Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/keI07xv9OcqgnEk4p85PKMiIeb0.roa
File: keI07xv9OcqgnEk4p85PKMiIeb0.roa (raw, json)
Hash identifier: skMzaTqBpHH6zhpOEk0xG3Vr0EgShkWZjgln6tOgLtc=
Subject key identifier: 91:E2:34:EF:1B:FD:39:CA:A0:9C:49:38:A7:CE:4F:28:C8:88:79:BD
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01980E1D29160D04D465627A134C6AF58CEE
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/keI07xv9OcqgnEk4p85PKMiIeb0.roa
Signing time: Tue 15 Jul 2025 12:44:08 +0000
ROA not before: Tue 15 Jul 2025 12:44:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138380
IP address blocks: 153.112.200.0/23 maxlen: 24
153.112.201.0/24 maxlen: 24
192.157.12.0/23 maxlen: 24
192.157.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 15:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:1d:29:16:0d:04:d4:65:62:7a:13:4c:6a:f5:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jul 15 12:44:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e234ef1bfd39caa09c4938a7ce4f28c88879bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:f9:ce:b2:5d:51:e4:db:fb:cc:a7:dc:a6:
b8:0c:55:8e:f6:8b:de:79:de:13:14:2d:7d:eb:66:
ec:3d:1a:d0:d5:f7:8b:0d:6c:c7:30:c1:6f:79:ba:
58:33:a5:c3:2c:8a:d9:70:99:c0:d5:28:6e:9e:e4:
16:7f:4f:ba:ff:80:c6:5e:87:e2:6e:40:1e:f3:e1:
df:9b:02:06:96:fe:d1:66:f5:7e:cc:3f:3d:98:e9:
9b:75:8d:23:50:fe:17:a0:e3:bd:24:3f:57:bd:77:
44:fb:bc:39:86:da:9a:20:58:b4:f4:08:75:38:75:
69:e5:10:9a:b8:3f:02:8f:31:5d:7c:82:a2:ab:ca:
06:5a:1a:82:49:70:af:6c:32:0d:28:f2:66:09:15:
98:f0:78:ce:d5:74:47:68:13:91:1c:24:47:4d:84:
9e:0b:1d:96:3a:3c:d2:af:c6:b9:2a:f0:13:01:14:
f1:ad:0c:b2:c2:42:39:2c:c0:73:89:ef:b2:ca:25:
61:51:49:ed:ac:bf:5f:a6:e1:fa:e5:83:32:5d:66:
d1:f4:a0:e8:0a:69:1d:c5:e4:cb:81:a5:7a:97:7d:
45:f5:8f:58:08:a8:d8:18:50:fb:9e:cb:5d:76:44:
4d:e8:01:26:da:78:6e:d7:16:97:fe:f9:45:1b:b4:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:34:EF:1B:FD:39:CA:A0:9C:49:38:A7:CE:4F:28:C8:88:79:BD
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/keI07xv9OcqgnEk4p85PKMiIeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.200.0/23
192.157.12.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ef:56:f7:71:d9:71:75:e5:f0:db:8e:4d:6e:7e:b9:9f:a1:
a7:96:2c:c2:ee:92:f0:0d:85:0f:7b:cd:f1:00:a2:48:97:bd:
1f:74:42:7f:23:60:62:6f:d8:34:86:3b:86:2b:9e:49:86:56:
a4:3a:c3:09:25:16:2a:98:52:67:c7:e2:ca:d2:af:fc:27:2d:
ee:c4:d3:77:fe:21:e9:1c:11:42:0f:a8:49:69:36:c5:62:e6:
f4:dc:53:7d:7a:40:3e:48:77:88:50:3f:73:60:1f:60:56:e5:
db:db:d2:6a:d2:6e:83:06:32:58:93:4c:60:9f:fe:a3:24:7e:
72:e4:73:8c:8e:b4:13:fc:f9:a1:a6:67:56:92:08:e2:4e:6c:
82:f7:ff:cd:f8:81:dd:be:53:d7:5d:6a:60:f5:ef:71:47:f9:
a6:ed:cc:4d:8f:f5:33:f3:06:cf:dc:87:78:b5:29:c9:8a:43:
93:11:be:c2:d9:dc:a0:ad:53:b3:6a:16:35:a8:15:58:a4:b7:
8c:1d:cd:c7:cc:8a:e8:20:d2:f4:fb:53:ef:3f:80:f2:8d:30:
21:10:4e:53:f8:02:42:23:d5:9e:7e:fd:55:a4:1e:f6:89:62:
a4:53:30:3a:ad:79:49:d8:80:d5:1b:f4:83:ee:dc:93:cd:b7:
1f:2e:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:29 2025 by rpki-client