Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Ei_S4n4IQX4QYA0sT41_XaixzjQ.roa
File: Ei_S4n4IQX4QYA0sT41_XaixzjQ.roa (raw, json)
Hash identifier: ZwT2oCe7JeinvZnOWjmFLWv/6zFU7pzThP0d63a/YiE=
Subject key identifier: 12:2F:D2:E2:7E:08:41:7E:10:60:0D:2C:4F:8D:7F:5D:A8:B1:CE:34
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0198266B5D882F0A753AC08FB7D916C3F06A
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Ei_S4n4IQX4QYA0sT41_XaixzjQ.roa
Signing time: Sun 20 Jul 2025 06:00:27 +0000
ROA not before: Sun 20 Jul 2025 06:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203466
IP address blocks: 188.208.197.0/24 maxlen: 24
188.214.194.0/24 maxlen: 24
213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Jul 2025 13:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:6b:5d:88:2f:0a:75:3a:c0:8f:b7:d9:16:c3:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 20 06:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=122fd2e27e08417e10600d2c4f8d7f5da8b1ce34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:d7:11:ad:e4:9d:1d:99:69:7f:1e:1f:3f:
ff:a9:61:d7:7c:bf:d8:d6:c5:5f:4d:73:8c:86:5a:
a4:73:88:a0:12:b9:60:03:29:23:cb:7b:52:61:03:
31:51:b9:e0:36:a7:6f:df:4e:03:33:49:ba:51:7e:
7a:c0:52:00:c1:1e:92:73:98:fe:dc:1d:14:a8:b4:
6e:b9:79:68:66:a2:95:01:87:f3:34:c0:ae:4f:aa:
4a:84:a4:07:53:7d:fa:03:96:6e:7d:f3:f4:58:36:
23:1d:f1:0f:37:45:ec:f4:f3:e5:8c:a3:dd:60:f7:
91:3d:93:f2:be:9d:c5:2a:de:91:b1:04:2a:27:82:
90:36:67:04:93:20:59:d6:87:23:98:e4:8e:ed:82:
b3:ad:bf:cd:d1:22:07:cf:21:60:ed:80:ee:e2:23:
74:0c:32:a9:57:4a:62:34:d7:73:55:fb:9d:d0:47:
7d:64:e5:ba:13:93:39:e3:16:17:09:0b:5f:6f:41:
9a:3c:85:d2:c2:fa:fd:d3:53:2b:17:bf:d4:db:32:
67:f0:b5:33:36:2b:30:09:2e:a8:50:8a:82:7d:02:
b1:bd:a7:31:f0:68:74:fd:34:d8:f5:71:7a:1e:0c:
8f:24:3c:cf:13:1c:1d:32:88:2c:c8:4d:2b:a4:1c:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:D2:E2:7E:08:41:7E:10:60:0D:2C:4F:8D:7F:5D:A8:B1:CE:34
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Ei_S4n4IQX4QYA0sT41_XaixzjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.197.0/24
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
1e:85:41:38:41:0f:c4:23:61:6a:b6:cd:97:bf:94:e5:d7:d9:
88:ce:07:50:0e:1e:59:f1:f3:a2:71:8a:d5:dc:59:24:65:78:
74:44:44:c8:51:d9:0f:c1:f4:96:94:bb:8e:f2:ec:7f:76:26:
90:56:72:e2:34:20:49:6e:72:36:36:8d:58:1d:0a:fc:b6:6a:
48:12:86:03:1e:5c:2a:73:17:49:a1:ed:bc:68:13:ff:c6:72:
fa:62:c8:70:3b:f8:1e:fd:d5:b9:c5:ca:78:19:38:af:86:5d:
b3:57:51:60:72:3f:07:68:4c:c0:e5:ec:d7:8d:63:5d:7b:fa:
ee:ef:ce:cb:c0:98:3a:59:9d:4b:39:9c:95:11:27:45:f4:6d:
f7:c1:7b:a0:99:4a:fa:ba:d8:c1:25:e5:ad:3e:68:50:f9:3f:
5e:30:f6:c5:62:5d:6d:66:aa:a3:c1:ec:7e:e9:73:c5:e7:ac:
8c:d9:91:2e:74:99:8b:75:67:f5:83:e6:62:e1:7d:a3:b2:87:
01:e9:9e:74:dd:07:77:de:e4:65:1f:e9:6d:3e:67:c4:e1:85:
f5:aa:89:4a:c7:02:d3:93:b5:9e:f8:fa:e1:ef:53:c3:fd:8b:
57:2f:fa:03:bf:8c:90:0e:82:4a:ac:2e:90:87:87:a6:4c:0b:
02:4d:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:30:39 2025 by rpki-client