Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0mHXGWdoPyXRWc39wZ5uKVo0MNk.roa
File: 0mHXGWdoPyXRWc39wZ5uKVo0MNk.roa (raw, json)
Hash identifier: A8g/+/Ag/l+c3CEY2QBs8mzuTP5YOp/r/13mqKBCf3k=
Subject key identifier: D2:61:D7:19:67:68:3F:25:D1:59:CD:FD:C1:9E:6E:29:5A:34:30:D9
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0196C4778A34CAF267772D7D4C6F27A80F9F
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0mHXGWdoPyXRWc39wZ5uKVo0MNk.roa
Signing time: Mon 12 May 2025 12:28:10 +0000
ROA not before: Mon 12 May 2025 12:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208969
IP address blocks: 45.151.96.0/23 maxlen: 24
94.137.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:77:8a:34:ca:f2:67:77:2d:7d:4c:6f:27:a8:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 12 12:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d261d71967683f25d159cdfdc19e6e295a3430d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:8a:89:bf:5c:08:13:e4:18:29:70:db:c0:
85:c9:68:c5:55:58:4b:36:ff:37:76:b2:3f:3a:2d:
53:19:2a:74:3a:04:af:00:97:4a:bf:ce:9a:1b:4f:
5a:2e:67:8e:a9:04:36:54:d7:91:0d:37:68:71:15:
70:86:aa:6b:a3:ab:38:c5:b9:e7:1a:70:36:5a:6d:
f1:01:66:1d:0b:5e:39:ae:0b:63:70:be:d1:20:7b:
8b:b9:4e:65:b4:09:88:01:8d:f0:83:24:e8:78:b3:
a6:3c:18:ea:59:f3:2c:24:c8:b5:0c:4a:89:77:c6:
15:c2:6e:89:5f:f4:22:59:15:6d:4c:31:27:53:bc:
2a:87:9c:5e:dd:b7:9a:1c:d7:d2:47:15:72:49:86:
df:84:e7:86:5d:e5:8c:d3:e4:5a:8f:f3:c1:c2:4a:
29:e3:65:1e:29:a8:db:d4:b2:61:3d:37:8d:85:64:
eb:7c:57:39:45:b2:17:58:33:77:dd:5e:c1:23:9c:
87:d2:75:2b:d9:79:95:ec:64:6a:e5:4b:e1:46:4a:
1d:b6:f9:24:66:35:77:ae:83:d3:6a:ae:0a:e7:68:
a1:a2:44:9c:50:15:47:23:4d:be:52:07:8c:67:15:
03:53:16:e9:ce:cc:85:b7:8f:8d:54:ae:13:a8:ac:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:D7:19:67:68:3F:25:D1:59:CD:FD:C1:9E:6E:29:5A:34:30:D9
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0mHXGWdoPyXRWc39wZ5uKVo0MNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/23
94.137.90.0/23
Signature Algorithm: sha256WithRSAEncryption
07:58:40:11:ac:86:69:e5:4a:76:6f:c8:22:0d:14:e7:7d:63:
22:3c:bd:81:f0:21:8b:02:94:62:a0:bc:1c:79:78:9b:60:69:
80:5f:63:3a:95:3f:d7:ae:51:67:db:5d:94:fc:52:a1:46:c7:
94:bd:c0:e7:23:bb:98:0d:ac:1d:98:10:2e:c2:b6:d0:62:dd:
aa:ae:7f:12:2d:e7:5c:14:36:f2:bb:03:da:10:b9:70:0a:41:
f1:b5:72:b0:52:35:b8:a4:d5:dd:a4:9a:5b:b6:5a:78:5d:0b:
c2:34:e3:2a:36:fe:77:ae:88:af:89:bd:f1:6c:3f:1f:d7:c8:
60:46:bf:27:4b:1b:59:44:a9:e8:bd:7b:4b:79:ed:69:0c:ea:
00:47:48:61:11:0b:59:0c:5a:85:2f:4a:09:a3:3e:b4:69:f9:
21:21:e3:c8:af:db:90:10:05:f6:5a:52:da:fc:ff:11:fb:ad:
e4:15:8a:dd:97:ba:26:3d:b2:33:fd:d8:ae:09:7d:88:a8:06:
84:aa:4c:fd:12:a4:8e:60:22:4b:a9:6f:56:15:e0:f1:9b:cf:
c0:4c:87:f2:19:f1:9e:b1:38:51:f3:2a:dd:06:2e:a2:a0:80:
98:41:64:f2:da:f2:d3:aa:63:46:34:b2:6e:02:1c:63:11:6a:
29:92:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:33 2025 by rpki-client