Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/9Lqmfy6wHLKrfYhwIDvavnUW2-M.roa
File: 9Lqmfy6wHLKrfYhwIDvavnUW2-M.roa (raw, json)
Hash identifier: v2hMl83B6SUP+9qQxIL6U+Cg0HPHQSBVbZwnm/g0JP0=
Subject key identifier: F4:BA:A6:7F:2E:B0:1C:B2:AB:7D:88:70:20:3B:DA:BE:75:16:DB:E3
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019722ADF39D095779D55AB575BB79A3F3D4
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/9Lqmfy6wHLKrfYhwIDvavnUW2-M.roa
Signing time: Fri 30 May 2025 19:31:54 +0000
ROA not before: Fri 30 May 2025 19:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 91.197.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 21:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:ad:f3:9d:09:57:79:d5:5a:b5:75:bb:79:a3:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: May 30 19:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4baa67f2eb01cb2ab7d8870203bdabe7516dbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:98:2d:96:10:e6:82:54:01:bb:2d:ef:bb:
86:e7:27:c5:ba:67:2d:fb:14:49:fe:26:86:e3:b2:
8a:36:3a:2e:24:b0:6d:e8:45:cb:96:3c:bb:c7:fa:
b3:aa:f4:87:a5:fd:e3:84:8e:8a:39:74:3b:81:03:
b6:67:88:cf:fc:ec:1f:20:31:5c:f0:d2:31:c3:cc:
79:7b:c2:22:05:71:b6:46:c2:34:3a:11:7d:36:21:
b5:e0:b5:df:c8:4e:ed:93:37:ed:5c:50:c0:b7:5b:
bf:cf:c8:6a:11:9b:20:54:e6:b2:e3:8e:43:8b:04:
a3:80:34:a9:84:6b:86:4d:99:65:ab:9f:00:42:ab:
f9:f3:06:41:30:2b:df:b9:a3:3d:20:8f:34:90:ae:
28:ab:0e:52:b1:18:7b:3e:1b:40:d5:7b:67:13:58:
59:df:38:5a:0e:b3:69:b5:88:10:ca:7f:b1:c6:ea:
ca:19:66:7e:ac:c1:78:15:2b:54:70:91:ea:72:12:
ba:9e:a7:8a:f8:35:2c:39:60:9b:ba:69:62:a2:8e:
a9:fe:ea:10:ac:21:31:3c:fe:1a:fd:74:aa:6c:69:
4b:47:94:5b:20:4c:c0:fb:3e:ea:7e:44:ae:6f:3e:
20:22:f3:ca:3e:8a:df:08:5e:7c:00:b9:34:b7:8c:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:A6:7F:2E:B0:1C:B2:AB:7D:88:70:20:3B:DA:BE:75:16:DB:E3
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/9Lqmfy6wHLKrfYhwIDvavnUW2-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
Signature Algorithm: sha256WithRSAEncryption
12:88:66:a9:ce:a0:07:20:4e:21:c7:b5:9e:69:51:6f:fa:29:
e5:c2:d3:d3:47:40:24:a9:3e:74:d8:21:c3:66:71:5c:43:c8:
16:2f:eb:57:9b:8e:22:02:4a:fc:bc:2b:4c:d6:fd:bd:06:f1:
be:32:2a:f8:48:69:4b:c3:4b:00:e3:a3:e2:4b:e0:c6:92:48:
ac:7a:33:77:59:4c:72:ad:2b:9f:b1:9b:6e:b9:67:bf:04:34:
1e:84:1f:96:11:f9:99:8a:1b:7e:0d:f3:70:5f:f2:4a:63:fb:
4b:82:ea:ff:cf:f5:a9:43:17:89:cd:4a:5f:da:ad:58:a0:86:
7e:2b:33:f8:05:41:ea:b3:cd:83:03:c0:84:dc:d7:c3:0e:62:
d2:1f:f7:af:99:d5:d1:48:a3:a8:7a:ef:70:c2:6a:34:f1:c5:
79:cb:7e:3e:36:10:c1:52:3a:eb:79:19:86:6e:80:53:de:b3:
9c:40:39:5a:d8:1f:cf:8c:20:4a:ff:55:ea:bf:4a:14:c1:62:
ca:a8:46:ce:da:1d:c2:35:c5:08:40:01:b4:26:ee:27:78:47:
02:0d:0e:59:a8:e8:f3:92:58:fe:d2:cb:26:2b:2e:17:28:32:
4a:05:ef:ab:ad:81:74:fd:68:be:aa:ad:a7:09:98:44:5d:c3:
07:d4:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:51:01 2025 by rpki-client