Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xFyKl-eVrC504uX9YvMRJQyUJQE.roa
File: xFyKl-eVrC504uX9YvMRJQyUJQE.roa (raw, json)
Hash identifier: HFm39z/9zcUtDRQCnoS8FYNgjGarT1c5UZ6uhwt71oY=
Subject key identifier: C4:5C:8A:97:E7:95:AC:2E:74:E2:E5:FD:62:F3:11:25:0C:94:25:01
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0196E78933107A078A7342FBA85D5C4E1458
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xFyKl-eVrC504uX9YvMRJQyUJQE.roa
Signing time: Mon 19 May 2025 07:54:10 +0000
ROA not before: Mon 19 May 2025 07:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 91.243.88.0/22 maxlen: 22
193.93.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 May 2025 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:89:33:10:7a:07:8a:73:42:fb:a8:5d:5c:4e:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 19 07:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45c8a97e795ac2e74e2e5fd62f311250c942501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:81:17:5e:cc:5d:aa:41:d8:a0:a3:8f:4c:
e3:05:35:ae:6b:90:5f:ec:39:04:1a:af:f5:99:6b:
70:d3:d8:05:24:45:77:31:55:a8:0d:14:52:01:07:
f8:cb:30:25:83:c8:7d:26:42:31:47:b0:13:8a:70:
8b:08:38:65:ab:cf:50:91:cd:02:77:5a:58:44:6d:
9a:44:5b:99:06:89:6d:9b:ff:7e:ae:21:ba:ce:01:
fb:8c:e0:01:ec:ae:ff:9b:3c:60:ae:32:40:a4:33:
19:d1:c9:94:c8:64:4e:7a:f2:8f:ac:59:92:a3:5b:
f0:45:a4:01:1d:43:70:02:1f:0b:37:d3:3d:14:08:
9c:a9:03:22:0f:23:3e:01:1d:e0:1c:e6:41:81:03:
6e:81:03:a1:8c:4a:e1:8b:f6:0a:28:89:e1:e1:2a:
06:69:a7:d0:9c:06:94:6a:69:30:4f:0b:2d:7e:9d:
60:56:58:4b:8c:fd:07:c6:ac:59:83:58:a3:9a:be:
65:a3:0e:66:b3:e3:75:c9:f4:3c:a0:cf:57:54:2f:
51:4b:de:8b:e1:71:5a:c4:ce:5e:65:b2:b8:d6:57:
c2:8c:c8:3e:70:86:ec:88:ba:2e:77:b2:20:97:99:
66:f1:dd:71:d2:5a:b7:47:69:e6:a1:10:00:5d:26:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:8A:97:E7:95:AC:2E:74:E2:E5:FD:62:F3:11:25:0C:94:25:01
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xFyKl-eVrC504uX9YvMRJQyUJQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.88.0/22
193.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f0:b9:1e:0e:99:15:3b:f6:7a:5f:ef:1d:c5:1a:28:5c:d7:
63:f5:d5:48:1e:49:fb:3b:73:b2:20:3e:42:7e:3a:1b:6e:3c:
c3:01:be:1c:a6:a1:81:c4:a5:27:f9:6e:ed:88:02:14:a9:d6:
c2:58:99:56:33:20:51:c5:19:65:91:7e:7a:ea:5b:7f:6b:f4:
9a:a5:3b:42:8f:33:c1:25:1e:da:71:fd:26:ee:6c:98:09:84:
04:06:61:91:ba:24:5e:31:ff:aa:57:74:99:36:2b:dd:6a:a5:
66:5a:64:27:6c:98:18:c0:aa:6a:6b:c7:30:fb:ed:75:df:5d:
42:05:04:18:91:cf:37:f7:0c:b8:f8:4a:13:92:3e:a3:47:ea:
29:13:2c:e8:87:9a:ff:61:71:45:0f:f0:38:cd:37:9d:70:02:
c6:d9:6d:6f:f3:58:fb:d9:60:ba:5e:68:74:12:93:11:b8:75:
88:06:03:4b:43:b7:33:0a:1a:df:02:11:ad:61:a3:27:cf:59:
d8:f0:6f:9d:f6:93:e9:89:8b:e4:37:eb:09:dd:2a:11:7e:dc:
08:48:15:9d:87:0d:67:ea:9b:e3:67:2a:fc:f9:03:4e:1c:85:
a1:95:f6:bf:41:a4:91:fa:48:74:e5:4c:55:b3:ac:5b:ac:97:
46:d5:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:26 2025 by rpki-client