Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Eyy4FjLL4V20eetuH1FNnnLLNzQ.roa
File: Eyy4FjLL4V20eetuH1FNnnLLNzQ.roa (raw, json)
Hash identifier: bmNTfURLmA8mcXUYFNE1AU6tHQug0UHNTWojPqW1iYQ=
Subject key identifier: 13:2C:B8:16:32:CB:E1:5D:B4:79:EB:6E:1F:51:4D:9E:72:CB:37:34
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019816CD3C7FA0FB8336D38002F48B70F0FD
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Eyy4FjLL4V20eetuH1FNnnLLNzQ.roa
Signing time: Thu 17 Jul 2025 05:13:25 +0000
ROA not before: Thu 17 Jul 2025 05:13:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.118.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Jul 2025 07:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:16:cd:3c:7f:a0:fb:83:36:d3:80:02:f4:8b:70:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 17 05:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=132cb81632cbe15db479eb6e1f514d9e72cb3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:e3:73:64:05:8b:6e:91:8b:5c:75:36:59:
15:b3:e5:d3:b5:17:b0:3a:24:32:38:55:2a:f2:16:
f9:f7:4d:3d:06:f0:0a:87:4b:9f:2b:5e:51:22:fb:
d7:57:62:54:f2:48:d1:fc:a0:a7:de:ed:b9:a2:ec:
bc:18:c8:0b:c1:43:d2:9c:3f:dc:c1:96:c8:70:b0:
df:a5:06:cc:5a:2c:6f:59:ee:f4:a3:44:0a:4c:b9:
73:67:2e:32:aa:32:64:b6:06:31:a6:60:a1:03:37:
35:01:1a:79:27:13:72:a3:88:dc:46:44:08:93:dd:
cc:c1:04:43:62:d5:08:31:3a:92:e3:1d:f2:e6:e6:
ef:47:6c:49:c4:e2:6e:bc:f5:9d:11:bf:67:f1:4b:
59:1d:91:37:07:1c:8f:98:3c:a4:7e:3c:39:c5:bc:
13:de:98:76:7a:0d:36:ff:5b:30:a8:93:41:e1:b6:
3e:2e:61:a1:42:d9:39:e4:10:1a:79:ab:de:fb:0f:
94:da:c7:df:ab:14:c9:90:9a:30:86:d2:77:72:84:
a2:7b:5e:71:61:70:7b:88:2e:84:d2:48:21:ab:5b:
f1:4a:58:26:9c:da:8b:e9:17:aa:08:a3:7f:00:b4:
ce:81:4c:d2:c8:25:f3:ef:0b:40:b8:b1:6c:ca:41:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:B8:16:32:CB:E1:5D:B4:79:EB:6E:1F:51:4D:9E:72:CB:37:34
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Eyy4FjLL4V20eetuH1FNnnLLNzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
70:52:cb:dd:41:62:ca:a6:e0:b3:ff:5d:a2:af:67:6b:1d:d6:
6e:5d:2e:4d:43:93:4c:1b:1e:c3:e4:0b:2b:39:bc:b0:3a:ad:
68:0b:32:0d:53:10:8d:ee:25:97:6e:45:3b:a9:b8:2d:a3:fa:
bd:7a:9b:0a:7f:f6:5d:da:19:60:62:57:94:78:7a:5e:8e:c2:
85:6e:5c:9f:5e:37:a5:a1:f3:8e:9d:73:9e:5c:67:8e:a3:f9:
9e:7d:3e:e7:e8:45:1b:9c:42:de:dd:88:4b:73:c4:75:67:af:
93:ec:e0:54:50:9f:b2:f1:fd:b8:f9:9a:39:2e:c2:13:76:d0:
9c:34:8d:80:55:5f:2f:47:06:0a:c8:92:28:0f:83:fc:da:90:
05:b8:27:71:69:14:cf:9b:9e:3b:08:8f:7b:36:20:eb:10:c9:
65:d1:80:bf:6d:48:2a:f5:ac:39:78:18:4d:e8:e2:3c:45:7b:
6f:d3:9f:a6:53:1d:9f:65:48:aa:d4:82:65:09:20:bc:a6:87:
ef:c5:69:cc:59:64:57:04:45:78:c3:79:4d:21:e0:e3:60:dc:
4d:09:88:49:62:57:e4:52:b7:bd:aa:f9:aa:5e:23:2e:c3:5e:
aa:75:c8:42:b2:ce:93:18:0a:f2:87:f5:fc:05:b4:93:c3:26:
e3:e2:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:44 2025 by rpki-client