Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/T8IhyHvKTeTcfxuDlbbrwx1eaCE.roa
File: T8IhyHvKTeTcfxuDlbbrwx1eaCE.roa (raw, json)
Hash identifier: o5z4WRZ6d5PaBp51dGTVdMRVJJIYqaS/RESqSvwpPrs=
Subject key identifier: 4F:C2:21:C8:7B:CA:4D:E4:DC:7F:1B:83:95:B6:EB:C3:1D:5E:68:21
Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial: 0197A73F69FA07B2349B9482ED3FA49DD787
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/T8IhyHvKTeTcfxuDlbbrwx1eaCE.roa
Signing time: Wed 25 Jun 2025 13:20:40 +0000
ROA not before: Wed 25 Jun 2025 13:20:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 138.200.0.0/20 maxlen: 20
138.200.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 27 Jun 2025 06:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:3f:69:fa:07:b2:34:9b:94:82:ed:3f:a4:9d:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
Validity
Not Before: Jun 25 13:20:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc221c87bca4de4dc7f1b8395b6ebc31d5e6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:69:4f:0a:d2:24:e1:3e:54:27:08:60:22:
30:8a:26:1c:40:99:4a:cc:a4:f6:eb:cc:70:c0:c7:
97:bd:d3:69:5c:c6:ac:e0:be:08:8a:16:fd:b0:ec:
56:c8:4e:09:31:8b:e2:06:57:0f:25:05:52:60:46:
29:d9:ef:69:4d:60:e5:bd:2d:d2:81:34:38:be:49:
6f:84:6f:1c:e8:e0:10:4a:02:02:19:fc:da:a4:a5:
58:59:fb:15:02:91:54:7b:4c:7b:5f:7a:e5:f6:e4:
8c:22:da:30:6e:9a:c1:37:d4:f8:3a:4a:3a:63:be:
a8:c5:68:8c:4e:10:fe:1e:73:cd:4b:84:88:38:81:
99:1f:0d:df:67:3b:ad:52:b0:af:96:d7:e8:18:82:
d7:dd:57:cf:df:e2:d3:b9:84:a0:40:01:07:84:7b:
2f:ca:fb:d1:11:09:1a:4c:b3:ae:84:6c:bf:5a:55:
c8:cf:79:2c:5f:ea:99:51:ff:9a:53:b3:44:2c:ac:
b0:0e:63:02:15:e4:f6:8f:22:dc:aa:f4:f5:ec:14:
9e:5f:2b:a9:ab:04:1a:64:89:65:41:3d:8f:e6:92:
e4:67:45:31:c3:7c:bd:da:5c:20:b0:5c:00:45:93:
60:da:18:7b:5c:2a:3c:70:99:0b:2a:02:62:ed:d1:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:21:C8:7B:CA:4D:E4:DC:7F:1B:83:95:B6:EB:C3:1D:5E:68:21
X509v3 Authority Key Identifier:
keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/T8IhyHvKTeTcfxuDlbbrwx1eaCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.200.0.0/20
Signature Algorithm: sha256WithRSAEncryption
45:6b:7a:78:72:2a:84:8c:83:3c:1b:fb:26:f3:3b:f9:20:e7:
66:51:b4:14:ea:d7:fa:40:29:fe:aa:be:36:d3:01:64:6b:80:
6a:9b:d9:34:7b:80:4a:72:09:63:43:86:c2:fc:57:95:8d:41:
c0:df:47:48:39:6e:28:a6:16:56:09:db:a1:4b:d7:e6:2d:32:
d9:d5:fb:fb:b3:7c:2b:c4:30:42:ee:41:e7:22:e1:2b:af:87:
a3:76:e6:3b:e3:7d:1d:6d:ce:a9:78:03:65:64:eb:a1:d8:32:
ab:81:02:63:d1:99:51:c9:ed:32:fe:12:3a:07:7f:85:18:e8:
c1:6e:32:6e:6b:7f:36:a9:4d:1b:c6:a9:72:ef:a1:99:29:c4:
fd:11:33:35:2c:33:e8:45:3a:5c:6a:e4:71:8d:4b:85:a7:42:
61:16:5e:cc:04:98:3e:1d:2c:bf:e1:cf:cf:c1:21:0c:93:a0:
04:b6:5c:58:4a:e3:70:d1:e2:52:12:73:45:0f:c2:93:d4:2d:
19:3a:3f:5e:32:a4:67:f0:5e:98:ab:05:69:d3:72:eb:51:60:
df:ab:7c:07:06:ac:14:01:ba:09:b4:2c:f7:28:73:02:86:9b:
96:13:16:8c:bd:88:e7:4b:f5:02:69:55:45:b3:48:27:a5:ec:
0c:10:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:32 2025 by rpki-client