Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/6Vz2kjgiYJld3r2Q9nCgA7QYeZ8.roa
File: 6Vz2kjgiYJld3r2Q9nCgA7QYeZ8.roa (raw, json)
Hash identifier: ZJZO2lONY7qsozumGHEjZdFb4MHv/iEe+zx1NESjFTQ=
Subject key identifier: E9:5C:F6:92:38:22:60:99:5D:DE:BD:90:F6:70:A0:03:B4:18:79:9F
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0197D67CA76F3F24AA1D23229679796A89BF
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/6Vz2kjgiYJld3r2Q9nCgA7QYeZ8.roa
Signing time: Fri 04 Jul 2025 17:29:42 +0000
ROA not before: Fri 04 Jul 2025 17:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 185.118.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 05:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:7c:a7:6f:3f:24:aa:1d:23:22:96:79:79:6a:89:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 4 17:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e95cf692382260995ddebd90f670a003b418799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:64:ac:4f:6e:83:e4:85:90:bf:ae:ed:6e:
05:3a:48:b9:29:d1:88:d7:47:19:29:b7:0e:c6:fc:
fe:07:19:84:ab:c4:7b:78:bd:1e:53:44:2f:f4:0e:
aa:85:4b:f8:b1:16:0b:d4:23:01:58:cb:69:df:75:
65:1f:ba:cb:36:16:4e:27:a1:37:b9:04:25:27:b2:
b6:db:3f:82:99:f0:c4:a9:88:96:1a:80:7f:b9:93:
48:8a:e5:3c:26:f4:27:e0:fe:7d:31:39:d9:b0:3d:
20:6d:47:86:3b:17:5e:ff:a9:49:91:32:06:76:c9:
3d:bb:08:20:23:78:02:4c:78:2c:12:fc:3d:08:f6:
7e:8e:d8:80:56:19:fd:4d:4a:61:08:f5:4d:aa:3f:
50:74:9a:3c:51:db:39:e5:3d:aa:ea:ff:96:9f:0f:
2e:5d:5b:b8:c4:49:9b:e7:f2:27:05:4b:d3:fa:53:
59:6e:12:99:f9:c3:0b:8e:10:df:4b:07:cc:62:0f:
24:ab:75:33:fa:d9:c6:ec:17:c8:14:ac:a7:bd:1f:
93:db:c5:12:ba:f3:b4:d9:35:86:1d:ab:02:ae:21:
96:b9:cb:84:ef:57:e3:94:dd:5e:9e:da:46:b9:fe:
c5:fc:c4:0b:7e:09:76:64:36:8c:59:89:dc:ff:b9:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:F6:92:38:22:60:99:5D:DE:BD:90:F6:70:A0:03:B4:18:79:9F
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/6Vz2kjgiYJld3r2Q9nCgA7QYeZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1a:3e:53:74:89:16:e3:da:66:fb:67:52:be:05:ce:4a:29:
32:6a:56:90:2d:22:ef:12:49:5b:bb:73:8b:e9:7b:86:3c:63:
15:68:5d:fb:54:e5:de:b2:5c:cd:27:d3:7f:16:33:0b:f6:91:
87:17:9f:f7:0a:1d:64:bf:da:a6:76:3e:11:04:bb:db:ee:17:
c7:3c:5b:6f:68:5b:8e:48:bd:9e:87:8a:47:05:92:bc:40:72:
3b:dc:72:b7:18:27:f8:0f:42:c4:43:a9:42:4e:16:fa:86:c4:
6d:43:4a:15:e0:85:9c:f0:fb:34:6a:1e:ee:ac:53:a8:19:82:
a7:92:10:be:ce:cd:88:2c:00:76:0d:fa:e9:7b:e0:7d:51:c5:
71:07:31:e0:30:da:26:37:36:73:8a:cc:e5:3a:5d:dd:fe:d9:
f4:a0:b6:0c:a8:9c:70:9d:4f:01:0d:b9:39:e8:69:38:01:0b:
b0:52:56:b8:63:63:c8:5c:f8:9f:2c:f1:d5:2a:aa:2b:9d:15:
c7:c3:fc:a2:b5:2a:e3:db:66:03:0d:a4:10:7c:c6:a9:3a:e3:
12:12:78:b9:3f:d3:bd:ce:f2:a7:0c:0f:70:86:ac:5b:49:02:
58:66:ab:bb:95:f6:ed:f7:8f:5d:24:8d:e2:22:34:7a:35:2e:
18:44:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:22 2025 by rpki-client