Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/SYOXu6FU9xxjnRBssjjcvdtiAZc.roa
File: SYOXu6FU9xxjnRBssjjcvdtiAZc.roa (raw, json)
Hash identifier: eD5LCXYr3/bgswOTMT3vPw2JeOg9V1lZa1JGvTTuke8=
Subject key identifier: 49:83:97:BB:A1:54:F7:1C:63:9D:10:6C:B2:38:DC:BD:DB:62:01:97
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019735DE1D30AB1DFB92FB76AB85B117DA58
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/SYOXu6FU9xxjnRBssjjcvdtiAZc.roa
Signing time: Tue 03 Jun 2025 12:57:18 +0000
ROA not before: Tue 03 Jun 2025 12:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207903
IP address blocks: 45.81.168.0/24 maxlen: 24
185.88.64.0/22 maxlen: 22
185.88.64.0/24 maxlen: 24
185.88.65.0/24 maxlen: 24
185.88.66.0/24 maxlen: 25
185.88.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:de:1d:30:ab:1d:fb:92:fb:76:ab:85:b1:17:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jun 3 12:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=498397bba154f71c639d106cb238dcbddb620197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:87:65:22:70:9d:53:ad:c9:87:28:d8:6d:
31:b5:9c:32:4f:ea:6a:65:9e:d0:9f:fa:a2:10:45:
bb:bc:64:68:ad:5c:bc:d7:11:d2:e1:fb:86:d1:cf:
e4:45:82:f2:56:9c:21:fe:c9:6d:67:d1:c5:40:6f:
18:de:4d:95:43:b7:0f:51:ec:b8:3f:fd:bc:54:2b:
84:fa:d4:43:0e:0c:08:8b:e6:ae:2a:c2:bd:6b:63:
0a:03:6f:f7:10:05:c1:96:e5:b2:55:be:c2:ef:de:
81:a9:a6:fc:d4:0b:ee:ac:00:f9:40:18:bb:f8:67:
70:3f:4b:97:f3:6f:5f:32:97:54:a3:a6:7a:90:2b:
c7:fd:bf:a0:f4:ba:cf:e5:0a:18:b0:a1:b1:3d:de:
2c:1b:dc:55:d9:3d:04:f4:95:7d:64:be:5d:98:06:
99:6d:b1:0a:76:09:be:71:38:6f:83:35:b1:05:4e:
3f:7e:b1:12:60:7e:23:1f:ca:65:bf:ed:ad:92:89:
f0:19:56:a0:02:c1:e4:d4:66:ca:80:a6:8b:e8:cb:
ce:bc:7c:46:09:a5:4d:42:99:80:ca:4e:12:63:de:
db:e6:67:a7:70:76:7c:18:6f:2a:89:ec:90:36:44:
24:5e:94:cf:03:9e:94:44:8b:f7:69:7a:92:ab:57:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:97:BB:A1:54:F7:1C:63:9D:10:6C:B2:38:DC:BD:DB:62:01:97
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/SYOXu6FU9xxjnRBssjjcvdtiAZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.168.0/24
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a4:ea:96:3c:c4:42:60:3b:de:e6:16:2d:21:ae:65:96:4f:
91:e2:50:f3:a8:77:d5:7f:36:81:b0:ab:21:ed:ad:f7:c2:80:
89:f0:9b:6a:84:3b:e6:5c:74:56:c9:b2:65:d5:5f:5b:fd:28:
a3:dd:2c:f7:9f:57:80:77:a5:75:20:cd:05:e2:dd:8f:1f:03:
f6:d6:6d:d2:95:5c:f6:2a:bf:ce:55:f2:d6:ad:b4:42:81:cd:
fd:4b:2a:21:98:ae:13:67:3d:56:2d:35:24:79:64:d6:87:be:
97:ab:3d:1c:17:4c:f1:24:18:35:3c:cc:4f:fd:19:54:15:a2:
8e:6e:2c:42:8b:10:a6:96:97:f4:10:2d:4a:48:40:b1:61:08:
9f:3c:c5:57:43:4e:56:c0:e4:43:8e:82:5d:70:d2:43:dd:3b:
85:04:db:1d:c9:92:4b:69:ed:2c:52:92:d4:51:01:4c:60:91:
09:85:53:47:22:5f:1e:38:e4:e0:47:78:df:a8:96:8f:35:78:
cc:63:d6:e2:b1:5f:39:0d:5e:74:b8:3a:59:02:41:0d:1a:1c:
3a:64:f5:76:c7:79:55:9f:6a:21:65:fe:dd:1b:ac:77:d5:e4:
5b:77:38:8a:25:d3:2a:4d:88:d7:db:28:2b:ed:0a:52:ae:04:
0a:03:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:39:58 2025 by rpki-client