Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7viCLe1Y9Nqrc0I57IyblPeJixA.roa
File: 7viCLe1Y9Nqrc0I57IyblPeJixA.roa (raw, json)
Hash identifier: CaVl3kWbQeGGiydAivqdXFTippcInjU78AwDYo4qHRU=
Subject key identifier: EE:F8:82:2D:ED:58:F4:DA:AB:73:42:39:EC:8C:9B:94:F7:89:8B:10
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019772304E90B349D4DF2FA543D5A6D9C0C1
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7viCLe1Y9Nqrc0I57IyblPeJixA.roa
Signing time: Sun 15 Jun 2025 06:04:17 +0000
ROA not before: Sun 15 Jun 2025 06:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.80.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 19:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:30:4e:90:b3:49:d4:df:2f:a5:43:d5:a6:d9:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 15 06:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef8822ded58f4daab734239ec8c9b94f7898b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:09:99:64:1f:0f:df:2b:99:33:70:9a:91:
b4:40:17:e1:6d:9a:f7:82:b9:fd:d7:97:17:44:ca:
91:a0:13:82:4f:ff:10:69:6a:22:93:a5:e7:e9:51:
f9:b1:b6:e8:fc:97:96:34:54:a3:05:ce:fd:a6:59:
4a:86:2b:64:9c:ac:9b:0d:10:8d:f4:2e:81:da:9d:
b0:58:79:e5:1d:03:a4:d5:fa:41:c9:c5:a4:09:93:
a2:3e:17:63:b0:bf:2b:60:40:1f:35:61:8d:eb:0a:
19:73:30:e0:e0:40:a1:f6:a2:8b:27:6b:c9:9c:8b:
f3:9d:13:3c:ba:57:27:ee:c5:b5:54:b8:27:77:fb:
3f:d8:f3:07:09:61:af:2e:60:eb:e6:0c:e5:eb:6c:
84:b6:9a:a6:6f:2b:ad:3e:07:1a:1b:38:54:5e:de:
d6:e3:4c:73:32:f2:f8:fb:46:13:44:5c:65:a3:88:
01:58:5a:12:20:47:ac:b1:3d:0e:61:dc:6b:a1:88:
9d:43:09:7b:d0:2d:c6:e0:47:7f:1e:cb:d7:54:79:
7b:39:49:75:83:cb:32:ad:97:23:64:22:2a:5a:5d:
75:e0:f8:f2:c2:44:ab:f5:2a:4f:3d:04:49:03:51:
95:26:93:d9:56:bd:a1:ac:61:21:cc:d8:50:7c:2f:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:82:2D:ED:58:F4:DA:AB:73:42:39:EC:8C:9B:94:F7:89:8B:10
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7viCLe1Y9Nqrc0I57IyblPeJixA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:95:fd:11:5e:27:5a:10:b3:c4:3e:74:01:3e:1a:9d:27:09:
ec:d7:97:28:13:78:88:c3:21:e9:a5:48:3a:30:1d:70:43:77:
64:1a:7e:33:a6:da:8d:56:21:f0:b9:6a:32:4b:d8:22:b2:36:
a1:42:0d:b0:fb:97:d8:76:e9:67:84:6c:8c:8e:10:4d:50:94:
bc:45:7e:5d:80:3d:be:ae:cc:ea:f5:97:65:0c:2a:99:08:0d:
c6:36:ad:b5:81:cb:d4:2a:57:2d:fe:c3:19:93:65:30:76:34:
7b:29:59:d4:61:56:d9:d8:c2:53:4e:f3:35:7c:e0:66:04:c1:
29:5f:58:9e:d7:ff:e1:11:72:ec:e9:e3:66:7a:52:08:7c:3b:
9d:e9:54:63:6b:e3:da:90:b9:54:81:b7:51:71:a4:e1:23:2c:
f1:e9:56:0f:e3:14:d5:0d:ef:8e:88:2a:a6:0e:1c:83:ba:34:
31:6a:67:43:21:cc:48:90:66:bb:d1:db:62:c7:96:dd:af:aa:
07:17:d4:88:63:ab:2a:cc:c6:56:6b:7c:61:82:c0:63:ed:b1:
11:37:7d:74:74:44:21:3c:b9:f9:df:71:3e:8e:29:32:2b:35:
fb:41:c2:7d:7f:97:95:ca:c8:f2:5a:4a:12:c5:af:e2:ee:f3:
4e:a1:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:50:15 2025 by rpki-client