Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/onn4liDm7X4DH4PhehemAQIB-QY.roa
File: onn4liDm7X4DH4PhehemAQIB-QY.roa (raw, json)
Hash identifier: 4FXCsck/XiYIuSudRwP6I7sZnwBTJ98HXZI7ru87vn8=
Subject key identifier: A2:79:F8:96:20:E6:ED:7E:03:1F:83:E1:7A:17:A6:01:02:01:F9:06
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197E1CB8C3CE668DAD966FB5A2F7D2CC02C
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/onn4liDm7X4DH4PhehemAQIB-QY.roa
Signing time: Sun 06 Jul 2025 22:11:42 +0000
ROA not before: Sun 06 Jul 2025 22:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Jul 2025 13:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:cb:8c:3c:e6:68:da:d9:66:fb:5a:2f:7d:2c:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 6 22:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a279f89620e6ed7e031f83e17a17a6010201f906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:8f:0f:a3:5a:6f:8f:79:8c:05:d0:17:50:
18:d1:a3:60:32:d5:8a:cd:0e:de:79:2e:a0:e5:2c:
fa:06:c1:04:10:aa:eb:f2:0f:5f:5b:61:35:2d:9d:
8d:6d:31:19:e2:e7:21:de:b2:30:60:4a:2a:02:8c:
26:83:80:7b:5a:29:03:ae:6c:1d:c8:d5:46:4c:e7:
fc:8b:11:5e:a0:25:c1:38:2c:db:25:51:5d:89:df:
22:e4:97:7e:0a:9a:d7:7d:55:a2:e9:19:dc:e6:47:
f8:fa:7d:c5:56:29:54:66:7c:ef:d7:4d:c2:71:f4:
85:af:49:fc:2a:dc:3c:07:24:33:d5:a3:34:6b:ca:
25:f9:d2:c6:e3:0c:b9:65:3e:d8:e2:15:09:0f:dc:
73:66:f2:aa:dd:3c:cf:3a:a2:c1:fe:4d:d1:21:a1:
d8:14:33:34:b4:26:40:0b:24:b6:40:28:bd:b3:c2:
b0:6e:4f:63:73:ef:1b:cd:09:b1:32:67:60:8b:40:
81:5b:8f:7c:4f:78:9e:e0:fd:ae:e6:4b:37:4c:15:
94:69:bf:15:45:69:95:a2:ec:9c:ef:2e:92:dd:bd:
a2:ff:9c:56:1a:66:1d:59:41:f6:2a:dc:71:4f:4b:
0d:37:41:12:df:65:58:e3:2e:3e:20:01:59:36:46:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:F8:96:20:E6:ED:7E:03:1F:83:E1:7A:17:A6:01:02:01:F9:06
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/onn4liDm7X4DH4PhehemAQIB-QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.112.0/23
95.81.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:07:51:d9:33:44:9a:8d:cb:0a:f7:f0:c5:76:ec:83:fe:e3:
ee:a1:c1:a3:53:96:44:cf:00:e3:0e:eb:e1:c5:cc:3c:b8:19:
e3:c1:3a:69:54:39:28:c5:f1:fd:7d:88:b6:15:c3:b8:3e:d7:
96:db:a1:4e:f8:6e:19:b6:5b:d1:2f:dd:c5:d1:13:45:e8:22:
78:ca:2f:d2:f2:9c:ab:8e:c6:bc:f1:d0:ae:47:98:91:94:a8:
c2:1c:bc:cb:34:ff:ff:32:c1:b9:ff:a3:d6:20:17:bc:33:4d:
49:28:f8:a1:e7:bb:6b:7d:1c:c5:b8:57:b3:30:33:3e:9b:ec:
b7:71:22:04:bb:32:7d:9d:99:c4:9d:9b:fe:86:d5:9b:d9:56:
51:2d:08:29:41:f2:62:23:39:8b:cb:d2:dd:46:8c:4f:8a:a8:
ee:97:ed:4a:1b:bc:5f:12:9f:57:f1:9c:ec:a9:fa:1b:41:1a:
c5:d1:ab:5e:3d:42:3c:f5:62:1b:ae:83:fd:bf:45:c3:91:1e:
f4:8a:b9:b2:32:9a:7e:4a:e7:65:37:50:aa:5d:b3:18:53:5b:
5f:e8:09:5b:9a:db:95:01:38:6d:69:f1:bc:e6:8c:9a:c3:01:
e8:43:b0:ba:f0:34:0d:15:95:76:9c:78:44:7f:7c:cb:8a:e3:
87:4b:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:16:20 2025 by rpki-client