Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eX5S3CMfDf1LcK7PeK9wtsS6Gh0.roa
File: eX5S3CMfDf1LcK7PeK9wtsS6Gh0.roa (raw, json)
Hash identifier: KvN9TtHbWT3jso+z/f+6WtABm3LSUgiygTPi3TjgtcU=
Subject key identifier: 79:7E:52:DC:23:1F:0D:FD:4B:70:AE:CF:78:AF:70:B6:C4:BA:1A:1D
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0197CA81A1CCA696F18042DA0BC25BD9C5C6
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eX5S3CMfDf1LcK7PeK9wtsS6Gh0.roa
Signing time: Wed 02 Jul 2025 09:39:42 +0000
ROA not before: Wed 02 Jul 2025 09:39:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 185.69.120.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Jul 2025 12:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:81:a1:cc:a6:96:f1:80:42:da:0b:c2:5b:d9:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jul 2 09:39:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=797e52dc231f0dfd4b70aecf78af70b6c4ba1a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:55:88:25:14:d8:2d:a6:17:e6:88:59:ea:
32:c7:2b:de:6c:4b:29:05:aa:9a:94:18:1e:1a:5c:
e5:1d:3b:70:11:f4:b4:7a:15:9f:21:1b:d3:01:88:
a2:53:1a:03:c8:15:37:b8:ab:93:ae:51:84:79:96:
f5:b6:06:72:d1:0c:1e:b4:5a:94:d8:62:08:50:74:
65:fe:18:32:b5:fc:34:12:21:09:ef:7d:3a:11:3d:
a5:08:9c:c6:68:a6:a5:0f:1b:ed:de:c2:35:82:63:
2a:46:52:e5:db:df:5f:b1:f6:c8:d5:9f:0d:6e:2f:
b5:8f:2a:10:a9:57:ce:1c:86:1e:55:77:58:de:f2:
8a:08:fd:94:a5:aa:7d:08:26:b6:7c:fe:08:6e:55:
bf:95:ce:bc:df:b6:1f:29:7c:33:3c:b5:75:11:de:
27:7a:51:98:08:df:65:e1:b2:b8:e1:2f:ad:a9:62:
f4:08:86:c5:a4:a5:31:e8:50:0f:95:48:44:e7:36:
e7:0f:64:8d:d6:12:a8:61:24:97:c4:19:43:cd:f3:
77:a6:39:28:8a:4a:a1:1f:df:6f:c5:ca:7a:48:ff:
26:ea:c5:25:be:d1:ac:04:d5:c2:c3:71:4a:d0:49:
f8:b1:15:f8:ae:26:da:47:4f:af:7c:88:ca:78:6b:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:52:DC:23:1F:0D:FD:4B:70:AE:CF:78:AF:70:B6:C4:BA:1A:1D
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eX5S3CMfDf1LcK7PeK9wtsS6Gh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:97:6d:a9:26:9d:61:c2:1f:8d:ea:e6:09:ec:39:3b:d5:10:
c0:95:55:b4:a5:f9:c0:cb:16:68:44:61:85:d8:90:19:a3:98:
2b:b5:fb:6d:0f:3d:c4:fe:05:3b:f1:1f:28:5b:60:b2:36:c4:
f6:5c:aa:8a:15:76:e4:16:49:c7:1b:1a:96:36:53:d8:c2:c8:
88:fd:6f:f6:d2:47:bb:e6:f5:38:9f:ea:92:62:51:78:32:73:
3b:d2:03:ff:24:c5:38:f4:fe:6e:ba:a4:3e:89:91:bd:e4:42:
00:a6:85:cb:f9:44:b9:9c:25:41:06:ad:cd:ff:bd:23:1e:8a:
84:f6:ec:59:5f:02:f9:b1:1d:4e:92:71:28:e1:0b:b3:6e:5e:
ba:ec:79:9d:d0:e6:bc:8b:28:8b:4b:2b:e0:3e:53:f0:c4:3c:
40:5d:58:f6:c2:da:f7:91:ac:ca:7a:1d:f8:b9:ed:25:73:93:
d0:46:c0:1e:2e:4b:c3:1c:4f:fe:29:ac:c6:c2:79:d6:9a:61:
49:71:3a:a1:5a:1a:9e:6a:69:a5:2d:6a:11:5b:ce:f0:cc:7b:
21:19:5a:6c:d3:16:5f:52:1a:6a:19:6c:76:d8:70:b6:75:1b:
f8:66:c9:68:9d:a8:52:11:ae:b5:d0:cd:0c:4d:a2:62:60:3c:
03:a3:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:52 2025 by rpki-client