Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/50D8wz4jEvHoXKbd1akAyVnMS5A.roa
File: 50D8wz4jEvHoXKbd1akAyVnMS5A.roa (raw, json)
Hash identifier: kMnH1fqOqWDYaMeR0phf5+IOtjtPZxHixfEVda8oHWY=
Subject key identifier: E7:40:FC:C3:3E:23:12:F1:E8:5C:A6:DD:D5:A9:00:C9:59:CC:4B:90
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01987ADDBF25165C61A302B7BC8C09C7243F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/50D8wz4jEvHoXKbd1akAyVnMS5A.roa
Signing time: Tue 05 Aug 2025 15:33:29 +0000
ROA not before: Tue 05 Aug 2025 15:33:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Aug 2025 05:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:dd:bf:25:16:5c:61:a3:02:b7:bc:8c:09:c7:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 5 15:33:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e740fcc33e2312f1e85ca6ddd5a900c959cc4b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:71:87:34:01:83:59:19:9d:18:7c:9f:e9:
86:4f:07:44:68:a8:b4:dc:a6:77:6e:79:7d:fe:8b:
78:e4:84:82:d6:b6:0f:06:2e:38:6a:cb:1f:ea:11:
21:33:88:32:2a:85:dc:32:65:7e:74:69:9d:63:44:
91:79:5f:3a:91:03:c6:19:09:c1:6d:21:39:32:3c:
ed:42:9c:41:26:15:07:41:eb:91:d3:86:aa:5d:bc:
8d:f5:7d:a3:0c:50:60:f9:81:d0:3a:db:1b:26:00:
8d:a6:a2:78:62:97:55:04:e0:5b:87:a0:ee:4d:ee:
2e:c3:d3:f4:40:44:e9:dd:43:f7:87:98:2e:9d:73:
4e:fa:d4:cd:9d:d9:29:dc:83:f5:9d:1b:6b:0c:03:
08:36:2d:6a:9e:80:d0:92:dd:a5:0b:5d:69:67:30:
17:75:bb:b4:cd:fe:aa:0a:d9:80:66:00:a8:23:9b:
cd:02:e4:ed:fd:37:c1:4b:68:d4:5c:83:6d:e9:c7:
c7:3c:ab:92:fc:54:b4:c8:87:a9:48:38:d5:29:2f:
a3:e0:4d:1f:c0:1f:65:56:d9:46:29:8c:8f:66:4a:
50:8e:3a:d0:79:c4:f8:aa:8b:e4:f5:ce:91:5f:4d:
f8:b0:ba:7c:0d:2c:2f:62:21:b7:f0:01:a3:0a:f4:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:40:FC:C3:3E:23:12:F1:E8:5C:A6:DD:D5:A9:00:C9:59:CC:4B:90
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/50D8wz4jEvHoXKbd1akAyVnMS5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.181.175.0/24
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
Signature Algorithm: sha256WithRSAEncryption
34:64:62:d6:b6:a6:c1:71:69:96:52:44:bd:0d:53:e1:22:7d:
7d:b1:94:f9:02:4f:a2:54:aa:a0:4a:94:1d:12:5f:2b:3a:fb:
9f:49:ea:92:8a:cd:99:74:f3:4e:02:bc:50:35:82:26:22:e0:
02:01:0a:a8:59:ee:5e:2a:e0:ea:13:0b:7a:f9:9c:0f:af:be:
79:21:48:a0:37:04:5c:aa:f2:7e:ee:44:02:b9:80:7c:6f:4a:
71:79:b7:0d:af:a9:8b:84:6d:78:31:61:b0:0b:23:dc:12:fb:
2a:d9:1d:d5:95:1a:12:dc:5c:01:49:e1:be:76:71:3a:58:3d:
4b:42:12:50:4f:c4:ca:78:73:54:a9:a6:29:2b:80:0a:24:7f:
d1:39:1d:2f:6c:dc:87:d9:41:84:24:65:c0:9b:b9:4b:ad:ad:
9e:5b:db:3f:9b:63:0f:42:ed:50:6e:79:88:cd:04:ce:8f:39:
94:da:30:33:92:e0:59:e7:e2:25:52:c1:0b:c2:92:2d:74:ca:
e9:36:4d:86:8d:40:57:c8:01:33:68:be:15:85:9e:c9:91:dd:
02:59:d8:15:57:81:f9:b7:2e:e7:2b:23:10:1f:24:ff:3a:87:
39:07:59:f1:46:4f:89:5c:d7:9b:b0:3a:e3:77:d5:32:c4:98:
84:75:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:11 2025 by rpki-client