Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/AV5Ils70Eg8rHfs_8ZBM_h1czEk.roa
File: AV5Ils70Eg8rHfs_8ZBM_h1czEk.roa (raw, json)
Hash identifier: NbucBNYoytY/9yf79tJuzxSB6SQoTgHZv8NpnwPzdx8=
Subject key identifier: 01:5E:48:96:CE:F4:12:0F:2B:1D:FB:3F:F1:90:4C:FE:1D:5C:CC:49
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0196D45964B503E4AB3283D2AA9BCD82C254
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/AV5Ils70Eg8rHfs_8ZBM_h1czEk.roa
Signing time: Thu 15 May 2025 14:29:10 +0000
ROA not before: Thu 15 May 2025 14:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 109.122.196.0/22 maxlen: 22
185.102.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:59:64:b5:03:e4:ab:32:83:d2:aa:9b:cd:82:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: May 15 14:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015e4896cef4120f2b1dfb3ff1904cfe1d5ccc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:d3:70:af:2d:1e:ab:f0:63:e3:24:69:a0:
bc:35:94:1f:11:7e:75:57:a6:c6:8a:25:fb:dc:6e:
ae:94:d1:d3:ba:81:d3:01:12:94:88:71:03:de:7c:
97:85:9c:e9:f8:c7:05:a3:13:e3:7d:7e:69:79:41:
29:37:99:f0:27:41:1e:a4:07:f8:3b:b5:a0:46:3f:
b8:7b:93:a1:d6:3b:e9:42:ef:57:1d:6b:c9:fc:e0:
d4:6b:6c:32:b5:78:3c:aa:ca:e3:d6:cb:8b:f6:d7:
70:39:bf:75:ef:61:89:59:f6:5e:52:6b:40:0e:65:
cd:32:34:58:22:86:c8:7e:c9:3b:2e:bb:4b:bd:6d:
a8:46:59:a2:fd:a5:38:62:56:0a:c7:eb:c7:8e:fd:
41:28:2d:f7:03:76:ca:77:eb:1e:c8:95:5c:ed:6c:
65:3b:5a:2f:c2:93:a2:d7:30:3c:11:a5:b7:f4:88:
76:17:9b:ed:65:11:7a:2e:92:66:f8:2b:78:40:08:
dc:27:8d:fe:35:d3:e6:91:d9:10:4a:b6:21:75:5b:
70:d3:21:b2:30:a2:af:eb:df:16:ed:1c:ba:37:1e:
5b:4b:54:11:5e:59:fa:70:25:c7:2c:5d:3d:a5:c6:
e7:4e:05:1b:00:29:58:0c:2b:bb:53:ff:11:9a:e0:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:48:96:CE:F4:12:0F:2B:1D:FB:3F:F1:90:4C:FE:1D:5C:CC:49
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/AV5Ils70Eg8rHfs_8ZBM_h1czEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
185.102.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:96:7d:6a:40:f8:aa:ad:d5:66:eb:de:e0:d6:42:ad:01:
07:a2:48:c0:67:48:91:e5:8a:ec:bf:9b:9b:af:1d:81:03:1f:
31:22:f1:e0:e0:4a:a9:07:82:f5:e5:dc:86:cb:ae:96:a7:34:
2d:6b:a2:24:e2:fd:3d:a8:88:47:b3:a0:00:19:f9:61:2b:19:
b9:d0:a1:84:40:56:fe:75:a7:0c:70:87:55:1a:ab:91:b2:cd:
65:3f:ee:14:98:f7:39:93:85:b2:b0:cb:97:a6:08:85:18:5a:
4b:52:ae:27:51:8a:1f:bd:0c:a0:5c:1f:64:4c:08:25:64:19:
91:e9:36:d1:2e:1a:92:dd:33:d4:8c:97:91:79:c0:64:d1:16:
bc:ee:49:9e:1d:be:ca:58:cd:84:06:da:66:b4:02:a7:f4:18:
b8:da:c4:5b:02:00:28:08:e8:6e:02:85:6e:b1:fb:03:78:6d:
10:43:f5:76:94:25:a7:11:a6:7d:99:ba:62:d9:a6:54:4c:a9:
a6:97:06:4b:cd:36:0d:5c:e4:b0:70:ef:b7:5f:d7:f4:34:a5:
76:bb:68:a6:fa:23:e0:b7:71:43:43:4d:12:16:85:80:50:16:
2a:fc:0f:e0:58:69:75:d5:10:fd:17:06:13:63:dd:6d:b2:8c:
6a:34:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:28 2025 by rpki-client