Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/H981mu6WkDa4lPbLrzrwZkym_5s.roa
File: H981mu6WkDa4lPbLrzrwZkym_5s.roa (raw, json)
Hash identifier: 6xubXPUFvsDUnsHE1L9QBxXU0uDuRycjxB6JVihKG0Y=
Subject key identifier: 1F:DF:35:9A:EE:96:90:36:B8:94:F6:CB:AF:3A:F0:66:4C:A6:FF:9B
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 01977E91DBF5304CFBEC8632EA8E3C62F3FB
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/H981mu6WkDa4lPbLrzrwZkym_5s.roa
Signing time: Tue 17 Jun 2025 15:46:17 +0000
ROA not before: Tue 17 Jun 2025 15:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34941
IP address blocks: 85.118.200.0/21 maxlen: 21
185.112.136.0/23 maxlen: 23
2a06:6180::/29 maxlen: 29
2a06:6180::/40 maxlen: 40
2a06:6180:4000::/40 maxlen: 40
2a06:6180:8000::/40 maxlen: 40
2a06:6187::/35 maxlen: 35
2a06:6187:4000::/35 maxlen: 35
2a06:6187:8000::/35 maxlen: 35
Validation: Failed, certificate revoked on Tue 17 Jun 2025 17:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:91:db:f5:30:4c:fb:ec:86:32:ea:8e:3c:62:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jun 17 15:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fdf359aee969036b894f6cbaf3af0664ca6ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:be:50:d3:a0:c2:9d:84:c5:12:5b:a5:4e:
b3:00:c2:c6:b7:d1:ee:c2:fb:e5:6f:6a:72:78:8d:
8b:fc:4a:2a:cd:21:28:7b:52:03:f6:b0:e7:64:27:
b2:80:1d:49:9b:df:29:a5:de:43:e0:c7:4a:a4:0d:
3b:75:dc:d2:11:72:3b:be:bd:76:70:dd:5a:c0:43:
a5:9a:77:c1:07:c1:12:88:02:78:ab:43:92:45:51:
b6:f0:50:cb:cc:24:d6:20:a1:03:88:77:eb:56:dc:
76:04:71:bc:53:9f:77:77:bd:36:4e:46:01:59:bf:
0d:7a:f7:f0:07:e0:4f:97:9d:63:ff:5d:55:0c:b2:
1f:96:a2:f7:b1:59:97:47:6d:f2:75:9e:ac:ec:a2:
c2:98:ec:ac:cd:31:35:51:2e:45:54:49:24:65:bc:
d2:70:08:82:5f:2c:0b:10:e4:7a:5d:ff:b0:00:c6:
37:ad:bc:e1:07:6e:08:2e:34:61:68:4d:96:67:c8:
29:fe:3f:be:3b:30:d8:cf:83:aa:72:65:b6:d7:62:
86:e6:a4:16:8e:82:56:92:6d:49:02:54:88:02:3e:
a3:39:b6:79:cc:65:eb:61:0f:04:e6:9d:c8:19:65:
b1:2d:35:58:d6:52:d7:0e:82:ff:e4:56:89:57:6d:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:35:9A:EE:96:90:36:B8:94:F6:CB:AF:3A:F0:66:4C:A6:FF:9B
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/H981mu6WkDa4lPbLrzrwZkym_5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/23
IPv6:
2a06:6180::/29
Signature Algorithm: sha256WithRSAEncryption
5c:81:f5:dd:a6:25:67:02:63:29:29:fd:71:c0:f4:c7:cf:70:
70:50:b2:28:19:75:19:cd:a4:f2:df:66:82:17:fd:4d:58:b3:
0f:9a:af:d8:c0:de:2c:37:46:8d:57:c5:c4:bc:78:32:4c:6b:
b7:7a:c9:85:8c:ec:73:88:4f:34:7a:36:78:d8:76:ce:ac:b3:
0a:6f:bb:f3:05:60:76:08:7c:fe:59:56:fb:3c:2d:7d:49:f9:
47:80:d8:e4:72:2f:21:cb:c7:d9:fc:68:4f:fb:00:e7:2c:f6:
50:a0:45:87:a5:27:ab:a4:dc:e0:37:0b:95:40:7f:3f:1b:a9:
6e:e7:e5:f5:f1:9c:b1:cd:b9:6a:34:6c:a5:e1:d7:6d:95:24:
43:c8:7e:7e:5f:54:85:00:c6:0d:01:f1:40:4b:07:56:26:55:
9f:60:73:80:5b:79:d2:0d:93:bd:71:4c:d4:24:46:78:26:c1:
88:9d:5e:41:5c:d9:b4:b8:f4:24:19:19:d3:6a:b3:76:69:bd:
17:0b:3b:ad:57:42:e4:92:7e:a0:27:8a:6d:a4:b6:90:10:1b:
73:e1:b6:06:e3:7a:1a:77:05:e5:b2:5e:93:6a:fb:de:bc:eb:
f6:ae:95:0d:b4:2c:c2:df:e3:00:07:02:79:c8:6e:7a:94:16:
3e:e6:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:33 2025 by rpki-client