Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vSFk5Eq5F4CB1bMuF4g3HUEbhkY.roa
File: vSFk5Eq5F4CB1bMuF4g3HUEbhkY.roa (raw, json)
Hash identifier: pmMIA2foJGy+kAxH/DOwUY/A05JZba5qzUWnV/XuWe0=
Subject key identifier: BD:21:64:E4:4A:B9:17:80:81:D5:B3:2E:17:88:37:1D:41:1B:86:46
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0197CF2D4ED2AD241978AD72158090F7DCA5
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vSFk5Eq5F4CB1bMuF4g3HUEbhkY.roa
Signing time: Thu 03 Jul 2025 07:25:42 +0000
ROA not before: Thu 03 Jul 2025 07:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48467
IP address blocks: 94.228.160.0/24 maxlen: 24
94.228.167.0/24 maxlen: 24
94.228.171.0/24 maxlen: 24
94.228.172.0/22 maxlen: 22
94.228.172.0/24 maxlen: 24
178.236.240.0/23 maxlen: 23
178.236.241.0/24 maxlen: 24
178.236.242.0/24 maxlen: 24
178.236.245.0/24 maxlen: 24
178.236.248.0/22 maxlen: 22
178.236.255.0/24 maxlen: 24
185.46.44.0/22 maxlen: 22
185.46.44.0/23 maxlen: 23
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/23 maxlen: 23
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Jul 2025 12:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:2d:4e:d2:ad:24:19:78:ad:72:15:80:90:f7:dc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 3 07:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd2164e44ab9178081d5b32e1788371d411b8646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:6c:3b:3d:b0:26:17:e2:5e:29:8c:b7:76:
aa:f6:3c:b0:eb:c8:4f:94:47:5a:2c:7a:10:3d:f9:
1c:33:1a:b5:a5:b5:39:7a:8f:b6:06:bd:61:73:3a:
1e:d4:05:71:11:de:47:7b:62:bc:f4:0a:d9:6e:0d:
47:1c:b1:f3:80:9e:f6:6d:58:86:b4:81:32:75:71:
0a:fe:f8:46:8c:9a:90:77:24:31:70:a5:76:46:4c:
9a:1e:db:6e:ca:55:a8:7c:b7:7b:9f:be:10:fd:dd:
c6:9e:38:30:5b:84:66:ee:a1:b9:13:3c:d8:73:a9:
3d:2c:15:9f:34:cc:11:19:de:3b:2b:b9:03:d5:dd:
27:09:1a:f8:87:fe:16:d3:d7:f1:c5:90:b9:7d:07:
2f:5d:f8:0c:58:7c:73:ba:af:6f:07:b8:67:cd:89:
3e:7c:c5:29:4b:42:1a:52:50:0c:8a:f6:a3:0f:60:
e2:b4:34:4a:3b:5d:96:4c:4e:c3:16:e6:32:7c:29:
92:71:d2:34:18:90:8e:d5:ae:88:15:3e:e0:dd:e8:
93:cf:9f:e2:5b:c2:21:02:4a:0b:40:bc:0e:dc:e3:
f7:b8:59:e7:88:a1:2c:b3:44:ca:63:00:a1:8a:80:
1c:27:f3:63:6d:69:bc:f9:25:62:b3:ba:eb:21:60:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:64:E4:4A:B9:17:80:81:D5:B3:2E:17:88:37:1D:41:1B:86:46
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/vSFk5Eq5F4CB1bMuF4g3HUEbhkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/24
94.228.167.0/24
94.228.171.0-94.228.175.255
178.236.240.0-178.236.242.255
178.236.245.0/24
178.236.248.0/22
178.236.255.0/24
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
93:91:7d:b9:bb:21:fe:fd:a3:0f:b0:bb:cb:c2:62:f1:fb:6a:
f5:14:c7:ee:8f:de:2d:80:b4:e7:13:56:69:0d:65:ca:ba:76:
27:8b:c7:2e:96:c2:1c:b6:c6:2b:9c:a2:c0:cc:c2:b4:30:9c:
16:c6:4d:e4:57:bb:a7:7a:2d:54:c9:f2:48:29:bf:4f:ea:de:
7e:18:24:a4:a9:c8:c7:38:23:eb:0e:2f:bd:8e:ee:43:7d:3c:
af:b8:c7:ed:1a:11:ac:a3:bf:4e:24:28:bf:95:52:af:db:df:
81:c1:b1:15:bd:e3:24:85:a1:8b:bc:82:8e:f5:37:68:6d:ea:
da:c4:bb:68:3c:e3:58:95:2d:2c:4f:80:c2:14:38:a2:45:11:
92:58:44:d0:39:47:44:43:30:00:9e:49:47:c0:95:4a:eb:46:
53:2a:6a:5d:7d:fb:53:a8:05:ca:cb:47:58:60:4c:00:91:bc:
d4:15:25:41:35:8a:7b:d2:12:a2:72:aa:7a:cd:5b:75:65:89:
44:20:63:91:52:48:f2:e8:33:b1:00:43:21:b5:7f:e2:d1:39:
09:54:2c:b6:1a:93:24:46:1b:b5:76:b7:11:c8:bc:79:a0:1e:
d2:37:c2:14:6f:36:63:3a:4a:e2:02:5a:41:2e:dd:f5:8b:11:
b8:81:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:40:07 2025 by rpki-client