4:5A:93:F0
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/6w7wS5KNgzSK1Im1Xy0jy7Rak_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/21
85.90.197.0-85.90.198.255
217.12.204.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a5:ee:16:6a:85:bf:be:58:1f:8c:53:c6:3d:ac:a9:d7:be:
50:54:8c:c1:bb:d2:dd:64:08:f7:e3:7a:b0:61:a7:12:ff:65:
e5:dd:05:83:68:7f:95:26:58:89:75:6a:48:9c:2c:48:87:27:
b6:3e:9d:cc:02:69:1c:9e:b6:66:d5:13:ba:90:7b:22:43:e1:
a2:e3:09:9f:98:88:20:33:a4:93:dc:b8:bc:22:ae:86:8e:c6:
5e:20:b4:0b:da:37:af:86:51:79:d5:c5:8d:c4:e3:e0:5f:b5:
95:6a:b6:98:8c:ba:2d:4b:bf:df:52:8f:a0:e4:87:f6:bf:a1:
af:fd:ba:fb:28:3b:0e:cb:0a:d2:2f:7c:ec:9a:3b:5d:bb:b5:
14:7d:61:49:6d:be:86:7e:86:7b:ec:48:6e:6a:a1:91:91:28:
ee:8a:7d:fd:41:f9:63:fb:48:7a:4f:fe:c5:03:5f:5d:c2:50:
01:56:60:52:d7:ae:1c:dd:da:5d:ee:8d:25:1f:ed:66:73:db:
26:29:32:9b:42:29:ef:7c:d9:76:0d:a2:6f:de:42:7c:56:6b:
fa:5f:c9:1e:84:d1:23:db:1a:ab:70:0b:ff:ff:d7:8a:52:9e:
3e:4e:2c:59:a8:38:24:fc:b6:8d:28:70:ed:fa:e8:ba:22:bc:
f0:4a:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:22 2025 by rpki-client