Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/jm9oOA6VyQ-uftU9zUVkX6bf8H0.roa
File: jm9oOA6VyQ-uftU9zUVkX6bf8H0.roa (raw, json)
Hash identifier: 41vhjAZfiURA6ESJQrQphMAz+SkxwvEv3bKiUrokHnM=
Subject key identifier: 8E:6F:68:38:0E:95:C9:0F:AE:7E:D5:3D:CD:45:64:5F:A6:DF:F0:7D
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019689F756C8E811EC2C0358A9D13C66E7E9
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/jm9oOA6VyQ-uftU9zUVkX6bf8H0.roa
Signing time: Thu 01 May 2025 03:50:10 +0000
ROA not before: Thu 01 May 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 24
93.175.45.0/24 maxlen: 24
93.175.47.0/24 maxlen: 24
93.175.57.0/24 maxlen: 24
93.175.58.0/24 maxlen: 24
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 48
2a0e:5b00:40f::/48 maxlen: 48
2a0e:5b00:411::/48 maxlen: 48
2a0e:5b00:412::/48 maxlen: 48
2a0e:5b00:419::/48 maxlen: 48
2a0e:5b00:41f::/48 maxlen: 48
2a0e:5b00:420::/48 maxlen: 48
2a0e:5b00:500::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 10:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:f7:56:c8:e8:11:ec:2c:03:58:a9:d1:3c:66:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: May 1 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6f68380e95c90fae7ed53dcd45645fa6dff07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:20:36:9d:06:ea:8f:7d:c2:b8:d5:c1:95:
19:4f:02:dc:58:87:1c:63:23:f0:90:83:1a:ce:ae:
1f:4b:72:af:b7:3b:66:af:5c:08:0c:6a:9f:b7:68:
4d:fd:1c:dc:8a:ba:6a:3a:4a:27:50:6c:63:f2:14:
51:c3:64:4d:09:55:3c:6e:e9:d8:23:d2:0e:e0:44:
38:9f:bd:aa:33:18:7e:79:a6:4b:17:d1:df:63:b4:
bc:db:05:56:32:b1:1f:90:5e:c3:36:f1:95:f9:ef:
d9:25:5c:bf:0a:7a:62:ce:76:af:77:6c:21:54:4e:
fd:cb:cd:30:4f:43:0e:d7:21:5f:4b:05:ed:7d:3a:
e7:ae:56:2a:2e:a4:ae:14:6f:7c:df:cc:3d:ff:d4:
fd:d2:44:d1:6d:69:a3:93:63:67:64:f3:25:72:71:
da:7d:03:23:d3:5d:72:77:17:90:63:8a:c3:5d:11:
a3:5d:69:ef:a5:3d:6b:c4:95:bb:9e:3d:a2:82:15:
22:93:72:1b:2d:5a:0c:ed:b7:39:5f:0a:83:01:db:
d4:4b:ed:4d:fe:df:b0:d0:87:5e:0e:59:cd:20:48:
fa:0a:31:e8:e4:50:7a:dc:aa:0b:0b:6c:20:d9:a5:
48:4f:96:ae:1f:cc:00:33:58:19:d1:32:8a:ee:fa:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6F:68:38:0E:95:C9:0F:AE:7E:D5:3D:CD:45:64:5F:A6:DF:F0:7D
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/jm9oOA6VyQ-uftU9zUVkX6bf8H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
15:df:bb:b7:75:6f:1f:1e:f6:8d:7f:07:0d:24:e3:05:69:fc:
2c:8c:9e:8f:e5:44:ec:3b:24:de:f9:2c:2c:0c:eb:0d:3b:ea:
85:5d:59:d7:5e:ef:3c:d2:0e:ba:f3:bc:8f:1d:29:c1:8e:82:
77:52:95:7b:84:dc:6e:eb:16:61:3e:24:20:4d:51:0f:7e:8c:
72:17:cd:ea:d1:76:b1:17:e2:07:66:0b:b8:79:dd:4c:98:fb:
f6:e5:43:1f:28:2f:05:28:93:f7:38:aa:a4:98:78:8a:8a:8e:
d1:7f:aa:b6:66:df:b4:00:e6:24:44:3e:02:0f:6a:a6:29:d0:
f1:f7:c5:12:46:a1:74:d5:93:ef:ff:c2:23:07:69:5c:62:7a:
f7:d7:9f:f7:6e:54:67:f7:58:fc:d6:e4:09:ff:0f:05:65:e4:
03:64:07:3a:f9:e2:db:10:cd:84:a9:ec:9f:90:80:e1:9e:15:
5f:91:88:72:f3:8b:96:9c:5e:8f:ec:c3:14:53:bf:7b:e0:63:
6a:f3:ea:d8:a5:4e:7b:97:a3:7f:5f:d5:ee:9c:84:65:e4:8a:
5b:e2:d9:f4:fb:af:2b:03:d8:6a:53:10:2c:22:ea:e7:bc:a5:
99:22:87:bf:64:e2:ea:63:4a:4c:3c:d3:bc:21:25:12:35:91:
71:04:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:56 2025 by rpki-client