Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/yTJCccZBTbZ5xHJ9xeDgjGEF3Ac.roa
File: yTJCccZBTbZ5xHJ9xeDgjGEF3Ac.roa (raw, json)
Hash identifier: jMEmsf+d20npin6gelUJvJc3vsKxNq2uEUrY3gSzb6Q=
Subject key identifier: C9:32:42:71:C6:41:4D:B6:79:C4:72:7D:C5:E0:E0:8C:61:05:DC:07
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019830F9FAA55336F93AC9D45A23EAE6C7C3
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/yTJCccZBTbZ5xHJ9xeDgjGEF3Ac.roa
Signing time: Tue 22 Jul 2025 07:12:25 +0000
ROA not before: Tue 22 Jul 2025 07:12:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210353
IP address blocks: 195.123.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 10:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:f9:fa:a5:53:36:f9:3a:c9:d4:5a:23:ea:e6:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 22 07:12:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9324271c6414db679c4727dc5e0e08c6105dc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:12:5b:ba:81:8f:24:10:1a:4f:ac:2a:80:
ba:95:be:0d:03:94:3b:30:2b:32:6f:a6:14:30:7f:
05:c7:d8:d4:bc:e8:86:ee:57:3f:c1:dd:19:d2:7e:
01:b4:51:5a:4b:66:52:63:16:e3:6f:5d:d8:27:6d:
a8:6a:03:e7:b8:f6:b6:77:bf:89:31:42:47:78:5b:
55:ea:69:2a:b8:16:90:ba:e1:72:40:2e:21:33:2e:
2b:1e:86:a2:a1:66:65:24:27:c5:ec:34:94:97:22:
d8:48:30:d0:94:cb:8f:2b:dd:92:ec:1e:f2:e0:62:
ab:f7:25:d3:b2:52:24:e5:5d:f4:e6:2a:6a:00:0d:
a9:26:62:6b:14:b1:1c:5f:1b:b4:9a:d1:db:e4:ba:
ac:08:80:bc:c5:f5:a5:70:c5:fc:7d:4c:8a:4f:b7:
ab:50:8c:c9:6f:a6:b5:90:c3:87:ce:0f:78:64:5b:
ed:f7:bb:6a:63:65:57:e2:de:c8:4a:76:f3:46:c8:
5e:03:50:96:8d:e5:cb:ec:e8:c2:7d:84:4e:6f:69:
bf:9d:0b:a6:ea:1a:90:75:37:b8:74:8c:e1:f0:a3:
d0:32:53:76:aa:c6:0f:ed:0e:3e:39:ac:a7:74:84:
dc:9b:9b:67:61:43:64:84:39:79:b7:b3:e2:f9:4b:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:42:71:C6:41:4D:B6:79:C4:72:7D:C5:E0:E0:8C:61:05:DC:07
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/yTJCccZBTbZ5xHJ9xeDgjGEF3Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:89:61:92:a8:18:67:1d:02:ff:7f:01:3d:72:ea:92:5f:1c:
af:09:d9:29:a3:88:f6:7b:bf:9a:50:34:d0:eb:43:1e:4f:a4:
9f:a6:84:8b:0c:b2:cb:9c:16:71:9f:a9:1b:d8:67:72:c3:c4:
0b:76:5e:91:8a:76:73:46:11:47:c4:06:6e:e5:98:94:6c:83:
b4:44:3a:6e:7c:e4:b3:f0:8d:05:df:fc:d8:fb:81:6e:ff:b3:
d8:62:a0:b0:6c:7a:a2:b8:e3:e9:8e:0b:32:8a:34:83:29:4f:
58:68:f1:f0:8e:76:6b:c3:39:23:2c:3a:97:c8:96:fe:22:f7:
d7:92:a7:fd:d5:9c:eb:8f:69:a9:e3:ac:20:f0:dd:85:d1:1e:
f6:56:e4:34:12:a7:80:80:c7:69:47:c7:5a:64:3f:84:21:9d:
2d:4b:15:14:f5:4d:f9:f1:3e:64:8a:e7:dc:2c:ae:9d:4f:22:
c5:20:b8:65:05:6b:19:f5:32:a9:bb:40:8d:e8:16:af:3a:ea:
6d:4c:ae:8c:79:71:25:5b:25:6a:6c:01:2a:53:58:68:2c:53:
91:8e:ac:f5:2d:43:fe:18:18:33:3b:3e:a9:7e:36:7f:d5:0c:
9c:23:98:73:ad:e4:79:8c:fa:a4:25:7f:c4:fe:c5:be:8a:c3:
06:f0:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:19:27 2025 by rpki-client