Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/vFIj7BMm9W38K1AK0_TfxLXB738.roa
File: vFIj7BMm9W38K1AK0_TfxLXB738.roa (raw, json)
Hash identifier: f4ACeytjhVEsIRkMzxFo+aRERHe0dRxVPjw4ByX5hWw=
Subject key identifier: BC:52:23:EC:13:26:F5:6D:FC:2B:50:0A:D3:F4:DF:C4:B5:C1:EF:7F
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 01981474C16D94A959C7F3286E7BCB617E79
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/vFIj7BMm9W38K1AK0_TfxLXB738.roa
Signing time: Wed 16 Jul 2025 18:17:32 +0000
ROA not before: Wed 16 Jul 2025 18:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 94.199.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Jul 2025 09:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:74:c1:6d:94:a9:59:c7:f3:28:6e:7b:cb:61:7e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Jul 16 18:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc5223ec1326f56dfc2b500ad3f4dfc4b5c1ef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b4:62:6f:d2:3b:3d:e1:14:60:0d:23:94:aa:
51:cc:ac:3c:4b:2e:a7:77:98:aa:46:a1:99:62:b5:
cd:09:16:10:25:83:f9:89:46:30:d8:6a:4c:1d:d6:
9e:cb:0a:e3:ba:92:82:71:55:37:e5:ff:c5:37:e3:
48:74:a8:36:1d:19:d6:62:87:dc:31:c3:96:5c:57:
ba:d9:99:b3:29:0e:36:dc:8e:08:ed:86:86:02:8e:
42:85:a5:cb:b3:d9:3b:15:ee:93:a4:c5:84:1b:d1:
d1:ad:c9:e0:cd:f4:86:22:e2:d0:fe:65:4b:dc:3e:
26:93:d0:70:c6:2c:a9:2c:78:55:a1:3d:43:46:c9:
33:db:bd:e6:3a:80:7f:da:3f:2c:48:41:05:83:47:
84:0f:d9:34:22:61:e3:57:2e:e8:de:05:0c:b5:fa:
62:2c:27:7a:3c:a2:e8:35:1c:60:28:28:f7:4e:d8:
bb:5e:cc:58:d4:7a:63:d0:28:7f:f1:f8:3c:5e:86:
e1:cd:2a:89:8e:07:a1:00:de:7b:a4:03:75:bb:27:
8a:b4:88:ba:6d:dc:0c:4e:0a:d8:41:42:a1:61:18:
f0:46:a2:4c:6b:fb:64:d6:17:be:b8:f1:30:d5:47:
de:de:31:a9:3d:78:c8:d4:2d:e7:13:25:41:65:b4:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:23:EC:13:26:F5:6D:FC:2B:50:0A:D3:F4:DF:C4:B5:C1:EF:7F
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/vFIj7BMm9W38K1AK0_TfxLXB738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7c:c4:f1:51:ff:46:21:ff:e9:90:85:6e:2d:bb:df:e7:25:
ba:eb:16:b7:38:8b:56:57:97:bf:68:b5:1f:f8:52:c0:11:fb:
2e:e1:7c:30:c0:75:9d:5a:c7:f0:30:15:23:73:04:7a:2d:bc:
4c:39:78:6d:f1:3a:a9:8a:7d:47:ba:c9:35:df:9b:f0:f4:7b:
83:89:0d:be:a8:b9:f2:fd:77:43:f8:0f:ea:6e:27:44:e4:20:
f1:fa:ec:86:bc:dc:39:61:83:3a:5d:d6:e9:f8:7f:d6:01:52:
f4:55:bf:ab:b3:45:84:a6:01:45:f2:7c:b9:bf:12:a5:da:e1:
6a:e1:93:16:fa:4d:b5:4f:fd:3c:4b:59:60:00:44:16:06:4e:
ce:a1:c9:30:16:12:0f:39:bb:2c:5a:a0:3d:ae:f1:70:d3:8d:
34:0e:70:60:18:a9:8a:3d:55:75:7f:15:75:c5:34:5c:52:41:
59:b8:24:bd:f7:25:fa:d7:c2:56:4b:18:f0:be:0b:c5:ff:32:
d1:c5:41:33:03:d9:19:b1:45:45:18:1a:6b:5f:a4:2c:43:84:
75:d3:4f:b1:9e:dd:5a:9f:ac:97:e9:2e:a4:99:82:ac:23:e6:
57:2d:38:93:b1:45:70:f1:c4:86:10:dd:bb:38:f2:c8:a7:c9:
3a:c2:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:43:00 2025 by rpki-client