Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/8ZLeA4F_J0CVUbYeajzJL0X34E8.roa
File: 8ZLeA4F_J0CVUbYeajzJL0X34E8.roa (raw, json)
Hash identifier: 1vbRzEYuCNypyuTyHqo2J3cqNrFZAeuIwIUPZlv/3F0=
Subject key identifier: F1:92:DE:03:81:7F:27:40:95:51:B6:1E:6A:3C:C9:2F:45:F7:E0:4F
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 019754BEC4F861128AB44D922F369403F7E0
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/8ZLeA4F_J0CVUbYeajzJL0X34E8.roa
Signing time: Mon 09 Jun 2025 12:51:17 +0000
ROA not before: Mon 09 Jun 2025 12:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51583
IP address blocks: 91.219.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 11:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:be:c4:f8:61:12:8a:b4:4d:92:2f:36:94:03:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Jun 9 12:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f192de03817f27409551b61e6a3cc92f45f7e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:fb:1f:12:ff:aa:4e:79:89:fd:d0:76:72:
d0:8c:18:0a:eb:8f:9b:ef:b2:4d:d5:7e:fb:14:e6:
3b:b8:92:4e:17:6f:56:c2:3f:d0:74:99:d0:c5:72:
92:fe:bd:1a:5f:b9:46:42:c5:36:d3:23:70:91:68:
17:7d:df:f3:f8:e8:76:bb:bd:c3:cb:91:9d:19:13:
08:1f:40:06:3c:62:0f:61:de:52:5b:ae:99:72:e5:
b6:1d:cd:95:de:b0:d4:19:bf:79:d7:a2:b1:f3:7f:
ac:96:7f:22:f6:8c:77:da:e3:66:6c:57:11:01:12:
52:98:8a:ed:60:d3:d9:f6:eb:bc:85:07:e2:2a:77:
66:e9:94:70:45:06:59:04:59:25:4c:4d:f1:ae:cd:
19:e0:25:d6:f2:11:fd:57:47:62:18:00:b1:bd:49:
e0:b7:e5:ed:e6:ed:30:8b:55:df:07:6a:48:ef:cb:
b5:d2:e9:fe:88:75:75:d9:04:10:a1:49:64:0b:82:
3e:c3:bd:ce:2d:26:c5:21:19:93:66:c5:b3:43:e3:
2e:b5:cb:49:b5:cf:5f:57:67:82:bc:58:af:46:f3:
45:4f:38:c0:8c:67:99:4f:96:a4:93:9c:1f:2e:e6:
fb:12:32:b7:66:f6:13:d1:8f:51:ff:3e:27:f0:bc:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:DE:03:81:7F:27:40:95:51:B6:1E:6A:3C:C9:2F:45:F7:E0:4F
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/8ZLeA4F_J0CVUbYeajzJL0X34E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.88.0/24
Signature Algorithm: sha256WithRSAEncryption
72:74:2c:95:6b:cf:67:50:00:00:a0:6b:dc:9b:2e:69:99:15:
67:6e:8e:ac:9e:2a:c9:9d:e0:03:c5:f4:71:8d:76:fd:c0:3a:
8d:16:1c:3b:8a:b6:e7:0d:f9:f4:14:19:22:53:26:72:bd:85:
3a:a5:b6:59:2b:22:31:9d:e1:71:82:fc:23:85:da:dd:2b:1f:
5d:25:dc:e0:c3:a0:15:3b:b9:09:89:01:d8:23:4a:55:3c:1c:
7a:71:5a:2a:ff:c6:30:c0:bc:c4:2b:b8:bf:cd:03:a5:49:fd:
55:d0:cd:00:08:bf:8c:35:5b:82:1f:3d:ab:f5:5e:a2:53:d3:
08:2d:e3:75:dd:91:be:42:41:e4:67:0f:5f:72:ac:a1:2d:81:
7c:90:45:70:c0:a8:28:08:ab:c3:da:56:5f:fe:60:3e:91:c2:
20:2c:e5:a1:ec:25:69:31:d6:c2:5d:74:8b:25:87:48:f5:73:
ca:09:e1:8a:91:39:0e:c4:d3:ab:68:2e:f1:d1:df:e7:1f:26:
be:1c:75:23:60:72:03:96:bd:14:2b:ca:98:22:8b:96:9e:d8:
42:b1:fd:65:23:e5:8b:03:f9:4f:ad:8c:71:af:5e:30:8a:eb:
7f:aa:4e:f4:e2:10:fc:2b:9c:d9:a7:5b:c0:b5:de:2e:65:cb:
3c:41:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:20:39 2025 by rpki-client