Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X9OOE82nS_FnYM7Ntr9mVISEyJI.roa
File: X9OOE82nS_FnYM7Ntr9mVISEyJI.roa (raw, json)
Hash identifier: rBRZw5Yqav5aiNKQbIHozpBQCi7a920o9MbXmDSnm50=
Subject key identifier: 5F:D3:8E:13:CD:A7:4B:F1:67:60:CE:CD:B6:BF:66:54:84:84:C8:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198273ED6337711AB1F8FCF6C0BC1EDAA22
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X9OOE82nS_FnYM7Ntr9mVISEyJI.roa
Signing time: Sun 20 Jul 2025 09:51:26 +0000
ROA not before: Sun 20 Jul 2025 09:51:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Jul 2025 11:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:3e:d6:33:77:11:ab:1f:8f:cf:6c:0b:c1:ed:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 20 09:51:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fd38e13cda74bf16760cecdb6bf66548484c892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:ad:77:76:ab:b0:9a:d9:fa:55:7f:fa:b6:
8d:bb:07:b4:3d:ec:0e:fa:4a:7d:21:1c:96:3f:3f:
c4:23:55:94:5e:bb:bd:d2:3b:40:a4:27:f3:ed:4e:
46:4e:61:ce:83:06:36:57:89:74:83:a9:05:25:d9:
cf:15:3d:2b:f5:b8:9a:f6:92:30:b8:c8:7a:3d:5b:
85:dc:dc:b6:b7:e7:3f:b2:c6:77:45:6f:cd:b3:ba:
b8:2b:2b:c8:bd:80:02:2c:f9:5b:20:5b:4e:b1:f3:
ab:67:3b:c7:b8:c0:42:b9:42:68:fb:2d:86:5a:e0:
c8:ff:5b:fc:27:bb:c9:c8:85:f0:e0:ed:b4:34:73:
c2:42:22:95:5f:49:3c:95:c0:12:85:b8:7e:f4:b6:
59:19:dc:0d:b9:6d:85:85:e8:99:66:1f:fb:0f:c0:
45:e8:40:5a:da:f4:24:a9:7d:4b:7b:1e:cf:44:ff:
00:b3:01:7d:cd:78:97:12:66:1b:db:8c:f3:29:2d:
94:bc:ea:16:4a:59:b1:2b:e6:c2:ed:a4:0d:71:00:
2e:7a:fb:d7:65:79:3b:35:81:68:5a:76:4a:2d:b9:
33:64:d6:30:75:a9:cd:bf:81:ac:b6:df:39:b4:e3:
c0:a8:4f:dd:80:8f:e2:82:06:18:8f:3f:53:c8:86:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:8E:13:CD:A7:4B:F1:67:60:CE:CD:B6:BF:66:54:84:84:C8:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X9OOE82nS_FnYM7Ntr9mVISEyJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.162.0/24
Signature Algorithm: sha256WithRSAEncryption
14:34:57:d4:dc:21:1f:7a:7f:58:48:df:df:f6:55:18:1e:db:
60:19:3a:36:79:5c:e1:40:c3:d7:26:cf:21:54:41:f2:9f:92:
20:29:f5:a5:fc:33:1c:ce:a2:3a:8b:eb:9b:0d:7d:4d:f1:97:
3d:82:a8:75:28:4e:fe:a7:52:d9:6b:dd:7c:04:03:ff:75:43:
76:a7:39:60:3b:c0:f6:7c:1f:7c:fc:6f:cc:32:c6:ae:3e:35:
1b:a4:e1:1a:f0:c5:95:bc:e4:20:3d:11:b9:5f:91:84:c0:00:
77:58:0a:0a:60:42:00:ab:80:fa:51:59:2a:7f:68:5f:06:bc:
ec:7d:db:ad:4c:eb:c1:8d:4b:b6:f2:df:f1:36:61:34:d9:09:
75:26:0d:47:f2:a9:72:99:31:ff:77:20:0e:59:38:61:2c:2f:
8e:ec:64:5d:ae:94:a3:21:09:5d:9f:d1:4f:bc:aa:b0:de:5a:
b1:27:b2:37:c1:e9:ae:56:46:7f:bf:d2:f0:78:8e:5f:36:55:
6f:1f:23:52:42:8d:22:b0:0d:b3:1d:18:1e:39:dd:00:26:a2:
11:bd:59:ba:86:0c:d5:04:30:86:39:02:e2:76:c8:cd:00:e0:
31:96:0b:ec:8b:a7:29:bd:57:0c:57:90:7c:09:66:02:0a:69:
3f:64:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:25 2025 by rpki-client