Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/kZ-KZ1s6W_CUwX9MSEDDwsa7UV8.roa
File: kZ-KZ1s6W_CUwX9MSEDDwsa7UV8.roa (raw, json)
Hash identifier: 9vlWFz2FrC9Ql/UwLJbGLfpbfY2joxvJPjYWKYrHtng=
Subject key identifier: 91:9F:8A:67:5B:3A:5B:F0:94:C1:7F:4C:48:40:C3:C2:C6:BB:51:5F
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 0196D7FD66F59CE736B01C811AB31CABEE4B
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/kZ-KZ1s6W_CUwX9MSEDDwsa7UV8.roa
Signing time: Fri 16 May 2025 07:27:10 +0000
ROA not before: Fri 16 May 2025 07:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203925
IP address blocks: 185.118.193.0/24 maxlen: 24
185.118.194.0/24 maxlen: 24
185.118.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 10:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:fd:66:f5:9c:e7:36:b0:1c:81:1a:b3:1c:ab:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: May 16 07:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919f8a675b3a5bf094c17f4c4840c3c2c6bb515f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:e6:eb:d8:9e:4a:06:b8:cd:da:7a:32:17:
bd:d2:72:3c:f0:61:7f:0e:39:7b:a7:38:ad:b8:8f:
00:7a:ec:f7:86:02:a4:01:2f:39:21:11:72:6f:16:
1e:18:2a:36:fc:f7:8e:2f:45:09:2a:ef:d0:39:2a:
0d:ee:9f:06:42:4b:ff:94:e7:75:14:fe:ff:0e:37:
c9:8d:ff:e0:2b:67:c4:01:f1:c1:21:29:2b:1e:6c:
eb:ec:34:47:8d:fe:f2:09:eb:bf:0a:3f:50:0c:33:
9c:35:1f:36:1a:be:8a:9c:b1:8f:ca:bc:66:69:a4:
de:e2:51:67:fd:a6:d2:0c:fb:cf:d4:2b:4a:2e:e8:
05:c4:49:99:cc:72:3a:f0:c0:7e:00:62:c4:36:ae:
4e:d8:0c:a2:d7:99:87:21:6e:be:b6:3f:75:a7:ff:
b3:6e:94:8d:a9:40:6b:53:0d:0b:60:88:6e:c6:a5:
95:6a:a0:2c:5a:82:3e:06:a4:4c:d7:d0:eb:c4:ba:
31:27:ab:52:42:65:13:cc:71:3f:b2:a6:4e:9f:4f:
2e:de:2b:31:16:fc:ea:f0:0c:a8:05:10:76:25:67:
2a:3e:eb:27:11:02:d5:78:0f:dd:50:22:76:83:c7:
80:ba:2d:87:49:2d:74:c4:81:8f:a9:17:64:dd:a3:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:8A:67:5B:3A:5B:F0:94:C1:7F:4C:48:40:C3:C2:C6:BB:51:5F
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/kZ-KZ1s6W_CUwX9MSEDDwsa7UV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.193.0-185.118.195.255
Signature Algorithm: sha256WithRSAEncryption
72:29:24:87:12:af:39:c0:1f:60:d7:d3:7d:78:62:21:d1:ca:
41:71:6f:1d:81:b2:c7:9c:51:2d:4b:a7:06:6f:2c:ff:28:45:
25:e6:36:54:23:b2:21:85:b3:8c:1f:c6:96:3b:91:0a:bf:7e:
e4:88:88:ee:08:7e:90:79:c4:77:d8:97:13:d9:ae:04:90:79:
47:8a:e5:50:7d:03:21:d8:20:13:1d:9e:e6:5f:d5:ff:1a:f8:
67:47:77:32:52:0d:7a:1a:76:d2:ec:87:4d:c6:dc:ec:7d:c5:
c2:53:62:61:0e:7d:4e:66:d3:61:96:0a:ba:19:21:cb:cd:21:
ca:10:90:1d:c5:c2:d7:9b:5a:dc:5f:6b:9e:4a:9c:01:ad:1c:
8c:43:ef:d9:27:f8:11:98:fd:13:dd:f9:1f:15:d5:84:ff:49:
1d:d3:91:ef:60:59:a9:e7:f0:d0:37:78:63:00:02:53:0a:45:
50:d7:6a:3c:d2:2a:f2:9e:28:a4:61:37:5b:43:a5:75:ee:10:
cc:c3:07:0e:f2:55:cb:ba:37:d8:59:9c:8f:9a:a7:c9:8e:21:
7e:42:bd:df:d9:a3:42:58:c7:57:ab:e7:43:04:19:22:32:b9:
1a:d0:8b:83:80:b6:63:9b:7c:67:01:65:da:96:bd:a0:12:17:
5a:8e:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:30:23 2025 by rpki-client