Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa
File: EO474zAdmdSk1kISNQmC53ZAYVA.roa (raw, json)
Hash identifier: j8zmSbHQfCt3O525Wbdfyq0qjmxJLlyaEpp0SUMCcZ0=
Subject key identifier: 10:EE:3B:E3:30:1D:99:D4:A4:D6:42:12:35:09:82:E7:76:40:61:50
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0196E501022BAB70DB6A7E5234EE03F008E5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa
Signing time: Sun 18 May 2025 20:06:10 +0000
ROA not before: Sun 18 May 2025 20:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 10:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e5:01:02:2b:ab:70:db:6a:7e:52:34:ee:03:f0:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 18 20:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ee3be3301d99d4a4d64212350982e776406150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:3f:49:08:ef:28:a7:a5:01:e5:ac:5e:98:
11:f7:e3:ab:cd:c9:34:2d:f2:4a:b1:7d:d7:7a:ed:
f0:c1:58:e1:8e:78:b2:a1:ce:9c:61:f4:95:b8:98:
e4:12:30:89:46:08:f9:15:9f:aa:cc:c4:05:cc:f1:
bd:90:ff:64:86:c0:8e:ac:b6:79:94:89:2b:96:b7:
ec:73:f4:7a:a9:56:12:49:08:2b:41:96:f5:1d:e3:
a1:39:99:46:27:1b:71:df:86:db:14:42:5e:91:de:
39:ec:86:5a:5b:08:77:cc:f4:a0:f6:16:c6:c7:59:
42:5d:88:01:07:81:d1:66:5d:7e:f7:5b:f3:4c:07:
70:2f:bc:db:4f:48:f4:47:88:b1:2a:2e:32:e1:21:
49:36:e4:7d:0c:f2:eb:63:a5:eb:8d:8f:65:17:e1:
9b:53:dc:3a:fc:1a:5c:8d:44:6e:53:6c:97:74:08:
0e:49:9c:41:16:8b:89:6f:fd:4f:ba:e5:8c:8f:f7:
a3:84:84:b2:a7:5f:c5:78:5e:bf:d9:33:50:43:54:
77:0f:22:2a:1d:f0:24:3f:b3:9f:47:1d:0e:89:34:
33:0f:a7:9e:ca:76:df:82:c7:64:01:a8:27:54:49:
9d:6e:cf:26:a1:60:f4:cd:47:c6:c7:ec:e6:55:e6:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:3B:E3:30:1D:99:D4:A4:D6:42:12:35:09:82:E7:76:40:61:50
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7c:b1:6a:14:4b:28:f9:50:d2:fb:c5:c4:b4:46:f8:b3:76:
02:11:2e:57:fd:6f:80:ea:fe:b5:93:34:b6:c1:8d:fc:e7:63:
c0:17:a7:64:a3:11:d7:a7:b4:d9:c8:65:07:f4:eb:02:e1:f2:
29:20:11:81:8f:86:a6:8b:37:c1:86:d2:34:a9:5f:bd:6c:04:
9a:9e:fd:2d:d1:25:24:b5:31:99:67:ea:14:38:7f:09:6e:85:
1d:4e:af:62:4a:a5:92:b5:e6:7d:89:55:33:10:4e:c2:3f:f1:
3d:87:27:c0:be:4d:13:44:e2:47:09:3d:c3:48:28:b3:18:17:
9e:8c:b1:4f:28:07:19:87:2d:41:74:d2:54:23:e9:d0:4f:28:
46:5a:6b:c9:e2:ef:d3:26:1e:b1:d7:33:53:23:c9:13:24:5a:
0b:96:21:17:b0:cc:87:15:60:d2:67:24:29:c8:91:fe:96:c3:
98:87:34:ec:f7:80:53:f5:bf:db:ba:8e:cf:e6:63:4e:e5:83:
b1:c5:45:b2:bf:4d:f4:19:02:d3:60:b6:2d:19:40:92:4f:26:
05:98:c4:51:fa:e2:ec:1d:24:3b:03:8a:13:b9:5a:8a:9f:42:
f7:13:e4:14:b2:6f:23:5c:dd:56:0c:46:8a:d9:45:8d:ab:d0:
03:ee:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:44:24 2025 by rpki-client