Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/fqE5kTqPHxtHtyiUn9fpsp5PUks.roa
File: fqE5kTqPHxtHtyiUn9fpsp5PUks.roa (raw, json)
Hash identifier: sYqp4nnKogb4JHdcB28jAFDl4RsWjSYsrLqio8nRG2o=
Subject key identifier: 7E:A1:39:91:3A:8F:1F:1B:47:B7:28:94:9F:D7:E9:B2:9E:4F:52:4B
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0196C5CD0856820DCF0A8CCB2D21145A041A
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/fqE5kTqPHxtHtyiUn9fpsp5PUks.roa
Signing time: Mon 12 May 2025 18:41:10 +0000
ROA not before: Mon 12 May 2025 18:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58325
IP address blocks: 212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.184.0/22 maxlen: 22
212.68.184.0/24 maxlen: 24
212.68.185.0/24 maxlen: 24
212.68.186.0/24 maxlen: 24
212.68.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 09:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:cd:08:56:82:0d:cf:0a:8c:cb:2d:21:14:5a:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: May 12 18:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea139913a8f1f1b47b728949fd7e9b29e4f524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:03:b4:07:53:d8:0c:d3:47:b4:e9:c8:bb:
7b:1b:fb:b0:73:da:fe:41:bc:ba:99:dd:d0:00:05:
1b:ff:24:fd:07:80:9f:e2:d1:b7:b3:fe:bb:51:f5:
6d:58:31:d7:b4:92:79:96:c1:ac:a2:d6:5a:01:bd:
4b:fa:be:48:17:ff:f6:22:93:56:d1:4d:d4:1b:d4:
b2:7b:30:91:e4:d5:f7:ae:19:e1:b6:3c:76:c9:ad:
65:1d:ed:38:0c:02:c2:f5:f6:e3:ea:a4:e9:78:cc:
92:c6:fd:28:43:61:01:70:50:d5:ba:d3:d2:61:6a:
9c:3f:ff:8e:19:0b:74:b6:53:5b:8d:2f:82:79:19:
20:c8:1a:75:98:dd:5b:19:70:5c:7e:94:29:09:d4:
98:fb:3e:e1:bd:ef:2d:b6:7c:c6:ac:41:e5:34:84:
72:65:07:95:0c:ad:af:4f:f9:dc:4d:b2:e6:2f:be:
7b:d5:8f:96:c8:60:b6:1a:40:c5:7b:af:6e:36:62:
8c:0d:90:dc:bc:1d:21:4c:af:70:47:7d:d4:96:a8:
dd:75:f2:5c:15:0b:2b:29:2b:04:45:16:db:63:5f:
21:ef:02:50:61:47:70:88:03:6d:be:e7:92:44:e5:
3a:66:36:6a:f1:e8:24:bf:b4:87:b3:7b:c4:82:2e:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:39:91:3A:8F:1F:1B:47:B7:28:94:9F:D7:E9:B2:9E:4F:52:4B
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/fqE5kTqPHxtHtyiUn9fpsp5PUks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.179.255
212.68.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:3e:46:c8:79:af:c8:ee:06:1b:0c:c3:17:2d:e3:4c:65:40:
c1:38:11:94:b7:a5:03:cb:d7:6f:34:3a:28:2c:84:4f:c4:70:
38:91:c6:f7:d7:ef:63:e6:2b:83:ef:e3:c2:3b:a0:1c:61:d0:
b0:a2:b0:b8:50:64:9a:ad:be:67:cb:e3:6b:a1:64:95:3f:5b:
64:e7:13:e8:bd:d3:30:b9:df:7c:5d:a3:30:3a:33:2b:e7:1d:
d7:ae:9d:02:45:ae:4f:12:af:ab:58:51:b5:be:ec:79:f2:fb:
5e:b5:a5:6e:29:fc:26:41:3b:61:0f:c8:3d:82:b5:46:ac:33:
59:89:1b:8e:2a:03:03:d0:3a:17:3d:55:81:30:69:b4:51:1d:
0e:f9:67:15:f4:e8:8a:fd:8e:a2:e8:55:26:b4:48:b5:d7:df:
92:b9:1b:c7:45:d9:99:9a:60:a9:bd:87:56:fb:ef:92:54:4e:
16:be:38:4b:16:17:b3:b3:f2:aa:17:85:94:0b:79:88:e8:17:
76:8f:f8:65:30:6e:fd:74:58:50:9c:04:27:c6:bd:f4:35:2d:
9a:eb:5e:99:66:c3:18:a9:69:1f:f6:f5:0f:f2:4a:b8:00:b8:
2d:ab:64:71:80:2c:02:8f:33:23:7f:02:8d:80:26:63:f9:f0:
d9:9b:69:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:43 2025 by rpki-client