Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c0saeT7oyOM1WCUUQrmmX2fqgNM.roa
File: c0saeT7oyOM1WCUUQrmmX2fqgNM.roa (raw, json)
Hash identifier: 5yb90x5g3edLkqLhkF3jwb0dKbfW1CJXOp2x6by5pto=
Subject key identifier: 73:4B:1A:79:3E:E8:C8:E3:35:58:25:14:42:B9:A6:5F:67:EA:80:D3
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0196A9C08D4B62A2668457B4D102DB7B6045
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c0saeT7oyOM1WCUUQrmmX2fqgNM.roa
Signing time: Wed 07 May 2025 07:58:10 +0000
ROA not before: Wed 07 May 2025 07:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 195.114.203.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 06:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c0:8d:4b:62:a2:66:84:57:b4:d1:02:db:7b:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 7 07:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=734b1a793ee8c8e33558251442b9a65f67ea80d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:74:1a:3c:17:f3:31:cc:55:52:4b:a1:a3:
1f:21:d2:bb:72:07:4e:f8:b3:9f:9a:e7:39:4d:a3:
f4:6b:4f:6a:53:2b:9e:ba:7a:03:b2:52:23:42:81:
90:f4:52:35:6b:6e:77:61:26:b1:19:73:69:43:df:
8a:81:3e:0d:0f:ea:99:15:0e:30:97:53:e3:53:5a:
77:0f:04:2e:88:f4:dd:99:4c:87:d2:3a:91:58:6c:
7f:1f:20:e1:d6:dc:97:cb:eb:4b:45:b7:68:6a:fd:
0f:a4:8f:0e:ff:c0:47:63:dc:cb:73:bc:5c:e8:3b:
fc:32:25:ce:c4:aa:f1:00:1d:4c:fd:33:65:ef:6b:
dd:e2:84:eb:13:68:4e:c6:30:e6:2b:f8:29:20:0b:
02:8b:39:79:4d:39:1f:37:d6:ae:16:4e:4c:ee:52:
f9:24:6a:bf:c9:19:da:1d:37:7e:b4:32:64:14:06:
6b:02:53:74:57:44:75:c4:33:98:80:18:37:37:8d:
86:1b:17:63:8f:cf:ff:48:80:a0:f0:ac:c9:e4:f3:
f1:d3:61:cf:33:e8:a5:dc:43:c0:52:23:80:0e:18:
8f:8d:82:d0:4f:bb:1e:ba:2d:b0:f8:3a:38:90:6c:
ff:11:a2:8f:70:fb:55:45:ca:12:59:6a:ef:1b:61:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:1A:79:3E:E8:C8:E3:35:58:25:14:42:B9:A6:5F:67:EA:80:D3
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c0saeT7oyOM1WCUUQrmmX2fqgNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.203.0/24
213.220.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:c1:7c:55:16:c5:96:dc:26:d5:07:ee:1c:d8:f9:ae:3d:
83:80:64:74:23:a5:ed:40:16:e1:1d:85:c0:94:d0:e4:29:b1:
5d:ad:b9:2d:9e:c2:a3:03:a3:c6:d2:43:39:f1:ea:47:66:6a:
20:29:2e:49:cc:c4:7f:fb:67:e6:71:62:f2:cb:ba:8d:c3:4b:
96:8e:92:a2:ff:40:9d:b9:ef:86:94:60:53:b1:58:b1:97:06:
f3:db:b5:53:4b:bb:15:db:f6:29:77:3c:f2:a3:b7:51:91:73:
83:7b:f5:21:04:35:1b:95:ee:38:33:03:6d:5c:10:9d:5b:c4:
e0:66:cf:55:45:c0:ec:e1:b0:2a:be:d6:3a:bb:4c:92:6b:8b:
cc:58:c8:40:3f:2b:a1:80:e7:5a:71:a8:09:51:f1:35:e1:aa:
c3:43:e8:f5:59:85:c2:04:d7:ef:77:ad:d6:db:d1:f7:82:aa:
d9:a2:e8:fc:d8:3d:e4:03:b4:b1:72:5d:d4:94:cc:f4:c8:1e:
27:c4:a9:78:09:68:d0:89:43:82:55:fc:1a:3b:34:5c:b2:95:
b3:9c:00:c8:1a:0c:81:b0:f4:94:56:c4:83:2d:8b:d2:a8:b2:
1c:aa:38:a6:65:ef:37:d0:18:9e:a6:04:e1:ee:78:4f:62:1c:
4d:c3:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:32 2025 by rpki-client