Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1SKk9xSvXy9KkTIud5o3-TZQUXw.roa
File: 1SKk9xSvXy9KkTIud5o3-TZQUXw.roa (raw, json)
Hash identifier: s65BAixnQ0oz12sa7YFOLrcc88L9Ck4tbRUzz5hZX4Q=
Subject key identifier: D5:22:A4:F7:14:AF:5F:2F:4A:91:32:2E:77:9A:37:F9:36:50:51:7C
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0196DA1F0F2193F10714601A8397C1C61767
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1SKk9xSvXy9KkTIud5o3-TZQUXw.roa
Signing time: Fri 16 May 2025 17:23:10 +0000
ROA not before: Fri 16 May 2025 17:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 80.64.18.0/24 maxlen: 24
185.39.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:1f:0f:21:93:f1:07:14:60:1a:83:97:c1:c6:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 16 17:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d522a4f714af5f2f4a91322e779a37f93650517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:8a:b8:f2:50:28:f7:19:d1:f3:5a:1c:97:
71:61:41:f3:13:d0:f7:47:6e:aa:75:10:9e:bd:9c:
b3:3a:b3:e8:2c:a4:9d:fc:96:69:3a:fa:16:80:a2:
aa:b8:79:99:e7:5d:c9:7f:29:ab:f3:a2:1f:a3:68:
62:2e:ef:06:80:8b:de:20:08:20:29:d7:fa:a9:0e:
8d:ca:dd:07:e3:31:39:8a:36:7a:ac:06:91:97:b3:
73:14:c3:a2:3b:ce:a9:00:09:b5:da:30:f9:5e:ce:
32:40:fe:eb:0c:0c:ec:fc:4f:42:2f:0d:f6:00:72:
0c:3a:61:aa:43:a9:bd:5f:7f:85:54:d3:c9:9e:16:
2e:aa:a2:87:96:47:f0:03:71:36:0e:2c:47:58:87:
82:5d:13:52:08:fa:4f:98:13:c9:fc:96:a2:55:55:
21:83:44:ad:5f:7b:99:dc:77:ef:25:90:a1:cf:3f:
8d:b3:78:ba:4e:a9:e4:94:11:62:aa:e4:8d:73:60:
63:9d:f4:64:6b:e9:f3:d2:9f:47:75:cd:76:e3:16:
28:dd:ed:6c:de:0f:0c:36:19:b4:a7:65:49:a8:2d:
12:30:c3:e7:4a:1d:31:2a:02:ae:1f:7f:bb:89:85:
8d:eb:2d:c3:7d:b3:78:7b:d2:db:c7:fe:44:5e:40:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:A4:F7:14:AF:5F:2F:4A:91:32:2E:77:9A:37:F9:36:50:51:7C
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1SKk9xSvXy9KkTIud5o3-TZQUXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.18.0/24
185.39.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:59:9f:5e:1c:63:8e:78:74:2b:da:c9:b7:b7:d4:59:69:
62:3f:a0:5a:4c:1e:d1:c1:bf:0e:3b:ff:9c:c7:b6:c3:fa:8d:
29:4e:8a:d3:b3:36:9f:e0:8a:9f:5a:14:d5:4d:ae:fa:4e:48:
8d:ef:7a:0b:06:42:20:58:50:d9:7b:7c:54:ac:3d:b8:4b:7d:
67:4f:8e:c9:c7:04:97:eb:29:9b:82:da:7d:41:95:cc:39:82:
3d:ab:f3:5c:d1:92:fe:2f:a0:b9:b2:b2:27:04:e8:2a:75:4e:
cd:aa:c3:b2:4b:7c:30:18:34:4d:8a:f0:fe:f8:95:6e:b6:16:
d4:2d:b6:c5:3a:94:10:76:8a:b2:f9:60:74:31:ae:ba:7a:35:
49:36:87:6b:4c:9f:78:06:55:ed:01:85:28:19:35:bd:7b:f0:
6b:5f:fb:28:e1:fc:34:06:76:b9:8f:c5:8c:ad:55:d5:d7:94:
a3:a9:09:b5:c8:c8:7e:f1:6c:53:d5:a9:c3:48:b8:2b:6b:50:
3c:62:e5:2d:4d:54:60:1c:59:a2:37:81:ce:30:f7:4c:78:66:
74:6f:9d:fd:98:0f:d2:77:cc:7b:e0:08:e8:55:9d:5e:c6:ca:
fa:8c:51:72:a6:30:cf:88:b1:63:03:e7:7c:0e:ea:94:36:45:
10:b8:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:14 2025 by rpki-client