Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/CBASwoEBW5KV82N3ALbWiuEL4VA.roa
File: CBASwoEBW5KV82N3ALbWiuEL4VA.roa (raw, json)
Hash identifier: 6U6wF3AHWGiceHByeAmJF5ZTh+w2ZMxOoPGMZs84Fkg=
Subject key identifier: 08:10:12:C2:81:01:5B:92:95:F3:63:77:00:B6:D6:8A:E1:0B:E1:50
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0197CFFA631EDFCCAF7C9A5A32151DF774D4
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/CBASwoEBW5KV82N3ALbWiuEL4VA.roa
Signing time: Thu 03 Jul 2025 11:09:42 +0000
ROA not before: Thu 03 Jul 2025 11:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 95.128.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 19:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:fa:63:1e:df:cc:af:7c:9a:5a:32:15:1d:f7:74:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jul 3 11:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=081012c281015b9295f3637700b6d68ae10be150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:95:44:40:08:b2:3b:e4:48:b0:0f:78:69:
27:1b:17:b3:0b:06:09:3c:60:b3:05:e4:8f:26:12:
bd:bb:9c:83:fd:96:9f:b6:d9:6a:b6:c2:67:f2:14:
09:89:45:3d:31:ef:8a:28:6d:83:24:f5:0c:b2:6c:
cb:56:bd:ae:cf:5e:46:16:6b:45:06:cf:04:5a:ce:
41:83:3b:14:29:6e:95:66:0c:fb:d8:07:53:8d:a4:
e7:c1:f3:a1:eb:f4:89:50:e8:df:3e:cf:5a:48:43:
ed:00:b9:0d:25:20:61:03:d8:8f:f7:f7:c7:81:4f:
c2:b2:35:9f:82:ad:ad:b6:dc:67:3d:cc:7d:99:8a:
b7:73:34:5b:61:74:53:6a:39:64:25:0a:5b:cc:67:
4f:1a:21:e6:3f:a5:a5:ac:3c:01:c2:22:6b:75:23:
52:e7:76:4c:6c:40:3e:b9:8a:97:12:d6:67:a4:a5:
40:af:03:47:2f:00:49:cb:fa:c0:7f:37:97:59:e3:
f6:72:ae:80:58:3b:6c:99:47:42:d1:bb:2c:44:ec:
c4:e7:e2:e0:86:95:d7:39:af:f0:e8:cd:8f:b2:69:
0f:f4:ad:d6:86:47:9a:39:71:e4:37:25:cd:fa:13:
ca:30:4a:3a:28:4f:36:5b:76:16:7f:28:1a:0b:f2:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:12:C2:81:01:5B:92:95:F3:63:77:00:B6:D6:8A:E1:0B:E1:50
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/CBASwoEBW5KV82N3ALbWiuEL4VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.198.0/24
Signature Algorithm: sha256WithRSAEncryption
64:13:ed:26:a2:db:2c:a0:6a:01:a1:eb:2e:a7:3f:84:e0:b1:
ae:d8:34:06:19:8e:3e:62:04:2e:95:9b:94:bf:cd:86:8b:b9:
bb:2f:54:e7:1b:0c:d6:7c:8e:e4:a1:62:1e:76:1a:c4:df:34:
89:7c:09:84:9f:18:5d:19:a0:35:bc:d9:81:ca:04:4b:28:bf:
5e:f2:08:e4:c2:7d:d9:9e:c3:be:9f:39:ff:76:ee:6e:44:45:
bd:e6:c9:d5:42:21:41:d2:d8:8e:43:35:f9:c3:40:77:23:fe:
f9:a6:e7:86:22:04:0d:12:76:12:96:5d:b4:ff:cf:a4:03:ac:
34:1c:48:71:17:30:b0:66:e0:fd:09:8d:ce:bb:7a:ec:a7:7d:
4a:ff:2a:88:43:3a:f5:96:31:5f:ee:4e:a3:b7:43:6d:10:8a:
e3:87:5a:b2:75:65:23:a0:83:1c:66:10:f0:99:86:a8:17:9a:
46:e2:2a:97:9a:0e:4b:88:59:4d:da:e3:c8:81:89:a0:c8:4c:
2c:9c:ba:eb:26:e5:e8:bd:b1:f6:5a:fa:d2:a9:bc:c4:a9:e0:
7a:ea:b5:45:b3:9a:65:6c:fa:c6:09:27:04:70:2d:6d:91:c0:
e4:a0:bc:46:3d:5e:f7:7f:38:35:35:33:cf:ca:ad:72:c7:66:
13:9c:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:44:26 2025 by rpki-client