Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/78cAt3rM0BgYmDpZNWDpvSP33bY.roa
File: 78cAt3rM0BgYmDpZNWDpvSP33bY.roa (raw, json)
Hash identifier: 87lb1eyu6aFQHAqVVq2Gb/RKQAg/YX2knnPnj25xjWI=
Subject key identifier: EF:C7:00:B7:7A:CC:D0:18:18:98:3A:59:35:60:E9:BD:23:F7:DD:B6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019727B1858EF7C564C5099079A157BD7F23
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/78cAt3rM0BgYmDpZNWDpvSP33bY.roa
Signing time: Sat 31 May 2025 18:53:54 +0000
ROA not before: Sat 31 May 2025 18:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:b1:85:8e:f7:c5:64:c5:09:90:79:a1:57:bd:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 31 18:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc700b77accd01818983a593560e9bd23f7ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:9b:20:2b:91:dc:2e:b6:31:38:1b:4a:db:
1d:ed:6c:f2:1d:06:9f:77:4f:c4:10:58:29:6a:23:
41:46:c3:a4:4b:90:89:24:e9:b1:4f:79:a3:84:11:
85:c7:07:cc:80:f9:24:20:7c:7b:c6:e6:fb:51:3d:
27:04:95:ef:e7:68:19:09:a7:06:9c:d9:f1:2f:f6:
72:d9:20:0f:39:f9:1d:79:62:05:04:75:77:de:bb:
1d:e9:c6:ef:43:d5:69:fb:8b:ad:a8:87:0d:d9:28:
5d:57:c3:19:44:db:6c:b4:98:00:d7:84:fa:e3:4e:
2a:dd:50:c1:66:9f:92:8c:22:e9:74:e9:e1:44:07:
a5:b3:37:d7:61:c8:0a:97:d2:23:44:95:55:df:22:
f6:e4:01:ae:86:6e:b8:72:7a:69:2f:8f:1f:b1:5a:
06:93:74:99:ba:9d:9a:d4:75:89:bb:66:e7:08:ae:
81:c3:2f:bf:87:dc:de:e3:17:81:b2:84:7b:d1:e7:
e5:29:01:72:f9:5d:66:6e:bb:f9:4c:96:01:ef:56:
57:d6:8e:ff:63:e9:b2:91:98:de:a0:76:d9:84:26:
82:20:14:41:41:3f:86:49:3e:73:99:5d:7e:95:44:
95:f0:e5:c2:fe:63:9e:db:41:bb:ee:4c:02:dc:b1:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:00:B7:7A:CC:D0:18:18:98:3A:59:35:60:E9:BD:23:F7:DD:B6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/78cAt3rM0BgYmDpZNWDpvSP33bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:38:a6:c0:05:d7:27:bb:66:be:bc:bd:a6:f9:12:f6:16:85:
a3:03:7f:ce:b0:50:31:9d:1f:a7:80:11:1f:bc:0a:77:51:97:
15:70:0c:9f:42:4b:d3:e1:f0:0f:df:e4:f8:d9:83:3e:30:3e:
90:0f:0a:2c:c6:c7:38:1c:5e:f5:42:7f:9d:d3:a3:d2:35:6d:
dd:86:fc:3c:00:fd:58:ce:59:4b:ae:f3:c3:e6:c2:fa:2f:68:
8b:68:d5:a0:d1:5c:aa:dd:10:a1:b2:eb:f0:b2:3c:07:09:0a:
76:75:7c:f0:c6:d9:bc:bc:b6:76:49:14:8e:94:bf:8c:37:af:
cd:3f:b3:6d:aa:7d:d0:92:ac:51:bc:e0:18:c9:25:ee:02:3f:
4c:ed:e5:3f:17:92:49:e0:87:e4:07:f6:7a:8e:d1:03:89:3f:
a4:4b:53:4f:0c:6b:6d:39:fe:4c:5d:95:4b:7b:44:61:dd:7c:
5d:be:68:73:bb:79:e1:7d:f2:01:68:a1:34:68:76:be:02:08:
4c:81:2f:ca:b8:44:3d:1f:80:7c:a3:0a:dc:d7:01:f7:68:ec:
65:b5:cd:30:c7:75:65:d3:6b:6b:6f:5d:18:b8:cf:7c:e3:77:
5a:f4:81:18:60:40:7e:da:94:fb:b0:c4:04:ff:8d:89:e6:71:
21:48:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:33 2025 by rpki-client