Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/G4aqa9Z9ghVRj59F4z1fv-iqUno.roa
File: G4aqa9Z9ghVRj59F4z1fv-iqUno.roa (raw, json)
Hash identifier: 4NcU5kW+6JfLUk1v/VozHvIuyk91PtUlkt+NSOnha1I=
Subject key identifier: 1B:86:AA:6B:D6:7D:82:15:51:8F:9F:45:E3:3D:5F:BF:E8:AA:52:7A
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 0197F0358478A816BF1CF48D9D16BD0F640B
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/G4aqa9Z9ghVRj59F4z1fv-iqUno.roa
Signing time: Wed 09 Jul 2025 17:22:08 +0000
ROA not before: Wed 09 Jul 2025 17:22:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6272
IP address blocks: 213.252.230.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 10:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:35:84:78:a8:16:bf:1c:f4:8d:9d:16:bd:0f:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Jul 9 17:22:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b86aa6bd67d8215518f9f45e33d5fbfe8aa527a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:24:04:a6:39:48:41:9d:88:59:29:ce:41:
8e:e9:af:62:d2:51:67:e8:6a:24:11:c8:e8:7c:84:
a1:cf:56:ec:c6:33:94:92:f5:2e:3c:0e:bb:af:40:
e2:6c:8a:20:cb:23:0d:68:c1:d9:0f:34:c7:e5:21:
52:9c:a8:ac:61:9c:33:c8:c9:27:a0:ad:45:ac:d4:
33:94:6e:88:da:92:1e:10:bb:fd:7d:d5:94:ec:8e:
6c:74:55:2a:7f:0f:d9:91:a6:a0:51:47:06:b3:de:
ff:90:44:62:e3:b2:a4:d4:61:69:e4:f9:87:dd:8e:
cc:0b:63:83:3b:b5:df:d3:a9:ae:9c:9c:6d:e9:fe:
38:ad:55:06:73:59:fc:15:19:61:44:4a:e2:8c:bf:
a2:7f:34:32:70:83:3c:21:1c:f4:ae:13:cc:94:9a:
10:fe:d9:65:29:60:7c:8a:4c:0a:ff:10:04:5d:a7:
91:3f:bc:f5:4d:e7:ea:b8:db:6a:e5:2c:15:70:98:
41:61:0e:1b:1f:30:bc:cb:72:72:12:35:67:f2:fc:
88:bd:b7:cb:48:cf:10:0d:3b:51:b9:77:8f:8d:a3:
86:74:39:06:2c:79:bb:1c:f8:60:75:9e:58:76:57:
ac:d9:ad:c2:2c:2a:85:62:a6:49:4a:5e:ae:2b:6d:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:86:AA:6B:D6:7D:82:15:51:8F:9F:45:E3:3D:5F:BF:E8:AA:52:7A
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/G4aqa9Z9ghVRj59F4z1fv-iqUno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e1:7b:bd:9d:b5:bc:8e:5a:70:5d:c2:91:50:24:eb:85:28:
b4:e0:e3:18:27:b4:3a:b3:36:53:84:bb:9b:e8:34:e2:d6:a5:
40:b4:b6:e9:46:15:c6:61:7e:cd:9a:78:d1:64:57:23:a1:62:
8b:a2:6e:29:80:a8:64:40:78:ea:d9:69:79:e4:74:31:71:67:
42:19:85:11:55:c7:ae:c3:64:d8:c8:aa:61:1e:f8:d3:9d:bc:
2b:16:bc:1b:f6:8d:2b:eb:2c:ba:9b:39:15:fc:4e:c7:23:0e:
e0:95:8b:0a:16:be:5f:d3:f0:27:0f:72:ac:f9:08:24:25:a4:
b5:e0:e4:d0:13:f4:b3:1f:09:ab:7b:90:7f:fe:fb:9d:b4:d1:
89:00:d5:b2:12:32:78:c6:cc:9f:b5:89:69:86:b9:8e:f9:98:
fc:89:30:75:5c:a4:8f:5a:ac:da:f4:b6:a0:0e:b2:e8:c2:91:
d3:0a:9b:a5:df:0d:84:73:a8:ca:3c:ae:5f:92:d5:02:4e:69:
20:64:d4:45:60:07:28:2d:b3:c7:de:c0:88:10:8b:f0:b9:9c:
2d:d9:7f:cf:73:ad:a5:8e:44:c8:2e:af:04:73:2b:93:58:dc:
aa:55:9d:00:a7:22:12:36:04:ba:f6:8c:90:48:3d:7c:c1:a8:
79:01:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:55 2025 by rpki-client