Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vLm07iBJakaQO9U3pyagNNYR8cY.roa
File: vLm07iBJakaQO9U3pyagNNYR8cY.roa (raw, json)
Hash identifier: F5BL9O9pVd3vCJf1+U8YxCixzk7qeRtVNEPcMRLzMz0=
Subject key identifier: BC:B9:B4:EE:20:49:6A:46:90:3B:D5:37:A7:26:A0:34:D6:11:F1:C6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019759824068D0E34D0D2B68C5F2ED5C88EB
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vLm07iBJakaQO9U3pyagNNYR8cY.roa
Signing time: Tue 10 Jun 2025 11:03:17 +0000
ROA not before: Tue 10 Jun 2025 11:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213775
IP address blocks: 5.57.36.0/24 maxlen: 24
37.32.46.0/24 maxlen: 24
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 11:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:82:40:68:d0:e3:4d:0d:2b:68:c5:f2:ed:5c:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 10 11:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb9b4ee20496a46903bd537a726a034d611f1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:d3:2e:08:93:d4:9f:e7:be:74:ca:5d:49:
b1:e9:9d:49:66:19:0a:f3:07:2d:65:30:55:71:fa:
43:c7:c1:f9:9d:5a:e7:ea:7b:6c:d3:26:1b:03:43:
57:e3:af:49:33:1a:6e:bd:e0:25:5c:32:ba:3f:1a:
e2:b7:fe:c0:3a:77:ad:27:2a:26:d3:78:ed:4e:c5:
54:5a:65:7c:0c:32:63:67:9e:97:97:43:22:7a:46:
2d:40:07:d6:91:1c:8a:f6:4c:d9:28:6b:be:8b:20:
5e:79:cf:7e:07:a4:e2:c9:67:e5:ff:36:94:3a:cd:
41:e9:4f:1f:92:9e:64:2a:dd:fd:a9:d2:07:7b:bb:
e6:7c:3c:1d:ca:03:43:c9:4b:2a:d2:33:c0:d4:e2:
e0:a6:65:d5:f3:e2:c7:b0:c5:6b:b5:a4:18:43:3e:
4f:f1:b8:e8:e6:70:94:9c:3d:f0:fa:80:3f:8a:c3:
66:a8:aa:e1:d6:8e:cc:60:5b:6e:13:cb:b9:16:07:
41:50:15:51:36:a2:72:89:c8:f5:ce:c0:6c:8c:d7:
28:ac:7b:bc:61:57:27:f7:16:fb:ec:5d:e7:89:66:
43:b2:c8:45:09:eb:80:f4:55:b7:15:6a:7b:26:a9:
75:0d:3e:ca:a9:53:ee:14:7f:0c:d4:ae:4d:64:f9:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B9:B4:EE:20:49:6A:46:90:3B:D5:37:A7:26:A0:34:D6:11:F1:C6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vLm07iBJakaQO9U3pyagNNYR8cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.36.0/24
37.32.46.0/24
178.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:aa:45:cf:fa:0b:47:90:81:56:29:63:01:20:03:0d:2b:a3:
b2:ac:d7:77:e6:3e:28:88:6a:ca:48:e3:48:d7:81:ef:b0:46:
7e:69:f0:97:60:6a:fe:17:51:21:51:2b:6f:ec:be:5f:3e:09:
fb:6e:39:e8:b6:d0:9c:89:d1:3c:78:c2:52:93:7d:1f:2d:14:
a8:ab:9a:ea:27:47:61:1e:93:f0:21:36:66:d1:70:49:bb:2c:
0c:61:98:4a:49:72:bc:3f:09:f8:fb:66:8f:af:50:31:20:67:
af:7b:8f:85:64:08:ac:4a:50:dd:d6:2c:ad:16:75:7c:20:44:
91:ea:e4:e2:f1:ba:6e:40:4c:35:d3:26:60:86:50:cc:fe:7a:
8c:f8:75:d5:40:bd:6f:18:69:b8:e7:93:24:fd:f6:4a:79:55:
25:c3:ae:de:c5:bf:36:b2:60:19:d7:fe:4d:1b:10:e7:b9:33:
cf:14:b7:02:d2:ce:99:c7:92:e6:0c:93:1e:db:67:8f:38:2d:
de:f5:fc:65:8d:12:11:77:c3:c3:68:43:e3:9b:b1:e0:5f:60:
e0:2b:65:44:cc:d5:95:f6:64:3b:67:24:ab:63:21:3e:d0:e1:
cb:10:a6:9f:e5:0d:82:64:97:58:df:d5:00:d1:31:af:7d:0f:
46:56:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:47:07 2025 by rpki-client