Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/cqZuqfgK80rAOo9-MFmzoTufZOg.roa
File: cqZuqfgK80rAOo9-MFmzoTufZOg.roa (raw, json)
Hash identifier: Ea6iJK7rbGxH28R9fa6pL8Gcv68kfi2PHrJ09sZHijQ=
Subject key identifier: 72:A6:6E:A9:F8:0A:F3:4A:C0:3A:8F:7E:30:59:B3:A1:3B:9F:64:E8
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0196CF00AF0F1B9CD4918C49ED64D89C7FB7
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/cqZuqfgK80rAOo9-MFmzoTufZOg.roa
Signing time: Wed 14 May 2025 13:34:10 +0000
ROA not before: Wed 14 May 2025 13:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 10:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:00:af:0f:1b:9c:d4:91:8c:49:ed:64:d8:9c:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 14 13:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72a66ea9f80af34ac03a8f7e3059b3a13b9f64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:23:b3:96:5f:54:70:71:e4:e1:12:87:2d:
8a:29:47:bf:15:97:20:84:87:91:0f:a2:bb:f4:e6:
c2:ad:20:13:4b:1c:a5:43:c7:23:f8:85:73:e8:19:
1a:37:17:d4:96:f9:d2:3a:ec:3e:32:48:e8:a7:09:
e0:44:d0:eb:49:39:85:bf:05:6b:98:85:8a:0b:bb:
27:07:da:d2:58:f3:9d:a3:43:10:20:6b:dd:27:65:
1e:35:ce:4e:fa:fd:0c:92:11:63:de:64:1f:fa:f7:
44:f2:7d:e3:2f:a4:80:97:ff:5f:1c:47:03:47:ed:
1c:0a:73:66:fb:ca:37:50:05:c4:8c:f8:4f:d4:8f:
e2:68:81:96:c7:c0:ff:b5:1a:03:86:b3:db:6f:4a:
c9:4b:e2:62:b3:79:8e:4d:b3:d1:62:62:06:cf:25:
01:33:10:0b:97:91:8b:58:cd:f5:1d:f9:ed:7a:ec:
25:d2:08:7f:66:b5:c6:6c:79:d3:62:68:65:b3:40:
d6:2b:eb:32:01:a3:39:53:34:8b:f7:c4:f4:9c:23:
09:17:74:42:ab:ed:4a:35:c6:6d:37:58:4f:9a:09:
ad:64:77:8d:8a:de:45:35:ab:3d:7c:90:86:47:7e:
1e:93:56:77:d7:75:e5:64:cb:dd:ba:f5:84:8a:7d:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:6E:A9:F8:0A:F3:4A:C0:3A:8F:7E:30:59:B3:A1:3B:9F:64:E8
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/cqZuqfgK80rAOo9-MFmzoTufZOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:9a:e3:44:98:ba:65:fa:8c:ab:62:de:bb:ca:22:31:04:5f:
6e:53:75:ae:08:ba:58:79:37:c7:36:cb:0a:45:6e:59:a5:41:
1b:d5:30:70:05:f6:1d:cb:4a:52:1f:b9:6a:67:a3:25:36:2e:
fa:ba:ae:12:d4:db:c8:a8:08:0d:77:24:eb:63:84:2f:7c:86:
e5:4d:7f:92:c9:95:c6:f2:4a:b4:40:09:54:6f:5d:6d:27:c4:
57:c1:a5:54:e1:78:10:07:4b:59:54:cf:8a:a7:34:0e:d1:a3:
5c:23:78:32:50:76:96:49:50:e3:fd:91:ce:12:ac:ca:b9:83:
a9:30:01:12:35:34:df:4c:0d:ee:db:63:43:10:c2:cc:a1:4c:
cd:ee:aa:6d:61:20:b4:2c:09:9d:d6:ac:47:6e:81:34:c8:9f:
db:76:83:55:20:2f:22:fc:f3:fd:39:1f:04:7f:12:1d:2f:b8:
f5:64:cc:d1:9d:f5:29:9a:58:cd:b6:10:9f:e4:b0:5a:75:fe:
30:70:d0:30:10:07:16:7f:05:e2:9b:ca:8f:0a:ec:14:48:43:
1c:fb:dd:0a:c4:e2:1d:15:26:e3:ed:20:78:b0:e9:4f:47:45:
75:17:dc:3e:0e:d5:88:b5:4e:02:70:b3:dd:fc:4e:73:4e:3b:
55:20:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:57 2025 by rpki-client