Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/9jaOVBkN9jk3b7RwnFo08KPjF2g.roa
File: 9jaOVBkN9jk3b7RwnFo08KPjF2g.roa (raw, json)
Hash identifier: T2kpA0EV/48B00uhRvqPTaoxNDkkRw1cFqsZfOSlbEk=
Subject key identifier: F6:36:8E:54:19:0D:F6:39:37:6F:B4:70:9C:5A:34:F0:A3:E3:17:68
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0196B1013D65D62BF8C414AE3B8B277FDC4C
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/9jaOVBkN9jk3b7RwnFo08KPjF2g.roa
Signing time: Thu 08 May 2025 17:46:10 +0000
ROA not before: Thu 08 May 2025 17:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.110.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 19:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:01:3d:65:d6:2b:f8:c4:14:ae:3b:8b:27:7f:dc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: May 8 17:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6368e54190df639376fb4709c5a34f0a3e31768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:a7:a0:6c:42:99:7b:c4:c3:5f:eb:6f:56:
d7:f7:ed:c0:3f:a8:22:e3:7b:12:e1:f4:63:ab:fa:
2d:b3:78:37:77:65:36:62:9f:9d:4e:f5:43:d8:59:
89:ea:8b:fa:4a:b5:a8:ca:ac:9d:52:e2:57:95:13:
5b:b0:6b:a7:32:ac:26:37:4d:b3:65:4e:3f:38:6e:
d7:f8:65:26:05:4b:49:17:cd:55:3b:d2:f3:56:ba:
79:4e:9d:fe:af:09:9b:6f:d9:be:d6:04:2f:70:b9:
d0:e0:4f:1f:1e:75:7e:d7:29:1d:30:f1:b1:80:9f:
19:66:98:1e:ca:3f:3d:a0:1f:2b:b6:f3:ca:d1:f3:
fb:05:a3:64:02:c4:90:52:fc:92:bd:c6:4b:86:86:
0d:22:cc:ed:74:a8:0f:63:d2:1f:f1:55:89:cc:c4:
dc:4f:dc:4a:aa:cc:79:d9:f8:e8:51:76:36:7c:bf:
67:e4:19:a1:4e:46:3e:3b:c7:f4:54:cf:4e:ed:f2:
70:9b:ad:dd:f5:cb:54:de:5b:32:9c:f0:27:50:e4:
cc:13:74:98:68:89:10:c8:d8:bd:31:61:c7:25:b7:
56:67:73:69:b2:c6:c8:ba:89:31:04:9d:84:82:b3:
29:95:c6:59:03:97:44:9d:2d:fa:6c:bf:cf:81:0e:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:8E:54:19:0D:F6:39:37:6F:B4:70:9C:5A:34:F0:A3:E3:17:68
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/9jaOVBkN9jk3b7RwnFo08KPjF2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/22
Signature Algorithm: sha256WithRSAEncryption
60:0b:cb:bf:88:58:05:87:ae:31:7b:f9:72:e7:4f:5d:47:b0:
88:b8:da:dc:b3:53:a5:af:01:89:98:95:9c:72:58:71:e7:e3:
6c:d6:87:18:21:8a:05:b1:63:43:c7:f6:e3:e0:65:bd:c9:e6:
89:92:c8:f3:ef:82:5e:0c:84:38:2c:f5:0c:ef:01:28:96:b9:
6d:7f:be:34:a9:71:c1:b4:89:c3:45:de:5a:8b:e3:bb:be:01:
54:1f:9d:30:f7:d9:fb:de:45:85:0f:88:e2:3d:b4:c5:85:98:
2b:ab:bb:7f:39:7d:3e:35:dc:2d:4a:44:0a:18:91:02:a2:c7:
66:06:98:a4:0f:14:a9:52:66:d7:e4:27:44:94:aa:c6:8f:df:
0b:26:b1:1a:41:db:07:72:6b:69:29:90:5e:7b:21:cb:e3:82:
5e:54:f7:2d:6a:6e:d2:a9:5e:26:8c:03:01:27:fa:e3:af:fa:
63:21:40:de:89:d8:59:af:3c:3d:19:ae:52:d3:f6:f7:e9:ef:
3e:f7:26:86:33:98:3f:5e:32:e9:46:f2:10:f1:28:cf:05:69:
5f:25:20:90:35:1e:8e:78:65:2d:5a:b2:88:5d:31:2e:a1:de:
db:1d:98:8c:e0:ca:27:cc:7d:56:35:36:86:7f:a9:a7:cb:3d:
ee:f6:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:37:38 2025 by rpki-client