Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/IBIPuf_DqojU_tONsvZugqqAKDc.roa
File: IBIPuf_DqojU_tONsvZugqqAKDc.roa (raw, json)
Hash identifier: iaD076aW35ynrECqShRP2FRKf1W8cIIbKJ8PT+huzPc=
Subject key identifier: 20:12:0F:B9:FF:C3:AA:88:D4:FE:D3:8D:B2:F6:6E:82:AA:80:28:37
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01981897EB6A555AD685402B350C2EE24F02
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/IBIPuf_DqojU_tONsvZugqqAKDc.roa
Signing time: Thu 17 Jul 2025 13:34:25 +0000
ROA not before: Thu 17 Jul 2025 13:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213537
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 10:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:97:eb:6a:55:5a:d6:85:40:2b:35:0c:2e:e2:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Jul 17 13:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20120fb9ffc3aa88d4fed38db2f66e82aa802837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:59:57:45:f4:e6:ba:b8:5b:9d:e8:ec:b7:
7b:f5:17:cf:ef:b0:92:03:d7:1e:7d:3b:51:ea:8b:
54:ac:7e:c3:58:25:9a:60:93:8f:30:a1:6a:83:e3:
aa:54:31:d9:33:87:98:cf:d7:94:b1:4e:85:58:cd:
fd:8a:1a:0c:7a:40:3e:5b:d0:61:93:53:84:92:40:
a8:0e:ab:0d:b9:a4:2f:55:ae:5e:2f:b5:e5:39:c8:
bb:65:2e:ff:d9:5a:9f:c9:42:14:f5:9d:1d:6c:70:
8a:5a:c8:62:9b:cb:43:3f:6a:a0:15:ad:ca:03:fc:
ab:e5:a4:1a:4d:5a:d8:1f:c7:fb:f4:8b:c7:26:20:
a7:43:6c:eb:bf:4c:4e:7c:43:2a:95:15:4f:eb:1f:
09:7e:8a:62:f9:b5:57:14:44:75:bf:22:59:c3:f6:
7f:b7:c8:0e:3e:2f:07:d0:de:7e:80:a8:19:7a:60:
eb:30:93:c8:27:75:1d:d8:3e:13:bc:26:36:72:45:
88:77:50:ae:ec:fe:da:f8:ea:83:37:24:50:54:8d:
fe:c0:62:46:48:7e:56:f3:ca:88:4d:62:8c:24:95:
2f:18:89:67:14:74:0e:47:37:af:1b:3a:fa:d7:4b:
06:41:91:93:d9:a2:ab:c6:cf:f7:a1:a8:d6:1b:b7:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:0F:B9:FF:C3:AA:88:D4:FE:D3:8D:B2:F6:6E:82:AA:80:28:37
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/IBIPuf_DqojU_tONsvZugqqAKDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:46:e7:9e:93:29:bb:06:13:e9:9b:f7:de:25:65:90:9b:ac:
0e:d0:da:77:e4:22:63:2b:44:8c:a7:6a:24:5e:76:9a:4d:96:
ec:a5:db:57:ae:c4:f2:6a:09:f3:9c:c1:af:ef:45:12:dd:a0:
b0:d6:0f:0e:3f:01:eb:e7:f5:73:b6:ec:9c:de:97:c4:2b:9d:
df:8d:59:48:a4:22:dc:01:91:7f:81:bb:e8:9a:40:72:30:15:
21:d2:f5:05:2f:bd:92:69:5c:70:5b:7d:51:ef:04:a2:ed:f2:
96:23:b0:2d:fc:ea:6c:ba:59:a9:b4:4d:2f:a8:9a:c1:22:a1:
4c:c6:37:97:f0:52:99:dc:e8:fb:c8:8e:33:a0:4b:2d:0f:1c:
2e:a3:42:e3:a3:66:09:8e:bc:93:26:68:42:3f:0c:c8:b5:e0:
22:d9:f4:49:4b:d0:41:23:22:c3:d2:2c:70:ef:d7:63:62:0f:
a7:ba:b2:f5:84:5c:83:a3:07:ed:f3:77:4d:a8:23:64:fc:af:
bd:81:32:c9:f8:f9:e5:bf:8e:63:cd:fa:36:44:aa:25:5c:cb:
23:51:5f:b4:92:67:47:64:74:d9:f3:6d:50:31:f1:18:ec:4f:
f1:8a:3d:fc:f1:2d:98:ed:5b:3c:48:0f:a6:9a:78:ab:67:0c:
b1:96:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:33:47 2025 by rpki-client