Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/X_SoCyEbUCrAF5b21uUiiRw3z3A.roa
File: X_SoCyEbUCrAF5b21uUiiRw3z3A.roa (raw, json)
Hash identifier: V7Buzrm5JnI2OF0Rb0uQBeuKuxywmkQ2qr2pmabePEc=
Subject key identifier: 5F:F4:A8:0B:21:1B:50:2A:C0:17:96:F6:D6:E5:22:89:1C:37:CF:70
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01983399F9F8870A99CF1D933B243D1B5169
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/X_SoCyEbUCrAF5b21uUiiRw3z3A.roa
Signing time: Tue 22 Jul 2025 19:26:25 +0000
ROA not before: Tue 22 Jul 2025 19:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 195.123.0.0/22 maxlen: 22
195.123.12.0/22 maxlen: 22
195.123.168.0/22 maxlen: 22
195.123.196.0/22 maxlen: 22
195.123.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Jul 2025 12:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:99:f9:f8:87:0a:99:cf:1d:93:3b:24:3d:1b:51:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 22 19:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff4a80b211b502ac01796f6d6e522891c37cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:8e:fd:13:0e:5f:bf:19:2f:e1:af:61:b5:
a7:e9:7d:b0:88:d0:a8:83:40:7d:8f:46:4e:3f:89:
3d:16:bc:b3:07:e8:ba:fe:4c:96:7c:7c:0f:04:25:
4a:2f:f3:56:73:21:e5:15:34:75:94:59:ee:73:35:
ad:ff:63:d1:0a:49:4d:ab:c4:ca:b5:be:25:65:d6:
7b:ae:8b:7c:6a:4d:b5:75:32:85:fc:1f:7f:57:2a:
66:12:ed:a6:ab:7e:87:30:6e:4e:51:97:81:ed:9b:
31:61:ee:d5:7e:b2:bb:17:22:77:6e:4c:8b:0f:49:
b6:a9:62:62:42:92:8a:07:01:bf:6c:12:2f:9e:b1:
d8:cb:47:d9:5e:4b:6e:c7:39:98:a9:cf:84:c1:92:
98:39:72:15:a8:5e:a2:10:39:58:0e:a3:2f:08:71:
e9:d0:03:05:32:92:5b:4f:28:26:f1:21:32:ef:fe:
b3:97:10:d8:7c:c9:60:3f:6d:5d:6a:c3:fd:be:f9:
94:5c:59:c8:f8:84:34:8f:05:d0:79:0c:58:d6:78:
f3:be:52:06:ff:e8:12:a5:c2:7c:4e:1e:9e:2e:9c:
4d:39:e6:b9:16:e7:72:13:bd:fd:08:72:7f:7a:af:
0d:9f:49:ba:27:af:a3:29:1e:83:0d:0b:0f:c8:27:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:A8:0B:21:1B:50:2A:C0:17:96:F6:D6:E5:22:89:1C:37:CF:70
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/X_SoCyEbUCrAF5b21uUiiRw3z3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.0.0/22
195.123.12.0/22
195.123.168.0/22
195.123.196.0/22
195.123.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:ff:a4:44:65:33:45:8d:77:2b:73:a6:31:b1:0d:49:17:23:
43:eb:33:7e:85:2f:bb:d1:88:23:d0:ea:8f:e7:81:49:b4:fa:
7f:98:bc:73:bd:d1:45:93:3b:26:07:a0:64:c3:ff:f3:6b:9e:
c1:2f:b2:41:b1:44:e1:f4:0c:d2:65:b3:0f:e1:34:bc:fb:04:
ef:72:67:55:ce:30:72:eb:65:de:a0:08:bd:fd:32:cc:24:a4:
8d:be:47:91:d0:a2:d3:08:58:c5:1d:d4:3a:61:4d:09:ee:4c:
4d:cf:7c:16:3a:ea:62:da:95:f9:51:d7:80:20:a8:56:c8:82:
84:88:9a:de:eb:4e:0e:3b:6c:20:76:b0:63:0b:a5:2c:f7:24:
0f:b6:db:e8:f7:aa:37:b1:3c:b0:8d:de:98:1f:09:e7:5d:cb:
b2:2b:0e:32:b1:1b:75:73:11:9d:1d:2b:3f:8d:1c:96:7a:89:
92:42:90:05:69:5a:8e:6d:ed:90:26:21:d4:59:77:ce:be:ff:
c0:83:66:58:f7:7a:84:ac:db:8a:c5:73:51:3f:0c:ff:ed:13:
0a:19:30:aa:71:05:d1:41:a9:dd:bd:94:72:31:d0:4a:df:37:
b9:17:9b:d9:74:83:1f:56:20:25:e2:f4:41:a7:93:b6:9f:7f:
c6:62:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:32 2025 by rpki-client