Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/LAEUhPKHFEBR5xCFz09Go838dhI.roa
File: LAEUhPKHFEBR5xCFz09Go838dhI.roa (raw, json)
Hash identifier: 64lbVLss/j3Fg1D4/S/n7W0FKZ4K+a1r7FryEIBPHxc=
Subject key identifier: 2C:01:14:84:F2:87:14:40:51:E7:10:85:CF:4F:46:A3:CD:FC:76:12
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 0196ECBE349CA45B2A05E1FC1E085EC21ED1
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/LAEUhPKHFEBR5xCFz09Go838dhI.roa
Signing time: Tue 20 May 2025 08:10:10 +0000
ROA not before: Tue 20 May 2025 08:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203376
IP address blocks: 185.136.200.0/22 maxlen: 22
185.136.200.0/24 maxlen: 24
2a06:ffc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Jun 2025 14:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:be:34:9c:a4:5b:2a:05:e1:fc:1e:08:5e:c2:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: May 20 08:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c011484f287144051e71085cf4f46a3cdfc7612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:6f:63:a4:1f:21:35:62:f6:e2:4a:99:10:
01:70:12:93:2e:d9:91:90:1f:d3:f9:44:15:c3:cd:
6b:d2:b3:d8:67:97:6d:2b:3b:23:8a:08:da:ad:cb:
fe:54:45:f5:18:95:40:35:4c:cb:9c:85:80:fb:db:
87:79:87:4f:7e:c6:77:98:f2:1a:27:a3:42:4d:f1:
bc:52:3f:b7:9b:79:bc:04:78:d8:66:04:c9:59:22:
59:d3:58:f4:32:af:41:6a:f9:49:a4:58:98:b2:15:
c2:b2:43:27:df:bd:91:61:76:68:57:56:0d:da:c5:
66:64:e9:09:93:63:cd:83:16:bb:49:ad:01:72:25:
83:9a:f8:69:02:06:54:91:86:1e:5e:bc:29:d6:6c:
7c:17:8c:af:e8:69:aa:13:e5:b8:c7:eb:8a:2b:23:
2a:b1:1a:dc:8b:06:b5:6a:e8:5a:6c:e5:21:79:08:
f0:b2:c4:e2:7e:73:03:cd:89:7e:4b:04:c3:9f:0f:
a7:71:8d:32:bd:34:32:76:3d:44:10:2f:77:95:3f:
9f:73:92:94:38:4d:7e:2e:88:3a:f8:60:86:5c:e9:
2f:22:9a:68:d4:74:f8:b0:bf:c6:80:9b:c5:61:0b:
12:d6:43:76:95:bc:ba:7b:0f:93:70:2d:f0:79:46:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:14:84:F2:87:14:40:51:E7:10:85:CF:4F:46:A3:CD:FC:76:12
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/LAEUhPKHFEBR5xCFz09Go838dhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.200.0/22
IPv6:
2a06:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
22:c1:ad:d6:72:1a:35:67:cb:01:f8:e2:d8:64:aa:0e:f4:31:
c7:1b:b3:1d:24:be:22:60:cd:16:15:a5:05:0a:03:68:11:f7:
4c:b6:0e:73:c2:53:41:59:01:22:c4:0a:7c:47:68:3b:16:d6:
7b:42:0c:f2:30:56:03:63:a1:89:44:92:0a:a1:d1:24:e4:69:
0f:e2:1b:b7:1f:05:41:95:56:f6:94:67:e6:4d:c0:37:d7:cc:
af:a1:36:8a:18:02:18:a6:22:d4:d1:e1:77:4f:fb:e9:c4:00:
d4:29:bb:a8:35:f8:36:dd:08:51:0d:ec:0e:5a:ad:3e:65:6c:
2e:23:27:d8:95:3b:39:94:b4:13:c7:b4:40:25:30:74:43:24:
80:c9:ba:99:03:3a:31:d9:2c:84:93:b5:3e:aa:90:ad:70:c5:
95:c7:21:cc:a4:12:1c:eb:14:30:9d:ce:6f:1e:8c:22:9f:4c:
0c:7a:85:58:bc:1a:36:63:62:ca:bf:8a:1f:0e:36:d7:7e:d6:
23:29:8c:a4:57:9b:51:e3:a8:90:d1:c6:03:49:f9:22:3e:c1:
24:34:a0:ec:21:07:95:0f:46:6f:fc:fb:cf:00:01:f6:79:26:
5c:3e:8e:0c:24:99:6b:1c:ac:ab:ec:11:f1:7f:c3:0a:84:87:
67:46:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:11 2025 by rpki-client