Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/iivw9WENYm17Ny8toH6yebdAEhQ.roa
File: iivw9WENYm17Ny8toH6yebdAEhQ.roa (raw, json)
Hash identifier: YJEkiJKIGibIv398T3nXezC5g0j9NtKnhRQ7pViRy9g=
Subject key identifier: 8A:2B:F0:F5:61:0D:62:6D:7B:37:2F:2D:A0:7E:B2:79:B7:40:12:14
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0197C05E1C65B42D6ECC59B34CE8D55B3895
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/iivw9WENYm17Ny8toH6yebdAEhQ.roa
Signing time: Mon 30 Jun 2025 10:24:42 +0000
ROA not before: Mon 30 Jun 2025 10:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.59.6.0/24 maxlen: 24
194.116.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 13:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:5e:1c:65:b4:2d:6e:cc:59:b3:4c:e8:d5:5b:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jun 30 10:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a2bf0f5610d626d7b372f2da07eb279b7401214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:1d:38:8f:d6:43:2c:9c:00:50:5e:3b:32:
79:0c:d5:2c:03:c2:35:8d:c6:1f:23:80:e2:64:51:
fe:a4:2f:56:2b:1f:91:47:9b:5b:47:9f:65:79:85:
d6:3d:e0:b7:5e:c6:6e:ce:a4:da:4a:3c:ab:55:67:
15:bd:67:5d:43:2f:a4:e8:0a:d2:ae:a6:73:3b:9e:
fe:d5:a6:d1:81:1b:78:c9:50:d3:05:a2:3c:00:c9:
a7:b8:52:d9:1b:9d:5c:49:e1:be:83:bc:92:51:35:
2b:c4:3a:96:26:20:45:2e:4e:91:79:1b:3c:f0:00:
48:2b:c3:40:01:45:91:e7:a7:8f:8f:ae:48:a2:59:
da:78:13:9f:c4:84:7c:6b:93:58:5d:25:8e:4f:51:
a5:62:73:38:b8:19:90:9a:67:d7:ce:7c:02:0a:63:
44:64:a7:09:c5:5e:45:f3:8b:2f:0e:78:b0:77:35:
17:98:56:37:19:f1:64:d8:54:97:94:1a:a0:11:5a:
a4:f2:62:43:6d:aa:3c:9c:4e:fb:bf:0a:e8:4b:bc:
cc:a6:fe:5d:57:68:b9:fa:93:c9:76:d1:95:45:f5:
4c:0f:97:64:a5:9e:c9:20:f6:c3:c9:e8:ef:31:47:
90:62:c6:a8:56:d8:94:70:68:a0:13:26:ea:d5:d6:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:F0:F5:61:0D:62:6D:7B:37:2F:2D:A0:7E:B2:79:B7:40:12:14
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/iivw9WENYm17Ny8toH6yebdAEhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8f:fa:55:3d:ed:15:10:73:84:65:df:13:4c:fa:71:b8:eb:
e3:e8:fa:92:4e:d9:50:1f:a5:4e:87:fe:23:4a:1a:2d:25:5f:
55:d4:1a:ca:4e:b9:93:47:c6:ca:54:49:ff:9c:87:fe:b6:b2:
45:fa:d3:06:de:c3:50:a2:5b:af:14:4e:31:88:3a:45:46:a6:
da:b0:66:59:98:95:d9:ad:5b:4b:a6:a5:5c:08:d8:e6:f9:8b:
1d:97:27:a4:ba:e9:d0:9f:81:0e:c8:fc:cb:c2:ec:30:78:3d:
ee:51:60:8d:c6:ee:93:0b:f3:09:10:ea:86:98:5a:ab:d3:7e:
fd:7b:05:07:e0:21:a7:3b:17:fa:e0:1f:7f:97:71:bd:bd:2f:
18:18:b6:08:03:55:af:93:dd:97:96:a4:43:0c:80:c2:e4:6a:
cb:66:b2:10:38:de:1b:ad:07:f1:1f:51:79:a1:59:6a:86:2e:
c7:6b:fa:5d:28:75:b0:71:7f:47:c9:c1:78:2a:b7:dc:56:66:
12:97:2a:0c:ff:d3:33:06:d2:34:bc:79:a0:3a:fc:da:47:8c:
49:ee:de:9d:f4:6f:87:46:5f:70:17:e1:4f:a6:33:71:d3:9d:
a5:79:8c:79:67:df:cf:dc:4c:6c:eb:0e:60:f5:a6:24:05:20:
de:aa:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:19:11 2025 by rpki-client