Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/zs9rLlJc0-Qb7hcSixAVEENvygg.roa
File: zs9rLlJc0-Qb7hcSixAVEENvygg.roa (raw, json)
Hash identifier: Jc0VSQwqW7q7OS1xYgi14zv07CUaOEbXJnQ9GbD7P+4=
Subject key identifier: CE:CF:6B:2E:52:5C:D3:E4:1B:EE:17:12:8B:10:15:10:43:6F:CA:08
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01979C4C6BCB4957A942FB8BB6723CCF35E7
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/zs9rLlJc0-Qb7hcSixAVEENvygg.roa
Signing time: Mon 23 Jun 2025 10:19:03 +0000
ROA not before: Mon 23 Jun 2025 10:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 185.129.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:4c:6b:cb:49:57:a9:42:fb:8b:b6:72:3c:cf:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jun 23 10:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecf6b2e525cd3e41bee17128b101510436fca08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:26:0e:87:4d:51:92:92:27:e0:b6:7f:2f:
07:a7:a2:06:ce:1c:04:bc:45:24:ef:79:01:76:0a:
00:41:96:e6:d2:2f:f0:36:bd:ab:ae:5d:84:ba:7e:
29:02:c3:4b:43:5c:6a:f6:a6:8f:c9:88:67:24:01:
0b:f9:c6:ec:10:f8:53:a0:e4:f5:94:09:53:c3:30:
bc:b1:50:ff:9d:9e:5f:40:cb:46:c1:a8:bd:ed:c1:
6c:c3:46:bc:be:4f:27:06:50:21:ce:05:96:cd:49:
02:ca:1e:0e:8b:ae:f1:65:74:8d:e7:c2:ee:dd:a5:
85:d4:38:02:93:77:db:e9:8e:52:e4:9e:f4:ff:22:
7c:e5:cd:d0:e1:fd:d6:73:ba:7a:41:22:74:75:45:
01:49:40:78:09:38:10:1f:da:97:e1:05:90:8c:c1:
6d:df:fe:a0:ac:0d:54:21:a8:7e:0c:d8:44:ff:1b:
69:29:49:44:f4:84:0e:53:17:b3:61:21:ad:f2:fe:
b4:f0:6f:8c:c7:04:46:36:79:9d:ae:87:57:49:c4:
c2:d6:4e:b6:a8:94:48:d3:69:76:c5:7e:35:1e:6c:
26:18:8e:97:8d:fe:42:cc:16:9a:78:21:da:e8:4b:
0c:2b:8f:f2:01:11:cc:95:19:0a:20:21:dc:ac:a1:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:6B:2E:52:5C:D3:E4:1B:EE:17:12:8B:10:15:10:43:6F:CA:08
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/zs9rLlJc0-Qb7hcSixAVEENvygg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
80:35:eb:9c:ac:1b:b0:c5:00:1b:ea:c8:b5:2f:d2:a1:4b:d5:
3b:1a:87:a9:93:6b:76:05:24:ce:96:1c:dc:76:53:56:62:f5:
e4:b0:c8:f3:03:97:9f:8d:51:f5:25:87:40:12:f7:68:8a:c9:
04:29:24:2b:0a:41:32:3d:b9:7d:2f:7a:c1:03:dd:2c:77:a3:
b4:7d:11:9c:70:4b:e3:82:65:61:88:54:36:e4:14:5c:5b:91:
51:f3:e7:e8:3e:08:e9:04:2c:a0:75:5d:95:82:4c:bc:e7:0d:
dd:a3:23:29:0f:81:11:fe:00:f1:af:5e:15:22:85:05:51:7a:
26:f7:42:b2:31:40:1c:c6:f2:aa:eb:b4:82:3f:8d:9a:51:ef:
ff:4b:33:4d:7d:be:c3:a7:64:43:1a:1c:cd:6e:a4:3a:52:46:
4c:10:ae:54:26:de:05:4c:84:ed:e2:92:0f:ac:95:21:5c:4e:
8a:97:c5:b8:dd:c2:8f:c0:ba:71:e8:15:33:54:31:1e:42:27:
d0:71:aa:c5:6a:07:4d:6f:88:28:f2:27:02:0e:92:28:a1:b8:
d3:fc:4b:ac:01:9e:bc:3f:ae:81:5e:41:12:9e:65:1d:bd:69:
7f:27:e9:c6:5e:f4:a8:13:a6:6b:7e:2f:98:86:93:e1:b6:1c:
bc:4a:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:47 2025 by rpki-client