Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/xGg3ADnVD0bKPqUI5smb9Cit9eM.roa
File: xGg3ADnVD0bKPqUI5smb9Cit9eM.roa (raw, json)
Hash identifier: Tpwzo6lG2alkn7HvymEUcj3Kaf32rDFvm4IikdgpE8c=
Subject key identifier: C4:68:37:00:39:D5:0F:46:CA:3E:A5:08:E6:C9:9B:F4:28:AD:F5:E3
Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial: 0197C2359B477DA7EB51B55CE637EA39BCBA
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/xGg3ADnVD0bKPqUI5smb9Cit9eM.roa
Signing time: Mon 30 Jun 2025 18:59:42 +0000
ROA not before: Mon 30 Jun 2025 18:59:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 95.128.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 14:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:35:9b:47:7d:a7:eb:51:b5:5c:e6:37:ea:39:bc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Validity
Not Before: Jun 30 18:59:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c468370039d50f46ca3ea508e6c99bf428adf5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:65:40:29:88:01:33:0a:4c:0a:3b:fa:8d:
cd:65:cc:cb:30:89:8a:b7:01:fc:4d:5f:34:91:ea:
88:f6:2e:7b:10:0c:23:02:bc:2b:21:55:cf:1f:7d:
c2:67:51:88:67:3a:ff:ef:a4:c4:7b:35:4d:7d:38:
59:ad:63:9f:d1:b3:98:97:8b:b1:c0:4e:08:2c:49:
33:72:e2:d3:9d:e8:9f:d7:3f:2e:82:6e:94:b3:e2:
dc:bc:37:d9:3f:80:1f:3e:42:d2:59:2f:ae:1f:4c:
8f:cb:20:45:22:79:57:fa:0e:a0:14:ef:78:ca:ab:
40:f4:92:6d:3f:9e:ca:1a:37:af:ca:9c:25:b0:0a:
71:ab:e5:20:6a:0d:b1:91:8e:6c:95:27:6a:db:10:
01:1f:1c:93:f0:bf:60:e8:34:85:e3:cf:69:3e:4d:
99:b2:0c:18:df:23:5b:53:1d:07:b1:4e:67:bc:dd:
5b:ba:4c:c4:ad:bb:9e:e1:78:0a:df:65:99:da:d3:
3b:51:78:f2:e7:65:be:03:ad:6e:10:da:68:12:37:
79:e7:6c:8f:db:b1:6d:5b:9d:20:1e:c6:97:bd:52:
3f:ac:65:62:bb:5d:62:ff:a2:25:ca:64:4b:1c:08:
dd:f4:a4:67:e1:4a:4d:47:07:7a:4f:0f:e5:53:68:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:37:00:39:D5:0F:46:CA:3E:A5:08:E6:C9:9B:F4:28:AD:F5:E3
X509v3 Authority Key Identifier:
keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/xGg3ADnVD0bKPqUI5smb9Cit9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:68:b4:56:02:f8:89:43:58:c9:92:3a:bc:04:a6:38:5f:02:
f1:00:46:a4:2e:2b:31:29:45:8a:7e:a5:3a:17:c6:34:ef:a5:
dd:11:29:6c:3e:cc:28:4d:00:9a:59:f6:79:3a:63:42:24:39:
be:60:18:30:ca:25:c3:a2:c3:24:17:2c:57:fc:21:6d:c4:44:
eb:c5:a9:d5:93:9d:c1:a0:5a:ed:66:f5:01:9c:ee:84:8b:20:
62:b2:1e:23:a4:02:0d:9a:26:78:5a:e2:93:d0:59:cc:1e:37:
8a:b2:1d:90:c1:d3:cf:a7:6e:13:ad:66:10:62:2a:c5:48:38:
2a:d4:4a:20:f6:cc:3b:cb:02:d9:e7:cb:7d:96:be:b8:f0:9d:
65:61:49:2f:9f:46:14:a0:0d:fd:29:73:a2:c3:7a:c9:0f:63:
d3:18:18:df:f4:03:13:ae:3a:15:46:40:c4:54:98:34:c4:05:
ef:8e:fe:15:e9:a1:34:56:a4:3b:c2:86:81:f6:33:1a:91:d5:
1a:ef:db:f9:62:da:62:2c:05:9c:ff:99:ef:91:71:e7:24:bf:
7e:a2:85:c2:2f:20:53:d1:f0:14:90:f2:bc:1b:f9:e4:30:c2:
78:84:28:99:fc:d7:83:90:49:e2:35:77:f3:6f:6c:7f:71:97:
fa:b9:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 23:30:24 2025 by rpki-client