Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/7RkDpuwKcRReRmilM6J7zHDA1SU.roa
File: 7RkDpuwKcRReRmilM6J7zHDA1SU.roa (raw, json)
Hash identifier: 1nsXXDxgS2KKKq/l1O1tz2KGZBZksnVdtTB8G/fRA8k=
Subject key identifier: ED:19:03:A6:EC:0A:71:14:5E:46:68:A5:33:A2:7B:CC:70:C0:D5:25
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019824D21A8DEE50E5A481B73626607D93C0
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/7RkDpuwKcRReRmilM6J7zHDA1SU.roa
Signing time: Sat 19 Jul 2025 22:33:25 +0000
ROA not before: Sat 19 Jul 2025 22:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203466
IP address blocks: 188.208.197.0/24 maxlen: 24
188.214.194.0/24 maxlen: 24
213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 05:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:d2:1a:8d:ee:50:e5:a4:81:b7:36:26:60:7d:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 19 22:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed1903a6ec0a71145e4668a533a27bcc70c0d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:5a:11:77:cf:5b:ea:91:7d:e8:8f:94:71:
79:0d:0e:d6:41:58:33:ab:de:4f:fe:a7:e8:99:d2:
a0:3d:46:55:07:86:40:c6:36:e8:d1:b7:a8:2d:16:
cb:24:bd:70:55:6e:af:9c:bf:55:01:9e:fe:fc:df:
90:84:1e:79:ce:3e:9b:45:55:ff:d0:60:e3:67:e0:
02:1d:84:4c:98:af:5f:85:04:b9:89:e9:eb:7b:3e:
67:b5:ca:94:d9:fc:61:9d:1f:d5:0a:d1:2f:d7:5b:
cf:42:31:c0:20:22:21:f2:d2:32:38:7c:c6:97:1f:
8f:b4:7e:d6:c7:2e:bc:a7:8f:a2:b5:2b:85:c9:f8:
bc:0d:c5:ae:77:50:de:ca:da:2e:c8:46:db:f6:d3:
e9:71:4d:3c:dc:c4:14:c1:ed:04:7b:e8:f2:ef:58:
4c:ee:16:78:71:43:12:a1:7b:42:92:77:50:dd:b9:
12:ec:fb:8a:a8:01:26:4e:99:0f:fc:cc:6f:be:be:
15:6c:be:13:e6:86:61:df:ea:e9:81:fa:b1:37:f7:
f5:cc:59:33:c2:38:ce:88:3b:89:a0:42:ab:50:ef:
d9:54:5f:c8:60:84:1a:3b:2c:a8:01:7f:d3:81:aa:
de:a2:e8:e8:75:31:f8:bd:85:5f:05:b6:41:4d:c9:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:19:03:A6:EC:0A:71:14:5E:46:68:A5:33:A2:7B:CC:70:C0:D5:25
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/7RkDpuwKcRReRmilM6J7zHDA1SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.197.0/24
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:d0:ae:d9:07:f4:fa:7d:c5:6a:de:a2:af:de:a9:16:2e:ab:
27:ee:58:f5:0f:a0:c4:47:97:d9:e8:37:8a:49:47:80:c4:0e:
9f:a2:9f:52:28:98:ea:80:10:40:29:dd:8f:84:f8:68:d6:e5:
c8:af:57:d8:70:6a:a3:97:6a:d4:6c:a0:59:95:fd:29:3e:d6:
53:df:a8:5b:22:ee:f3:3b:bd:23:e0:fb:68:09:e5:19:ab:3f:
12:49:fc:52:0f:ca:72:f6:7a:e9:c3:64:5b:b1:6a:79:1a:98:
5e:40:2b:db:fd:69:ab:e2:ed:7d:e9:45:89:15:aa:f8:6f:30:
46:4a:e2:b1:b1:c7:ad:5b:61:e5:37:f1:37:43:eb:b8:59:6c:
c0:cc:f8:c5:cb:13:d8:9f:e2:24:3c:09:35:79:37:f8:24:e0:
8c:62:fb:f2:9e:90:6b:d2:e3:ab:86:d7:55:91:27:ea:79:4b:
40:a9:d7:84:00:1d:41:da:31:ce:fb:3f:37:f7:b6:11:c2:74:
68:dd:fd:cd:95:ff:9d:8e:e8:33:58:8e:52:9e:b3:77:9e:81:
42:aa:27:27:47:fc:b5:ac:fe:90:71:22:f3:75:bf:f5:87:bf:
7e:2a:ea:9e:fa:ca:df:df:21:38:f3:1d:78:7d:37:b4:ae:79:
82:7c:25:2e
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZgk0hqN7lDlpIG3NiZgfZPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjUwNzE5MjIzMzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE5MDNhNmVjMGE3MTE0NWU0NjY4YTUzM2EyN2JjYzcwYzBkNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw1aEXfPW+qRfeiPlHF5DQ7WQVgz
q95P/qfomdKgPUZVB4ZAxjbo0beoLRbLJL1wVW6vnL9VAZ7+/N+QhB55zj6bRVX/
0GDjZ+ACHYRMmK9fhQS5ienrez5ntcqU2fxhnR/VCtEv11vPQjHAICIh8tIyOHzG
lx+PtH7Wxy68p4+itSuFyfi8DcWud1DeytouyEbb9tPpcU083MQUwe0Ee+jy71hM
7hZ4cUMSoXtCkndQ3bkS7PuKqAEmTpkP/Mxvvr4VbL4T5oZh3+rpgfqxN/f1zFkz
wjjOiDuJoEKrUO/ZVF/IYIQaOyyoAX/TgareoujodTH4vYVfBbZBTcnyYQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFO0ZA6bsCnEUXkZopTOie8xwwNUlMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xLzdSa0RwdXdLY1JSZVJtaWxNNko3ekhEQTFTVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBAC80MUD
BAC81sIDBADVhg0wDwQCAAIwCQMHACoG+UAAATANBgkqhkiG9w0BAQsFAAOCAQEA
J9Cu2Qf0+n3Fat6ir96pFi6rJ+5Y9Q+gxEeX2eg3iklHgMQOn6KfUiiY6oAQQCnd
j4T4aNblyK9X2HBqo5dq1GygWZX9KT7WU9+oWyLu8zu9I+D7aAnlGas/Ekn8Ug/K
cvZ66cNkW7FqeRqYXkAr2/1pq+LtfelFiRWq+G8wRkrisbHHrVth5TfxN0PruFls
wMz4xcsT2J/iJDwJNXk3+CTgjGL78p6Qa9Ljq4bXVZEn6nlLQKnXhAAdQdoxzvs/
N/e2EcJ0aN39zZX/nY7oM1iOUp6zd56BQqonJ0f8taz+kHEi83W/9Ye/firqnvrK
398hOPMdeH03tK55gnwlLg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 23:30:51 2025 by rpki-client