Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/KTEbDXlTHeSt0QqIiISEVR3kJmQ.roa
File: KTEbDXlTHeSt0QqIiISEVR3kJmQ.roa (raw, json)
Hash identifier: p62Q4Y66irPpMC6L2zPuB52kKnksWQUdGvQ4NCRGkcs=
Subject key identifier: 29:31:1B:0D:79:53:1D:E4:AD:D1:0A:88:88:84:84:55:1D:E4:26:64
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01981897EA433385EEE1EC541097FD73D599
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/KTEbDXlTHeSt0QqIiISEVR3kJmQ.roa
Signing time: Thu 17 Jul 2025 13:34:25 +0000
ROA not before: Thu 17 Jul 2025 13:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59796
IP address blocks: 92.242.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 10:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:97:ea:43:33:85:ee:e1:ec:54:10:97:fd:73:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Jul 17 13:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29311b0d79531de4add10a88888484551de42664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:ed:c0:c6:6b:01:f3:4b:74:1d:f3:33:3b:
46:fd:75:5b:1b:2f:ba:02:a9:00:b7:55:2b:4c:5c:
f4:e2:28:8d:cb:48:2e:d6:2b:df:8a:1a:d2:d0:21:
c8:a7:ed:d9:84:cc:f0:31:e5:f6:94:4b:57:d4:65:
c0:10:c0:db:74:79:91:95:3d:82:dd:9d:b7:f2:b2:
8f:d2:b2:ed:84:ee:61:6e:a1:e6:f8:0b:6d:b4:6f:
5e:4b:96:c2:c2:7f:29:06:a6:22:02:90:46:fa:00:
e8:98:e3:6f:0f:c1:a4:14:7f:ed:ce:e9:ae:85:53:
bd:ef:c3:04:f1:13:01:73:7d:1f:89:87:26:40:a9:
a0:90:52:a4:01:4c:41:bd:9e:1c:12:a7:56:c1:58:
31:fa:39:d0:63:9a:20:ee:6a:e9:82:c9:8b:18:43:
97:75:c4:f3:aa:ff:41:05:de:bf:43:23:91:af:95:
b0:5c:53:1c:4e:98:80:22:41:56:7e:1d:1d:db:f7:
dc:eb:44:90:c1:57:28:a2:b7:6d:b6:55:f8:ae:b0:
5b:00:c9:53:31:6e:be:52:e3:43:20:2f:1a:93:60:
11:8b:7e:b0:7c:7d:47:a8:e5:f2:06:32:f5:0d:2e:
bb:da:22:85:db:a8:8e:c1:b1:bf:be:ef:6c:52:97:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:1B:0D:79:53:1D:E4:AD:D1:0A:88:88:84:84:55:1D:E4:26:64
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/KTEbDXlTHeSt0QqIiISEVR3kJmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:08:13:ef:1f:41:da:c8:67:35:4a:8b:72:3f:ab:43:5a:2e:
79:f0:76:0c:bb:7f:ad:33:9e:4d:67:3a:14:bb:1a:89:58:eb:
4c:89:b4:7f:b1:39:01:ad:54:03:96:1d:f6:5c:05:ce:c1:7a:
b1:30:0c:8b:ed:00:76:9c:92:f2:08:47:92:7e:c2:91:9e:e1:
35:04:a2:8b:74:a5:ae:85:14:56:ef:09:c2:58:49:1d:11:da:
0f:be:19:18:e7:19:c1:b9:8f:0e:52:00:6b:45:0c:1e:17:eb:
28:15:f5:a2:67:a5:30:0f:09:df:ab:51:1e:69:d6:f8:2d:8e:
02:7d:cb:df:b0:bf:23:53:dc:06:27:86:12:4c:29:af:9d:86:
b1:5a:7b:af:18:7e:93:9c:11:b4:c8:a5:54:d3:40:cd:33:22:
9d:17:94:0c:ec:0a:70:5a:55:42:b9:54:09:d3:08:1a:7f:36:
f3:4d:c9:8a:8e:79:7e:41:72:5e:36:8d:f7:34:0e:78:30:d3:
09:a6:97:21:fb:00:d5:2f:49:a8:5a:f9:90:fc:af:4d:06:5f:
b1:5a:d6:d9:62:c0:69:69:b5:38:d8:73:50:5c:a1:a8:ff:fd:
29:73:0c:a7:b5:80:80:11:da:c4:05:ed:b9:0b:4a:df:30:8c:
55:24:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:36:13 2025 by rpki-client