Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/kEMZHqJ0izkquvShag1aVkvZ4wE.roa
File: kEMZHqJ0izkquvShag1aVkvZ4wE.roa (raw, json)
Hash identifier: KOOeKXIsEezxw3TIELcuTtlV19IVrEu0dfd+Pt08D70=
Subject key identifier: 90:43:19:1E:A2:74:8B:39:2A:BA:F4:A1:6A:0D:5A:56:4B:D9:E3:01
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019808B88AC86B08420BF8428101FCC1F89E
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/kEMZHqJ0izkquvShag1aVkvZ4wE.roa
Signing time: Mon 14 Jul 2025 11:36:08 +0000
ROA not before: Mon 14 Jul 2025 11:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 78.108.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Jul 2025 12:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b8:8a:c8:6b:08:42:0b:f8:42:81:01:fc:c1:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jul 14 11:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9043191ea2748b392abaf4a16a0d5a564bd9e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:8d:af:9e:f6:18:ca:e1:3b:88:d6:2f:49:
23:17:3f:7e:7c:a2:e2:99:00:a2:fb:da:ea:25:37:
4b:0d:19:4a:b5:a2:7d:b8:7b:82:ae:08:41:12:8d:
30:58:04:00:f4:86:ca:34:69:76:7e:37:71:92:3a:
57:e3:80:6d:6d:30:d9:09:a0:5f:11:df:0e:85:93:
44:3d:60:d8:14:da:1a:f3:d2:6e:fd:1b:dd:5d:b5:
46:a8:83:ba:1c:30:9e:9d:d8:6d:d9:a6:94:50:88:
a7:76:31:13:9d:53:2f:c2:d6:e7:f5:01:f0:79:36:
3b:02:25:27:f7:f2:f6:bc:b0:89:16:2b:a0:a3:77:
46:95:da:dc:c9:cd:c5:62:27:86:f0:30:24:bc:40:
22:b2:3d:2e:fe:26:dc:f7:21:76:f1:f1:fc:1b:60:
06:a9:fc:be:ce:8c:aa:2d:ef:2a:9d:6d:de:c0:96:
93:89:d8:a4:29:8a:33:4e:db:67:1a:57:e9:cd:9d:
71:dd:84:ad:24:3e:2f:cf:00:18:2e:aa:69:6c:7f:
4f:52:06:44:4d:31:7f:01:c5:dc:e1:22:81:cc:4f:
36:13:ae:c6:26:98:5a:1d:88:c4:f0:da:62:92:0a:
62:3a:f6:e5:ad:68:79:a4:2b:c7:fb:c2:44:01:f7:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:19:1E:A2:74:8B:39:2A:BA:F4:A1:6A:0D:5A:56:4B:D9:E3:01
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/kEMZHqJ0izkquvShag1aVkvZ4wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.60.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:22:a7:ed:51:0b:f0:a2:0e:a0:10:87:31:ae:f9:9a:35:d5:
b5:25:84:47:a4:43:57:f8:3e:a6:e9:fe:39:6e:aa:31:7c:d4:
ca:e7:1a:c6:72:59:03:01:da:56:46:14:4c:e0:bb:9c:b3:b4:
29:3f:35:ae:13:02:05:b8:09:c7:97:5e:c3:49:f7:1c:3e:e0:
c2:45:83:77:94:5b:25:3e:16:a4:77:50:1c:cc:94:6d:3e:cf:
80:16:94:d3:b6:ad:2e:28:20:c8:74:a8:87:a1:d3:8c:60:75:
51:b2:5e:c9:d6:0f:7a:84:ba:7f:be:19:7d:89:29:10:cc:0f:
e8:5a:87:e6:bc:ba:71:51:95:b1:96:73:ce:e5:cd:34:85:7d:
bd:32:7c:5b:3c:e3:62:6a:ff:16:5c:86:96:e9:32:79:5f:3a:
a7:a4:23:77:e8:8c:f9:a6:9e:eb:15:18:15:7b:f2:f1:42:94:
16:47:ac:d4:62:e0:3b:8b:a6:e8:cc:59:0d:f4:42:48:85:fb:
7b:07:bd:ab:99:92:9f:ec:6c:d0:7d:ee:ea:ec:42:a9:75:85:
af:6c:8c:03:75:f2:f0:29:5c:0a:b0:bb:26:12:ce:f5:8b:44:
ed:b5:cb:02:70:bd:14:b9:24:2c:75:55:07:a1:6f:7a:fc:8b:
6f:dd:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:08 2025 by rpki-client