Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ve-dg9QBlucRi7lJuqZ1iBfzojI.roa
File: Ve-dg9QBlucRi7lJuqZ1iBfzojI.roa (raw, json)
Hash identifier: WfGdBFHtMWqnpU7w4INPGOD5BXlqJ0/0wXKll7t29/I=
Subject key identifier: 55:EF:9D:83:D4:01:96:E7:11:8B:B9:49:BA:A6:75:88:17:F3:A2:32
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0196B8B807F73BE6CEEDA76BACFE26BC9F97
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ve-dg9QBlucRi7lJuqZ1iBfzojI.roa
Signing time: Sat 10 May 2025 05:43:10 +0000
ROA not before: Sat 10 May 2025 05:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.62.253.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 14:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:b8:07:f7:3b:e6:ce:ed:a7:6b:ac:fe:26:bc:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 10 05:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55ef9d83d40196e7118bb949baa6758817f3a232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:1f:b4:fa:01:2c:d4:57:23:e3:c6:5b:07:
a4:f0:7b:72:da:f8:bb:6e:5d:53:80:43:37:42:4c:
56:f6:3a:fb:26:53:c1:0a:63:60:2e:12:23:8c:83:
df:63:cb:f8:f4:2d:4a:db:fa:6a:d3:37:d2:a1:6e:
1c:9c:ae:0a:2e:ee:40:c6:e7:fe:39:91:8e:90:b2:
0a:92:2d:86:ca:20:98:cf:ed:25:67:72:90:01:c1:
30:7b:d3:aa:68:62:0d:a0:fc:a2:c2:b2:87:7e:20:
01:db:d1:57:5e:45:95:81:97:0e:70:cd:c5:a7:d1:
c7:ef:3d:15:6e:8b:8e:a2:2e:f0:a1:c5:e5:48:03:
32:c2:61:6d:3d:61:10:11:86:ad:e4:18:5e:4d:dd:
cb:4a:45:22:af:2c:7e:88:0d:f5:27:af:bb:60:c8:
4f:ff:a3:9d:04:10:d4:ed:35:e5:c1:c0:bd:92:42:
7e:19:19:cb:3e:33:9d:69:16:89:7b:67:43:be:3b:
c2:89:63:02:cb:df:3d:d5:70:6c:85:f7:d2:6f:c6:
51:b3:f1:04:2a:2c:fa:c5:fa:a1:b4:ed:85:84:52:
49:13:d6:cf:be:35:a5:c4:76:6b:b0:3d:ba:98:cf:
a4:97:1e:3f:1e:b9:a2:66:eb:64:c2:bb:8a:d4:ab:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:9D:83:D4:01:96:E7:11:8B:B9:49:BA:A6:75:88:17:F3:A2:32
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ve-dg9QBlucRi7lJuqZ1iBfzojI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.253.0/24
185.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d1:e0:8e:3c:48:6e:64:91:99:0c:c9:f1:73:0c:ee:18:c5:
3e:53:c8:64:48:d9:1b:75:01:6a:f6:92:7e:42:c4:d3:dd:ce:
95:97:8f:5d:31:ce:90:07:17:99:47:f0:d5:f6:01:15:a1:71:
8f:76:07:bb:ad:8d:88:fb:40:6e:55:21:dd:e9:2f:1f:7d:8d:
e4:c8:39:98:b6:b2:5e:c9:79:59:e3:2e:15:25:b8:2c:ad:1b:
4c:27:46:23:e1:41:45:90:11:e3:29:34:23:de:d0:bd:ea:70:
ff:20:71:71:24:a8:99:a4:83:f7:25:76:7c:b3:96:d5:a9:8e:
5a:d6:38:38:5a:2b:2f:01:8d:51:01:9d:23:4d:e7:f1:f8:12:
45:97:6c:b7:95:e7:4e:37:9e:ae:ab:3b:42:5f:28:17:7a:b0:
ea:88:9e:4f:6b:48:00:c3:84:52:36:f9:9f:37:fb:e7:ff:1f:
3a:5e:65:ce:b8:e8:2d:fd:b3:99:42:34:d2:cd:27:8c:bf:4e:
a4:d2:37:3c:ef:7b:eb:2d:e8:56:30:89:ce:49:0b:d7:a3:ae:
84:cd:a3:dc:fc:10:16:c4:b5:f2:03:64:ae:f8:32:1e:73:e6:
b1:2d:79:28:d4:0a:fc:e2:71:4f:e4:5a:b3:e2:32:ef:cb:50:
c0:6a:52:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:45 2025 by rpki-client