Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0N8a_cD0RNxGcsMMbwAXdVMBKzg.roa
File: 0N8a_cD0RNxGcsMMbwAXdVMBKzg.roa (raw, json)
Hash identifier: o5Rxa6Cm8IZ2WjyGHMZz0qceXwzqS2Brc1LeJG6BXBw=
Subject key identifier: D0:DF:1A:FD:C0:F4:44:DC:46:72:C3:0C:6F:00:17:75:53:01:2B:38
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0197D43E9D59758F8399E17D6F90E3BA52FD
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0N8a_cD0RNxGcsMMbwAXdVMBKzg.roa
Signing time: Fri 04 Jul 2025 07:02:42 +0000
ROA not before: Fri 04 Jul 2025 07:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 80.71.233.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Jul 2025 06:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:3e:9d:59:75:8f:83:99:e1:7d:6f:90:e3:ba:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 4 07:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0df1afdc0f444dc4672c30c6f00177553012b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:53:36:f6:e7:cc:c9:dc:69:58:59:8a:73:
e6:dd:20:f8:be:cd:2e:f2:82:0e:b1:a4:bb:ce:bf:
48:ce:4b:1f:8e:34:a2:12:58:91:f3:74:1b:3e:15:
87:cc:a7:30:ad:88:f5:5a:3b:0d:05:f7:59:9f:3c:
80:b4:87:d5:a8:08:f2:6c:6b:55:60:9c:35:94:16:
91:c8:f7:fe:ad:71:9c:e3:4e:37:dd:bc:b6:40:e6:
3a:9f:fc:78:20:35:3d:48:67:6e:f5:f6:89:3c:6c:
76:a5:22:62:85:40:7a:6d:2a:ec:f6:28:35:bf:d0:
60:75:5c:18:ea:1c:04:62:5a:54:6d:70:93:9f:73:
46:f2:3e:1d:ef:87:7b:5e:f1:5e:06:94:80:b8:a4:
29:a7:3a:95:57:d7:d8:39:02:84:61:c3:cf:ed:d6:
53:83:21:1f:f3:cf:b3:0f:29:60:bb:8a:57:07:e2:
f1:17:6c:8d:24:09:da:c3:6d:b3:c7:fe:63:fd:47:
a7:48:09:82:a6:63:ee:c7:e9:03:50:b1:36:c7:96:
73:48:bb:04:37:3b:64:22:71:a9:81:78:84:82:8e:
f6:61:17:bf:9f:66:6b:b8:2e:e7:08:5a:b2:65:63:
f5:b5:2d:ee:66:e4:d9:ca:cc:af:7b:5a:56:93:86:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:1A:FD:C0:F4:44:DC:46:72:C3:0C:6F:00:17:75:53:01:2B:38
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0N8a_cD0RNxGcsMMbwAXdVMBKzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.233.0/24
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e5:2f:ad:6c:17:71:6f:5b:4a:4e:9c:af:e8:ea:e8:5c:a2:
92:11:fa:1d:e5:67:d8:03:33:dd:be:57:06:00:93:dc:12:3d:
11:77:2a:f9:e4:61:17:72:0a:50:b0:23:52:52:4c:4a:73:c4:
41:3a:79:65:84:14:a8:79:12:73:cf:f3:38:c1:a7:76:7d:51:
ed:c9:7e:a4:09:67:f8:91:be:37:f6:20:13:ac:68:bc:2c:93:
24:22:bf:13:60:ea:81:2b:f1:6f:d2:1d:6b:38:8e:c8:66:71:
3b:d2:c1:9f:f5:5f:4c:10:ef:8b:5c:fc:1d:d2:0e:60:bd:62:
d3:e6:ef:74:4a:7f:98:cf:0a:e4:1c:cc:83:b8:db:b8:25:bf:
8c:40:c8:2f:74:8f:5b:08:3f:c5:77:fd:79:9d:8e:3e:f4:48:
d6:e2:17:06:e7:22:aa:23:63:3e:ed:6b:88:66:d3:7c:86:fe:
af:80:64:c1:af:4a:17:b1:0d:a2:7f:53:77:2f:24:f3:a9:94:
99:81:c9:06:b9:b8:fc:93:00:1c:06:38:f3:6e:7c:e3:3b:65:
bf:eb:5d:46:d5:20:93:02:38:aa:d4:e1:b6:7a:c5:29:58:27:
7a:6b:a9:90:9e:4f:13:7e:ea:cd:3d:5a:f8:bb:87:e1:3b:d1:
94:22:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:10 2025 by rpki-client