Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/fMEWzCIfY_W7WDILltxjueUpeYc.roa
File: fMEWzCIfY_W7WDILltxjueUpeYc.roa (raw, json)
Hash identifier: 8W2bPMcZDSS713+j8Nil7vwnmy19f+CZQhWq/Rxs/0Y=
Subject key identifier: 7C:C1:16:CC:22:1F:63:F5:BB:58:32:0B:96:DC:63:B9:E5:29:79:87
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 0197D60EC8D221E5C19FC5AD413F9581E596
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/fMEWzCIfY_W7WDILltxjueUpeYc.roa
Signing time: Fri 04 Jul 2025 15:29:42 +0000
ROA not before: Fri 04 Jul 2025 15:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216321
IP address blocks: 176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/29 maxlen: 48
2a13:d8c0::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c4:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Jul 2025 11:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:0e:c8:d2:21:e5:c1:9f:c5:ad:41:3f:95:81:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jul 4 15:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc116cc221f63f5bb58320b96dc63b9e5297987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:6b:4a:9c:2a:54:38:c3:f7:c5:0b:7e:1d:
b3:61:6f:b4:19:89:b1:74:d9:45:1f:87:35:d8:16:
5d:50:94:47:69:9c:77:7f:da:1d:c6:14:ad:85:31:
18:0a:24:1f:fc:aa:56:2c:de:d9:de:fd:db:cb:89:
da:b1:1b:6c:c8:fd:56:5f:d1:15:6c:5b:3c:07:40:
aa:65:d9:19:d4:52:25:ff:94:5c:b8:36:fa:c9:ae:
cf:7b:fb:2a:2c:78:08:06:5e:aa:d5:9c:aa:14:77:
7f:c4:8c:8e:73:a9:a6:53:ce:6f:56:3b:3c:a3:e8:
55:0b:be:37:22:f8:29:d3:b0:33:66:74:86:de:93:
49:d4:6b:9e:1c:68:ef:d1:76:68:dd:0b:61:c8:1f:
81:ba:5d:b3:a4:3b:eb:f4:92:21:38:50:b4:60:a5:
23:66:c7:a4:a8:7d:68:20:23:4d:16:0e:e4:a9:20:
68:91:1d:b1:01:a0:39:1c:25:75:8f:17:67:db:2f:
94:51:02:37:59:e7:54:e8:48:02:9c:dd:a3:09:39:
27:91:23:4d:87:b9:2d:b7:e3:ce:24:34:da:84:fd:
9d:45:3c:a5:16:43:8b:c8:55:50:9b:79:8c:94:e6:
cf:26:e0:4f:0e:f3:79:f5:06:0a:66:3f:03:cf:57:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:16:CC:22:1F:63:F5:BB:58:32:0B:96:DC:63:B9:E5:29:79:87
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/fMEWzCIfY_W7WDILltxjueUpeYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:80:d3:2d:f1:a5:a6:5b:79:87:01:13:31:6b:b2:b7:ac:c7:
b5:cf:a4:e8:b5:ac:19:1a:9e:14:a0:54:dc:56:c4:c7:2a:92:
70:8d:6d:45:d1:c6:7a:d1:15:5a:50:08:21:97:ef:45:a9:f4:
df:e3:38:df:02:96:61:31:fa:dc:4f:f6:14:a5:c6:69:79:5e:
1c:b1:a4:c6:92:c8:d9:a0:76:5f:80:ab:71:73:61:92:19:7a:
e9:dd:29:ab:4a:1f:25:03:56:fb:38:79:a9:89:e3:34:e3:44:
27:e6:29:8c:18:aa:45:aa:86:9e:64:78:f6:d0:b1:7e:f8:2b:
3c:5e:04:1c:67:28:da:69:9a:d3:6e:59:5c:6c:e1:c3:18:39:
cb:91:6b:7e:40:2d:aa:de:34:44:f2:f2:54:96:79:91:c1:f8:
2b:78:2b:fa:50:c7:91:e3:24:54:ac:db:e3:75:79:78:69:44:
59:78:fd:f8:9e:cc:fe:a1:a0:a3:f8:43:db:8c:45:9f:0a:0c:
5a:1e:5d:e4:97:e9:18:47:4c:42:48:ee:64:57:7f:2d:b0:46:
ed:ae:d6:ee:10:1c:b3:2a:3e:c7:f4:45:00:71:35:20:c1:31:
b0:29:27:38:80:7d:9b:b8:40:8a:ff:49:0c:84:e9:5b:52:7e:
c6:cc:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:44 2025 by rpki-client