Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/byeU48BMTiMo1Gdx6Pyw0QEO_LM.roa
File: byeU48BMTiMo1Gdx6Pyw0QEO_LM.roa (raw, json)
Hash identifier: LtWQSPcBPlmxOKlL5pHfkgAHP06fyT/aKVDVaUw+nzE=
Subject key identifier: 6F:27:94:E3:C0:4C:4E:23:28:D4:67:71:E8:FC:B0:D1:01:0E:FC:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F307E0D6B9365A27AC004803AE22810B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/byeU48BMTiMo1Gdx6Pyw0QEO_LM.roa
Signing time: Thu 10 Jul 2025 06:31:09 +0000
ROA not before: Thu 10 Jul 2025 06:31:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 94.183.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 05:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:07:e0:d6:b9:36:5a:27:ac:00:48:03:ae:22:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 06:31:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f2794e3c04c4e2328d46771e8fcb0d1010efcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:c3:1e:b0:f6:90:e2:d5:11:57:df:77:cc:
2e:c7:06:a1:9e:fe:a4:70:2f:b3:5d:eb:87:e7:2a:
b3:d9:4d:a5:f1:b0:1a:19:04:12:b3:4d:c9:81:24:
72:21:42:46:87:7d:a0:ff:8c:05:73:e8:b0:1c:41:
60:d2:9d:c0:85:e1:35:5c:2e:01:4b:df:f8:db:fa:
93:f7:ae:64:10:06:e6:66:3c:19:5b:77:f4:6f:af:
68:25:70:19:a7:60:1a:1e:b1:90:5f:a7:8a:f1:f5:
61:cb:11:90:09:d8:dc:fd:96:c7:ad:85:dd:93:4b:
d7:84:c1:cc:24:2a:00:8c:e7:42:47:bb:0b:80:d2:
15:29:09:6d:d8:b3:55:f6:36:47:04:39:e0:b4:7b:
41:cc:d1:dc:55:3c:3e:5f:72:53:62:64:08:44:42:
dc:d1:e2:ad:3f:b3:0b:42:52:c4:1f:1a:bf:01:bf:
34:fc:34:79:a1:89:89:9e:65:53:ca:34:d9:49:f1:
3c:c9:ca:1a:50:c9:4c:1f:c4:24:ac:15:1c:e1:b2:
82:d5:d7:45:e7:1a:1e:e9:c2:ad:b8:e9:ba:53:07:
7b:db:65:35:c3:2f:c1:08:78:9c:88:23:7d:73:bd:
46:ea:9a:e6:e8:22:b3:7c:6b:0b:ec:93:52:2a:85:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:94:E3:C0:4C:4E:23:28:D4:67:71:E8:FC:B0:D1:01:0E:FC:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/byeU48BMTiMo1Gdx6Pyw0QEO_LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.160.0/24
Signature Algorithm: sha256WithRSAEncryption
91:04:9f:c8:c7:cd:67:9c:e9:ea:5a:b1:14:b7:e5:be:07:46:
f1:98:27:5e:3f:4d:f0:c3:24:d5:41:f8:f9:46:db:9c:75:2b:
33:56:ec:e3:70:89:76:56:93:7f:33:dc:f6:97:6f:ae:ba:7d:
9e:97:13:fc:d7:2d:52:b3:46:ca:d2:59:c8:54:1d:2a:2f:50:
c0:9c:26:8d:3e:e1:92:d3:b4:9d:9d:07:6a:6d:94:62:7e:8c:
da:58:8e:6d:5c:92:bb:04:1a:b7:f1:74:29:11:b0:3b:15:2a:
39:bb:40:ba:07:36:9f:32:73:f1:94:9c:aa:e6:f9:b6:37:41:
59:5a:68:6a:22:7f:48:9c:0e:99:e9:a2:61:09:98:3e:4f:df:
b3:88:7a:08:8a:ec:67:ec:8f:ae:0d:06:7d:19:1b:e5:62:67:
af:6b:2a:82:20:5f:b4:f8:5d:04:04:1d:76:ff:17:d1:72:05:
f7:14:07:d5:a4:e1:d1:45:79:ba:ab:0b:2a:55:ba:19:b3:cd:
74:02:f3:6a:11:be:46:ab:11:38:2d:3f:ce:cc:ff:c8:43:64:
56:cb:0f:57:f7:65:c9:df:6a:ba:54:82:98:61:d5:15:10:66:
12:55:fe:0a:da:d1:81:3e:ac:8e:01:4f:a3:52:4a:f4:aa:3a:
91:f8:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:12 2025 by rpki-client