Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgLJjCnNw2H0bXLreHkNXqbOtgs.roa
File: sgLJjCnNw2H0bXLreHkNXqbOtgs.roa (raw, json)
Hash identifier: 08AlXmMW1NwYoVh2+DQBy/wtRqmld8u1ahGyabINDIA=
Subject key identifier: B2:02:C9:8C:29:CD:C3:61:F4:6D:72:EB:78:79:0D:5E:A6:CE:B6:0B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197DC05E2D081AF59F200223467DBD60EB8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgLJjCnNw2H0bXLreHkNXqbOtgs.roa
Signing time: Sat 05 Jul 2025 19:17:42 +0000
ROA not before: Sat 05 Jul 2025 19:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 15:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:05:e2:d0:81:af:59:f2:00:22:34:67:db:d6:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 5 19:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b202c98c29cdc361f46d72eb78790d5ea6ceb60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:ca:07:66:7f:21:19:08:ff:df:88:bb:e1:
7e:15:4a:8f:46:e5:17:bb:2d:a8:a6:2b:2c:8f:15:
77:6f:35:b1:34:cf:49:ad:6d:49:b1:f8:41:c1:da:
e7:78:24:9f:09:9a:6a:82:b2:a4:23:a2:f8:4f:2d:
41:16:81:91:a4:5b:c5:86:89:c9:64:78:6f:21:19:
50:4a:43:6a:6c:cc:ac:a8:c8:15:2a:3a:0c:c7:15:
6b:6b:de:0e:14:e4:7b:cd:35:83:58:63:a8:e0:13:
34:d6:74:16:be:c5:aa:fe:ad:4c:1a:be:bf:51:fa:
49:ea:a7:8e:ea:e3:5e:37:72:e8:c7:70:cd:26:6c:
81:cd:b3:5d:e2:ae:e7:f3:98:53:34:5b:f4:27:b3:
9e:4a:8c:8c:c8:05:f0:08:f1:ce:9c:71:55:26:b1:
3b:b2:27:ec:c5:40:23:e5:da:f8:fc:69:f0:fd:59:
96:40:16:fb:94:3d:c5:fd:15:6c:59:da:40:f9:01:
75:35:bc:39:01:ee:aa:9a:88:76:74:a3:ee:a3:4e:
98:eb:72:8d:43:c6:0e:54:90:e2:76:d3:79:47:13:
fa:c7:91:ca:cd:71:d2:bc:f3:cd:31:04:90:4a:07:
31:7e:a9:55:d6:1e:6a:4b:77:f5:ff:c8:58:aa:88:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:C9:8C:29:CD:C3:61:F4:6D:72:EB:78:79:0D:5E:A6:CE:B6:0B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sgLJjCnNw2H0bXLreHkNXqbOtgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:99:98:56:5e:80:24:bc:33:1d:d3:a4:77:6a:fd:5b:fd:00:
49:96:15:7e:61:4a:5f:26:49:f4:a9:a1:b8:b4:ac:51:5d:db:
4a:00:d5:f1:af:69:72:60:17:66:28:31:57:85:33:2e:3f:50:
55:f3:e5:46:82:c2:1b:af:cc:af:8f:e4:32:41:b3:2e:85:2d:
a8:09:82:1c:4d:b9:de:94:5d:6a:91:dd:d5:28:ba:8b:19:17:
c3:48:b8:61:74:5a:d6:49:2d:c7:7a:9d:c4:0c:bc:32:5f:24:
46:dc:61:78:05:28:e5:7a:32:9b:82:c6:c6:5f:a9:f7:80:f6:
35:c0:c7:1b:a3:3d:05:1e:a3:ba:de:07:f0:59:88:22:03:14:
74:ce:ef:1b:bc:73:c6:19:7c:18:d2:40:bc:50:8d:52:f7:06:
78:13:a8:88:35:13:fd:b1:6f:30:a9:14:74:4e:77:08:6a:c3:
04:d4:48:d0:9c:57:84:26:ed:e9:c6:f8:29:9b:69:18:0c:4b:
87:7c:d3:f8:f6:e5:35:32:b8:7e:22:e6:68:dc:ba:91:21:7f:
7d:69:9c:1a:c8:75:89:6c:30:cc:bc:d2:46:af:5d:32:1b:19:
a1:47:4a:d0:3a:16:a6:88:28:88:3e:63:11:94:7c:6f:d0:4a:
01:40:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:58 2025 by rpki-client