Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/X_uncK-Yf7-e8AO8jEwE7XSE1Fo.roa
File: X_uncK-Yf7-e8AO8jEwE7XSE1Fo.roa (raw, json)
Hash identifier: GSu4/dIAIT4JfqvWTy4Jtn3nWq+jzIvOLw2pTZ84sx4=
Subject key identifier: 5F:FB:A7:70:AF:98:7F:BF:9E:F0:03:BC:8C:4C:04:ED:74:84:D4:5A
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0196AF47F4A56BACA8350F2915E505A46C3F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/X_uncK-Yf7-e8AO8jEwE7XSE1Fo.roa
Signing time: Thu 08 May 2025 09:44:10 +0000
ROA not before: Thu 08 May 2025 09:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 213.14.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 07:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:47:f4:a5:6b:ac:a8:35:0f:29:15:e5:05:a4:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: May 8 09:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ffba770af987fbf9ef003bc8c4c04ed7484d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:06:dc:1d:92:3c:f4:ee:0b:3c:2d:62:05:
43:ad:46:ee:34:96:ed:86:f6:34:54:af:70:5b:3f:
66:5b:5c:45:f6:35:59:24:ad:40:f5:e4:3f:6e:cd:
43:59:c1:25:44:3e:10:69:00:f8:a8:71:be:ae:03:
ff:25:18:00:2f:5e:c3:01:b2:36:88:ed:0b:59:b1:
b1:8c:83:68:6d:1d:15:07:e5:9f:67:27:14:72:04:
f9:be:1a:51:72:94:16:8f:12:ea:e3:1f:ac:a7:f0:
cf:55:3e:12:49:36:17:bf:90:00:fc:f7:9c:c6:d8:
13:39:e6:72:5a:dd:93:16:3c:eb:5e:cb:50:c5:4a:
da:64:e7:6e:cb:ac:f7:74:b2:ee:d1:a1:b7:36:c0:
4e:97:bf:05:5d:0a:fd:7e:92:c3:0a:66:37:17:23:
09:98:c5:89:37:8e:a2:65:81:24:19:af:5c:4f:e0:
28:a4:de:65:17:9a:a0:38:75:4b:88:70:66:af:6a:
ff:22:94:a7:36:84:d7:99:68:15:dc:11:1c:e6:e1:
58:39:ec:16:25:bc:70:4f:f8:83:cb:25:fd:0e:b9:
04:e8:df:09:46:ac:bd:45:b3:52:08:e6:e4:f1:eb:
73:ed:15:88:91:2e:43:44:b2:d3:d4:c0:ed:52:5d:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:A7:70:AF:98:7F:BF:9E:F0:03:BC:8C:4C:04:ED:74:84:D4:5A
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/X_uncK-Yf7-e8AO8jEwE7XSE1Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.224.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9a:90:50:01:67:54:da:a6:0e:4a:aa:5d:67:3b:5d:ba:f3:
5b:f3:b6:8c:92:85:ce:9a:50:ce:a9:73:7e:89:3f:39:43:1b:
bb:2e:34:74:ac:08:88:98:89:ae:50:32:4a:74:df:39:c8:bd:
71:c8:1b:7b:16:20:c3:85:32:22:ae:78:78:3f:f2:ea:25:f9:
59:1c:fb:1a:44:67:af:9f:e9:a3:44:5c:5c:40:e0:6c:45:83:
a7:68:96:f5:f2:39:96:66:40:d1:86:38:34:34:15:15:d5:da:
8a:ff:ea:13:a8:b5:e9:61:0d:d8:5a:cd:19:55:01:66:bf:3d:
a7:1b:0e:0f:7f:b0:e1:f5:92:47:79:b5:c2:1c:86:eb:a6:85:
e9:b4:17:93:03:eb:42:93:7a:37:ac:b6:02:9c:b4:5f:a4:e4:
1b:fa:43:8a:72:31:05:bb:fc:ad:af:78:5d:b6:6d:9c:90:09:
cd:4e:0b:77:8e:61:42:bd:c2:2e:52:a4:60:16:ab:f0:8d:d5:
96:25:b9:59:f9:1b:b4:05:16:db:47:66:75:dd:63:83:81:97:
97:d3:26:ad:5a:5d:1d:86:62:0d:88:c4:80:4b:61:44:a6:47:
93:a2:9d:3e:c2:30:0d:39:18:ee:0f:21:1a:85:39:1d:5b:75:
06:b7:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:37 2025 by rpki-client