Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b8wRN7cZ0WYhAitrXmW2ewYdL5c.roa
File: b8wRN7cZ0WYhAitrXmW2ewYdL5c.roa (raw, json)
Hash identifier: +4qGHW4jpcEHaXF8HyWEYgXr942si2qCaMfmORO39bI=
Subject key identifier: 6F:CC:11:37:B7:19:D1:66:21:02:2B:6B:5E:65:B6:7B:06:1D:2F:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197EE69F5BBE2B1EBDE3B7BE64B4F77A2C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b8wRN7cZ0WYhAitrXmW2ewYdL5c.roa
Signing time: Wed 09 Jul 2025 09:00:10 +0000
ROA not before: Wed 09 Jul 2025 09:00:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209279
IP address blocks: 94.183.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 06:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:69:f5:bb:e2:b1:eb:de:3b:7b:e6:4b:4f:77:a2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 09:00:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fcc1137b719d16621022b6b5e65b67b061d2f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:73:51:a6:2d:d5:d6:05:a0:3d:3b:2a:b2:
1d:e4:ef:95:79:3b:8b:0f:21:29:c3:38:5d:9a:4e:
04:7a:b5:d0:44:2d:5a:41:0a:bb:02:3a:2e:21:43:
12:13:93:70:06:7f:11:ab:f9:0e:b5:b2:e9:61:00:
42:cd:ea:48:44:a0:7f:79:e1:0d:65:39:45:dd:95:
2d:9a:b8:45:c1:72:89:7b:21:8d:51:d6:60:63:82:
1c:03:54:f8:82:2f:1a:f9:1c:75:01:37:28:28:c1:
48:20:af:c6:32:f1:12:15:fe:0f:10:c4:93:0b:c6:
ed:b4:9e:36:ab:65:65:82:f0:10:ee:fd:25:44:45:
8a:1b:68:15:68:c8:66:3b:a1:58:7b:de:e0:d8:fb:
a3:61:3e:0e:9d:88:c4:e2:85:ff:e5:4b:d1:72:0b:
78:f0:ff:b1:a1:d5:fa:7f:57:99:83:f3:e7:af:b0:
13:88:bd:3b:3b:22:27:b0:c1:26:f0:4a:8f:a0:4e:
0b:95:7d:9b:cc:e0:ba:4d:8a:43:83:e3:9d:5c:b0:
51:29:05:01:28:6f:db:df:25:ed:c2:3a:15:05:7f:
9f:53:02:0f:38:e1:b0:75:bd:ff:fb:07:ab:00:c8:
a0:28:01:cb:e4:4c:79:7a:42:ef:70:8c:33:8c:5d:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:11:37:B7:19:D1:66:21:02:2B:6B:5E:65:B6:7B:06:1D:2F:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b8wRN7cZ0WYhAitrXmW2ewYdL5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.161.0/24
Signature Algorithm: sha256WithRSAEncryption
20:38:7f:a6:dd:99:bb:d9:37:f8:a0:35:ca:8d:74:af:c5:5a:
f6:23:22:a0:1f:5b:8f:12:c0:81:fa:20:d4:b1:82:8d:22:90:
23:d2:37:40:2b:ef:12:dd:10:9e:f6:cd:f0:c1:5b:e8:a6:f3:
87:66:90:df:0e:cb:22:ee:2a:e5:ac:4f:0a:dd:8b:b6:90:00:
2c:75:a1:b9:84:34:e7:cc:48:73:6e:47:72:df:78:39:fb:f4:
5f:c9:41:d1:8d:a4:bb:89:a9:77:a9:1f:de:ff:9e:c0:2d:83:
b5:27:a8:69:75:88:f0:4e:51:2c:0e:2a:98:d3:38:f1:e6:41:
17:08:6e:4c:a9:ec:6e:59:72:a8:08:ce:0d:69:60:6d:d3:11:
1e:60:d4:8e:18:ed:f1:da:de:e8:dc:82:6c:88:13:07:fe:f5:
24:a4:e1:be:7e:ca:49:72:1c:b4:aa:21:fe:2d:04:be:53:05:
7c:7f:b6:51:32:26:93:15:58:98:94:c8:bd:0f:30:91:ff:d5:
06:d6:07:d4:af:2b:a5:29:1e:a5:07:06:4a:da:dd:dd:0f:a2:
65:6d:f0:62:08:56:3b:b6:c0:e6:c5:94:73:1b:a3:29:81:26:
7e:de:7d:6f:71:d9:1b:72:71:dd:e2:cc:2b:e4:77:2c:30:14:
13:0e:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:14 2025 by rpki-client