Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1-xHkIlmRkXbJ7-YheHX7UGHmY-I.roa
File: 1-xHkIlmRkXbJ7-YheHX7UGHmY-I.roa (raw, json)
Hash identifier: ZvUGpBGwAR77XuT906CDOoP4Dg8oIMS+1frLx8xKTDM=
Subject key identifier: FB:11:E4:22:59:91:91:76:C9:EF:E6:21:78:75:FB:50:61:E6:63:E2
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0197CB81FBC017A2C0E3D78AD0F230DD08F8
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1-xHkIlmRkXbJ7-YheHX7UGHmY-I.roa
Signing time: Wed 02 Jul 2025 14:19:42 +0000
ROA not before: Wed 02 Jul 2025 14:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24703
IP address blocks: 91.210.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Jul 2025 10:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:81:fb:c0:17:a2:c0:e3:d7:8a:d0:f2:30:dd:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jul 2 14:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb11e42259919176c9efe6217875fb5061e663e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:3f:fb:5f:28:43:00:4c:37:a2:e6:49:06:
59:e3:56:b9:dd:1b:5f:aa:07:f1:97:66:a3:cc:24:
ab:72:4f:ae:65:ea:20:57:10:30:8b:f2:72:7a:13:
ba:b8:11:90:55:fb:5f:b3:a7:eb:15:47:00:fe:41:
b7:83:bf:42:8c:f6:10:b4:81:37:fb:ca:6b:e9:0c:
6d:dd:dd:22:19:1b:07:be:ea:25:e6:cd:d1:79:eb:
e8:93:8c:72:bb:1b:1e:2a:fb:3f:a0:6e:fe:59:36:
e2:5a:c6:e1:08:bd:17:b4:d5:93:1d:bd:ab:93:f0:
3a:de:42:e3:b7:d9:8f:59:2c:f7:38:89:ad:65:31:
b4:62:c8:ca:87:bf:6b:02:ca:c4:98:93:12:2b:be:
9c:f9:3c:ec:c9:7f:82:88:b5:33:9b:55:3c:a7:eb:
20:cc:50:18:ad:2d:2c:4d:1c:78:58:82:20:29:95:
4d:ca:38:8e:42:54:98:da:eb:73:38:85:d8:75:a5:
6e:72:70:b8:c0:bc:01:77:b0:ec:fe:d0:74:c9:d1:
59:5e:1a:3e:9a:bf:07:37:a7:ef:17:bc:41:c3:c4:
17:a2:59:28:72:e8:67:6d:e7:c0:4b:e4:90:d0:58:
87:e4:8d:0f:09:fb:ac:b4:ae:bd:83:77:b6:ea:e4:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:E4:22:59:91:91:76:C9:EF:E6:21:78:75:FB:50:61:E6:63:E2
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1-xHkIlmRkXbJ7-YheHX7UGHmY-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:81:f4:1d:7d:be:11:48:20:64:89:f5:66:d1:52:64:ae:6e:
80:d0:74:80:43:16:10:cd:7a:39:4f:8d:15:28:70:30:a5:94:
38:9f:fb:2f:02:01:70:79:01:83:5c:6f:11:0c:a2:8a:81:26:
c3:93:e9:c9:33:19:a9:ce:d9:c1:31:d9:2e:ef:9f:95:45:3c:
88:c7:c1:14:7e:79:5f:3c:08:43:45:52:82:32:5f:7d:e0:b3:
23:43:f5:8e:ee:ae:c2:f1:32:49:af:79:0c:cf:05:e4:dc:f4:
0c:d7:36:d7:da:a9:11:75:27:86:7d:41:e7:65:82:a6:9b:f0:
3c:6a:f1:d0:61:02:ba:e8:a1:6e:e5:12:7d:c9:05:a6:3c:b4:
a8:5f:18:be:92:e6:ec:1c:96:0c:49:0c:4d:56:5e:f7:46:54:
b0:db:86:02:8a:a7:14:d8:96:99:d1:56:6d:50:94:70:5b:a4:
20:71:38:df:b4:2d:f4:fb:b5:c5:12:b6:01:bd:19:c1:55:92:
84:0e:ba:b3:66:49:4c:77:c5:b0:ab:fe:e3:f5:c2:13:69:0b:
97:28:30:4e:ef:f3:0f:8f:b9:44:d5:e9:fa:7e:64:d6:49:fe:
23:09:54:b6:ed:52:74:a1:87:c2:e2:3c:a5:51:0d:7a:42:20:
14:5b:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:11 2025 by rpki-client