Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQeXUlRXUHeq1_swjuaQ_GRqnH0.roa
File: kQeXUlRXUHeq1_swjuaQ_GRqnH0.roa (raw, json)
Hash identifier: 9toiU9vQPxAxPeqFU9bHmZ5KkfoUYfdZd9ng3cO2avY=
Subject key identifier: 91:07:97:52:54:57:50:77:AA:D7:FB:30:8E:E6:90:FC:64:6A:9C:7D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01971DA9779456AD1F01A2898FED73E046CF
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQeXUlRXUHeq1_swjuaQ_GRqnH0.roa
Signing time: Thu 29 May 2025 20:08:54 +0000
ROA not before: Thu 29 May 2025 20:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 109.248.220.0/23 maxlen: 24
109.248.228.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 03 Jun 2025 17:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:a9:77:94:56:ad:1f:01:a2:89:8f:ed:73:e0:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 29 20:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9107975254575077aad7fb308ee690fc646a9c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:18:5e:21:da:1d:69:64:61:3d:8f:a1:82:
44:38:0b:dd:3f:d4:61:15:b9:64:ad:73:6b:54:a3:
73:39:87:cd:c2:6c:29:ab:5e:32:1c:33:9e:80:13:
f2:f7:8a:fd:9e:95:9f:ca:75:a4:19:8b:74:7a:45:
11:c4:74:6d:ad:7a:f3:27:40:46:02:96:3b:95:18:
83:63:95:04:79:5e:a3:64:6c:5e:5a:dc:a9:cc:77:
bd:28:d9:0b:04:b3:ed:c0:9d:6b:de:6b:37:38:8c:
7f:cc:44:24:33:75:27:3a:a8:74:fa:33:48:fe:ef:
27:ca:76:82:fe:2b:b3:3a:50:36:1c:e5:f6:b7:21:
04:76:08:e4:ee:4a:57:d2:f6:02:ac:46:7e:28:cd:
03:bc:62:68:45:b6:ec:22:0a:57:34:11:89:8c:03:
a0:45:5f:24:11:38:da:0c:16:78:ef:9d:10:41:65:
e4:f9:d1:95:0e:b8:db:3d:5e:d7:57:3d:e3:9e:50:
2a:31:77:12:39:9c:03:00:b7:64:03:14:97:30:f0:
b8:e6:a0:b4:ca:eb:ea:82:e9:97:8b:04:c8:32:51:
c0:a7:24:ac:b4:17:9e:38:4b:37:29:d6:d9:8e:50:
17:26:02:ba:c5:9f:09:c0:10:50:76:db:6f:8e:d6:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:97:52:54:57:50:77:AA:D7:FB:30:8E:E6:90:FC:64:6A:9C:7D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQeXUlRXUHeq1_swjuaQ_GRqnH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.220.0/23
109.248.228.0/24
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
9c:7d:6c:b6:24:27:62:d4:86:dc:e5:8d:45:44:69:de:6a:84:
88:01:2d:91:3a:6b:a0:36:43:a2:47:1e:68:01:ae:f2:50:e9:
58:ff:99:ed:d4:af:d6:dc:40:f3:20:0d:83:32:41:48:37:8f:
80:04:90:46:b8:72:a4:51:c8:62:99:45:7e:e5:79:e7:66:53:
2e:06:9c:19:f8:02:f2:4e:f7:d6:0d:6d:45:68:71:4f:a7:80:
5d:ee:85:f1:4b:ec:4c:23:78:ed:da:53:46:fe:00:fc:09:59:
41:9a:b8:7e:92:41:dd:64:49:ec:96:52:3d:ec:b5:04:06:e4:
bd:56:ce:06:91:95:cf:a9:c9:8b:bb:62:4d:d9:ba:de:63:3b:
18:7b:b4:90:10:1a:3a:c2:a1:3b:a3:56:6c:5d:97:e5:ff:5a:
ce:4e:b2:a1:a3:19:dd:db:de:09:89:8f:05:cd:e5:b2:15:b3:
ac:00:a0:4d:7e:eb:15:6c:19:b6:ff:e4:4b:5d:bb:5c:42:43:
93:a5:8e:e8:97:4a:ea:92:b6:af:45:fd:24:85:da:19:33:d9:
f6:0c:86:c3:ee:1f:64:99:90:8f:13:7e:06:2d:f2:63:12:86:
cb:95:81:a5:a3:c5:58:23:69:7f:60:cb:29:b8:c2:a3:6e:b3:
01:24:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:13:34 2025 by rpki-client