Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/vKVwQJOOMNB2wemZSvCfewrs97c.roa
File: vKVwQJOOMNB2wemZSvCfewrs97c.roa (raw, json)
Hash identifier: fWLxE831hmvtMRZ6c3fuRxmNmlHi7jxGcaFJbwsIc8A=
Subject key identifier: BC:A5:70:40:93:8E:30:D0:76:C1:E9:99:4A:F0:9F:7B:0A:EC:F7:B7
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0197CA80B6A6AE00C8B85179445CBCCF37F4
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/vKVwQJOOMNB2wemZSvCfewrs97c.roa
Signing time: Wed 02 Jul 2025 09:38:42 +0000
ROA not before: Wed 02 Jul 2025 09:38:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 185.69.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Jul 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:80:b6:a6:ae:00:c8:b8:51:79:44:5c:bc:cf:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jul 2 09:38:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bca57040938e30d076c1e9994af09f7b0aecf7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:d7:83:5a:7a:ad:d7:b6:46:ea:e1:af:ac:
4b:60:0b:28:d9:7d:3c:ab:45:b3:9c:3a:9e:d2:0c:
7e:86:0f:50:80:86:99:47:17:59:35:df:77:66:7b:
4a:a7:78:52:63:da:0b:bb:62:fc:7b:e9:ee:5f:9a:
20:4c:93:04:01:2a:74:4d:55:5e:a9:39:93:10:4e:
49:a4:4b:06:9e:d2:58:a2:62:89:c2:61:d7:72:88:
a8:e5:21:7d:b7:07:08:83:5c:b2:70:a1:d8:0a:0c:
e1:98:6e:e5:46:f9:3a:97:a4:ec:10:78:0d:ae:d8:
c5:60:d1:33:00:64:c8:24:aa:12:90:54:af:77:06:
ea:bc:59:09:c1:0a:5f:ef:43:55:bc:d7:70:15:63:
f1:c2:bc:45:3f:db:fc:b3:53:fd:b2:ca:d8:23:bd:
4d:b2:bc:ed:1a:7a:ce:91:84:bb:83:bc:0b:98:af:
2d:ab:9e:40:dd:fb:6a:7e:8d:b3:32:24:71:40:e8:
de:43:28:e9:f1:68:04:34:0c:7c:54:3e:8e:d0:c6:
5d:ee:66:51:4d:99:1a:33:75:11:43:c3:c9:b9:2a:
6f:b1:1c:33:2b:da:68:ae:1c:9a:a3:81:a5:79:04:
27:9b:28:4a:15:55:96:38:ea:9d:2d:8c:bc:ea:df:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:70:40:93:8E:30:D0:76:C1:E9:99:4A:F0:9F:7B:0A:EC:F7:B7
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/vKVwQJOOMNB2wemZSvCfewrs97c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e3:69:67:ce:3a:ed:8e:1e:d1:a7:07:a4:3d:68:1a:5a:44:
63:4c:9d:12:ec:fa:50:1e:4d:1a:79:69:80:24:1c:8d:f7:34:
96:45:30:ea:57:0a:30:1f:41:d1:80:d3:01:ae:66:11:5d:22:
6f:a2:f6:e3:fa:a3:3e:0e:ba:9e:5e:15:ff:2a:b8:a4:85:be:
93:3f:1b:76:fd:2b:64:b5:94:a5:7b:5e:fe:4c:cd:75:65:ba:
45:80:c5:ef:eb:9e:bd:17:12:f6:cc:73:29:af:f9:9e:70:87:
5a:c7:c0:b4:14:1e:8a:ea:c0:fd:9d:e7:de:a4:24:3a:15:12:
6c:9d:d4:0e:a1:61:8d:0e:fd:1d:81:54:9f:d6:31:54:c0:04:
b5:fb:5e:a5:56:c1:22:24:a4:5a:62:97:e1:2a:e9:fc:3c:5c:
98:e1:b8:2f:65:6f:cf:1b:e5:bd:a2:02:57:9c:af:73:1e:24:
7f:ca:8a:be:a2:89:f8:4d:d0:d8:7b:84:eb:c6:22:3f:98:38:
7b:99:89:05:8c:82:dc:29:97:31:91:a7:7b:60:99:30:1b:a0:
4e:37:1e:6b:a1:8d:8f:2e:70:85:10:71:ac:1e:7b:20:53:15:
5f:47:79:5e:ba:5a:af:7d:f0:3e:d4:8a:3c:b2:81:b0:8d:9f:
3c:52:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:54 2025 by rpki-client