Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IRiKoFvws8MwHKHHkw56sx1rLRw.roa
File: IRiKoFvws8MwHKHHkw56sx1rLRw.roa (raw, json)
Hash identifier: pyyLa8/fdIV9LN5EPYO8sfvpYRUDR8JqW7yFzi3ewAc=
Subject key identifier: 21:18:8A:A0:5B:F0:B3:C3:30:1C:A1:C7:93:0E:7A:B3:1D:6B:2D:1C
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01971058F6450F3981BD7AD7466D6989D864
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IRiKoFvws8MwHKHHkw56sx1rLRw.roa
Signing time: Tue 27 May 2025 06:05:54 +0000
ROA not before: Tue 27 May 2025 06:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 89.46.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 27 May 2025 09:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:58:f6:45:0f:39:81:bd:7a:d7:46:6d:69:89:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 27 06:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21188aa05bf0b3c3301ca1c7930e7ab31d6b2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:41:c0:33:ca:9e:a2:a0:77:09:31:43:94:
38:30:56:35:2e:c7:6d:96:56:6f:07:17:8b:08:3e:
1d:6f:bb:95:6e:95:d7:82:fa:a5:c4:46:f9:ac:5e:
11:0c:53:74:d3:ec:8e:fe:30:e3:b3:45:4d:e5:c8:
25:93:9e:75:82:c1:92:95:4c:d5:97:28:58:8a:12:
92:63:b3:cb:ba:2c:3e:09:60:1f:e5:dc:46:28:97:
6b:ef:1d:e9:b6:30:dc:29:42:49:1c:d9:9d:a6:05:
e1:f7:23:2d:5e:00:98:9b:a4:9e:a8:b8:fd:4d:48:
a3:b2:da:8d:da:20:71:37:52:3a:93:7e:04:2e:c9:
21:cd:2a:8a:6f:52:42:1a:0e:5b:e6:c5:f5:28:ec:
88:98:54:3e:04:40:3a:2f:4f:34:9e:11:9a:3b:68:
c5:1e:84:eb:79:a1:39:82:16:19:4d:0b:11:46:d7:
ba:c3:c0:33:66:3f:10:dd:40:a3:8d:62:db:58:7a:
ac:e2:97:fd:35:1d:64:d0:d5:28:3b:83:9e:5a:23:
a4:ba:b9:f4:ef:62:6c:35:06:7b:c6:f8:a4:64:88:
2e:cf:df:78:8d:1b:ce:c5:de:5b:7c:b6:f5:15:56:
c5:00:11:d6:0f:de:58:bf:63:aa:de:f9:a8:71:7a:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:8A:A0:5B:F0:B3:C3:30:1C:A1:C7:93:0E:7A:B3:1D:6B:2D:1C
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IRiKoFvws8MwHKHHkw56sx1rLRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
25:2d:8c:14:55:ed:4e:c5:ab:95:9e:11:0f:ac:78:ef:65:a3:
98:b3:d8:d7:a5:90:2f:a3:83:e8:b3:0c:b8:f2:bb:e0:3f:bf:
8f:32:30:79:53:4b:4d:94:92:3c:71:19:dc:d3:cb:d1:27:35:
37:54:15:75:ae:73:dc:2f:11:de:6f:a6:7c:66:7d:bc:db:dd:
8c:aa:52:c3:78:73:1f:6c:2e:1a:a3:c4:4d:37:49:6a:f6:93:
c0:c1:ba:e9:41:7b:1f:44:e6:68:5f:40:a3:05:9f:98:20:1c:
96:53:fc:7d:4a:3e:e5:1a:53:ac:94:9a:d9:40:15:4c:43:2e:
6f:ef:71:ad:55:4e:5b:a3:9c:58:c6:06:d1:55:56:6f:d1:65:
37:5a:07:c2:f7:00:a6:c5:0d:48:76:99:a8:a7:71:53:3c:34:
10:88:3a:c0:45:36:9a:07:49:7f:40:7c:5f:eb:4e:0d:df:bf:
4d:3f:cc:99:7a:ea:58:f0:e0:58:09:65:5c:8c:f0:fe:93:61:
a2:e1:29:f0:20:e6:1d:03:2e:81:5d:32:6a:76:28:05:f8:b4:
27:05:ab:a9:a9:55:72:f4:a5:62:cd:bf:ef:90:60:9c:95:86:
e4:f6:2d:89:34:62:a3:d4:2a:9e:47:10:8c:54:cb:8b:ad:96:
b0:28:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:12 2025 by rpki-client