Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/agZyqsXS0ArElSSeLILMm1D-3JE.roa
File: agZyqsXS0ArElSSeLILMm1D-3JE.roa (raw, json)
Hash identifier: wOsnUIeBih5ZYVqQkkWS8zyAc9C6Ih7WlazevqVQvgA=
Subject key identifier: 6A:06:72:AA:C5:D2:D0:0A:C4:95:24:9E:2C:82:CC:9B:50:FE:DC:91
Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial: 019754825896035BB794A33423FEFCF4BE50
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/agZyqsXS0ArElSSeLILMm1D-3JE.roa
Signing time: Mon 09 Jun 2025 11:45:17 +0000
ROA not before: Mon 09 Jun 2025 11:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25090
IP address blocks: 193.8.222.0/23 maxlen: 23
194.56.96.0/22 maxlen: 24
194.56.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 19:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:82:58:96:03:5b:b7:94:a3:34:23:fe:fc:f4:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Validity
Not Before: Jun 9 11:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0672aac5d2d00ac495249e2c82cc9b50fedc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:c4:db:47:87:37:76:2b:00:9c:f9:16:5c:
aa:4e:c4:10:85:79:93:c9:45:f3:21:e1:42:88:c3:
38:8e:2e:80:45:e4:83:3c:45:12:88:5d:11:29:4e:
97:c5:56:15:9c:96:35:65:55:ba:be:28:ef:18:b6:
05:8e:ab:09:61:b0:4a:1f:24:47:b7:24:b7:79:ce:
22:08:52:62:f1:cd:77:9b:20:03:f1:7c:1a:d4:47:
3a:4e:bb:7b:94:37:ff:cf:cf:46:b3:f0:0e:2a:30:
6f:0e:59:93:94:b9:d9:53:b2:62:38:3f:03:37:1d:
73:bb:79:bf:57:60:e5:64:ca:11:0d:73:48:4a:2c:
48:e4:d8:aa:ec:bd:1f:32:ab:5f:19:22:fd:55:ad:
11:93:97:07:b0:5d:f2:9e:ef:97:c5:4f:2f:37:51:
f4:c3:48:ee:19:38:ec:ef:af:07:57:ac:31:bc:d6:
ce:2b:e8:87:c6:06:86:a9:70:47:93:ea:11:62:02:
9a:5f:4a:9d:63:34:4c:e0:44:65:28:37:9c:ca:2d:
cf:55:5f:1c:fb:d3:2e:ae:69:1f:25:71:4f:2d:21:
28:47:9f:27:97:c2:47:56:99:17:a5:56:0a:e8:c9:
c7:9a:21:a5:b5:46:f0:b3:bb:9e:72:0e:22:2b:10:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:72:AA:C5:D2:D0:0A:C4:95:24:9E:2C:82:CC:9B:50:FE:DC:91
X509v3 Authority Key Identifier:
keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/agZyqsXS0ArElSSeLILMm1D-3JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.222.0/23
194.56.96.0/22
194.56.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a2:37:9d:3c:2b:a3:9f:7f:14:4f:c4:c9:8b:e8:33:bb:3f:
51:0c:24:30:66:3e:75:d4:66:fc:b7:3c:78:b5:1e:33:85:ef:
03:e1:05:59:b4:94:6c:c0:60:a3:cd:59:f4:30:a5:bd:a5:3f:
49:50:56:69:8e:98:c4:14:69:02:b9:66:33:72:5c:93:f5:ac:
7b:ba:f3:fb:42:e2:3f:64:cd:46:07:92:ba:79:ad:32:8b:1c:
a8:66:89:c2:83:18:ab:48:d9:6b:19:1b:ea:5b:32:1d:23:86:
2d:20:b7:43:6a:89:19:2b:f1:b6:7c:f6:9c:77:28:c9:40:71:
26:2b:98:89:ec:a1:90:1b:8c:bc:99:ba:04:b1:ec:67:90:eb:
fa:d3:3d:28:24:25:8a:2f:39:c9:a6:36:b1:c3:29:60:fd:09:
60:be:a9:bb:80:d6:2a:09:80:57:5f:42:7f:a2:17:45:07:28:
7c:90:0d:b2:82:89:cf:8e:59:56:0e:6a:3c:77:05:66:b9:56:
87:e8:72:62:a2:a0:b0:67:2c:a6:43:b8:ab:69:ec:2e:56:7f:
82:de:a8:b8:8a:7e:4d:6e:cb:c9:09:71:1f:e7:9f:8e:cb:cb:
70:8d:42:e9:ca:2a:3b:52:99:8a:81:4a:f3:e8:c0:f4:72:57:
1d:41:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:55 2025 by rpki-client