Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DUHldgIl1GuXpZz9IcVwGG2NAxU.roa
File: DUHldgIl1GuXpZz9IcVwGG2NAxU.roa (raw, json)
Hash identifier: 67ftyk2K4kzYAq/RsDTLUeOzAsB2i2fryI2vISZ+Lbw=
Subject key identifier: 0D:41:E5:76:02:25:D4:6B:97:A5:9C:FD:21:C5:70:18:6D:8D:03:15
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01983B716A4A286A14C97B3DEAEA327A44EE
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DUHldgIl1GuXpZz9IcVwGG2NAxU.roa
Signing time: Thu 24 Jul 2025 07:59:05 +0000
ROA not before: Thu 24 Jul 2025 07:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
193.232.169.0/24 maxlen: 24
193.232.183.0/24 maxlen: 24
194.190.11.0/24 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.208.16.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 09:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:71:6a:4a:28:6a:14:c9:7b:3d:ea:ea:32:7a:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jul 24 07:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d41e5760225d46b97a59cfd21c570186d8d0315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:eb:a0:5e:12:c9:7b:38:d0:6d:34:20:12:
42:39:41:6c:df:9b:5e:c0:86:0f:bf:40:20:e5:a4:
39:ff:72:e5:ef:9c:23:e1:17:d2:d1:c2:25:c8:93:
a9:7b:cd:f6:7a:b4:39:bb:6c:65:3f:e3:8c:c6:90:
c4:b7:9b:b3:ff:b1:8d:11:5f:2c:53:b6:d8:d5:6b:
39:b7:ae:8f:4a:ef:2f:cb:13:8e:32:54:f9:2e:ea:
64:ee:5c:bd:5e:84:a8:f9:a1:1c:83:b3:8a:30:3c:
e9:66:7d:c6:b6:5d:89:f7:2a:85:b3:ba:76:68:7e:
c3:e5:34:0e:26:ca:f0:29:cb:20:67:b1:e6:68:65:
92:08:ce:90:d7:ac:2c:75:50:70:c8:b8:3f:77:a8:
f5:dc:c2:a6:30:b7:e1:ef:84:7a:ce:53:e7:06:bf:
8a:31:00:17:00:68:f2:e1:b6:b9:b0:91:b8:d8:0d:
a3:97:68:2d:81:80:cb:24:bd:ba:34:b2:c5:dc:b9:
b5:c3:62:64:57:5a:45:1f:ae:35:0b:72:52:13:4e:
b5:9e:7b:70:a0:ea:0f:8e:ae:eb:ab:02:89:88:50:
93:12:2b:af:26:e2:55:b1:b3:17:0d:68:12:b2:e2:
3c:ef:7a:d3:98:96:ba:e2:ae:a8:d8:8d:b4:8d:39:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:E5:76:02:25:D4:6B:97:A5:9C:FD:21:C5:70:18:6D:8D:03:15
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DUHldgIl1GuXpZz9IcVwGG2NAxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
193.232.169.0/24
193.232.183.0/24
194.190.11.0/24
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.16.0/24
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:58:c9:f4:17:e1:c9:fd:49:87:96:97:18:6b:07:74:01:c6:
ca:e1:76:a1:b1:a6:2d:5f:2e:26:8f:fa:54:7b:d2:76:98:e3:
b2:65:cb:e6:97:89:3c:cc:fa:ad:d5:31:7d:cf:d7:19:91:b2:
1d:cb:f9:eb:f3:5d:62:25:b2:58:c4:03:04:de:6c:b9:03:e0:
3c:0e:cb:68:ff:c5:f1:7b:8c:e9:0c:3a:f3:7b:ce:fb:eb:0c:
b5:43:e4:c0:af:43:3f:07:29:ad:03:32:b4:25:7c:82:2c:c2:
c1:94:a2:a7:d3:01:14:53:24:ba:9c:b1:d8:bc:bb:35:a7:07:
84:ff:9f:61:36:55:37:c7:d3:6c:35:56:07:e3:94:8b:5c:7c:
ea:42:9d:df:fb:d9:42:77:5c:09:62:a3:4b:14:94:f5:68:26:
8a:54:a9:26:94:3e:58:76:45:1a:22:c5:b4:2a:96:3f:ed:80:
ab:0e:e7:8e:41:fb:31:54:16:5a:8a:e7:e2:d6:96:e7:55:cc:
51:cf:aa:ed:5b:79:26:bf:7e:fa:7b:8d:79:fd:cf:23:27:67:
f1:2c:b3:c7:e2:20:b9:9a:87:95:41:42:06:12:b2:2f:16:99:
e2:5d:be:14:52:5d:9b:2b:b5:bd:54:11:62:81:35:99:db:be:
0e:74:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:46 2025 by rpki-client