Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i6Lyhn1PO13jNvkOXBkQ1ZUHdkw.roa
File: i6Lyhn1PO13jNvkOXBkQ1ZUHdkw.roa (raw, json)
Hash identifier: MIZBQO6dP7CYgpOduwYegdz42WRhqqtbpIfLukilkYc=
Subject key identifier: 8B:A2:F2:86:7D:4F:3B:5D:E3:36:F9:0E:5C:19:10:D5:95:07:76:4C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0197224CE8B2C72D1A9BFA9DE2F863D8C278
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i6Lyhn1PO13jNvkOXBkQ1ZUHdkw.roa
Signing time: Fri 30 May 2025 17:45:55 +0000
ROA not before: Fri 30 May 2025 17:45:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.28.0/22 maxlen: 22
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 01:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:4c:e8:b2:c7:2d:1a:9b:fa:9d:e2:f8:63:d8:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 30 17:45:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba2f2867d4f3b5de336f90e5c1910d59507764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:71:0c:6a:4d:4f:be:d1:07:06:ac:08:34:
aa:ed:da:b5:cd:b8:21:86:b5:67:fe:31:de:49:a0:
9d:63:5f:c9:f7:cc:89:cd:46:4c:f9:7b:42:e5:ea:
ff:7b:71:60:fd:69:31:4c:8e:2e:fc:27:9f:05:f4:
48:44:e2:bd:3a:58:be:d5:54:cf:18:a2:27:31:f7:
75:a5:4b:4c:7a:51:1e:a7:9f:61:8f:44:08:8c:cb:
4c:f4:9a:5c:9c:bb:2f:79:9c:12:35:b1:07:61:59:
56:d5:de:85:db:5e:9c:9f:77:8c:27:44:59:51:ff:
cd:c7:65:b4:63:fd:6d:98:a0:d1:7f:f1:1e:68:75:
d3:72:1e:17:18:4d:92:83:44:79:27:65:40:00:3a:
97:48:46:bb:9c:2e:77:05:f9:ed:0c:2c:50:84:de:
7f:bb:35:10:ab:18:0f:b4:a8:47:7a:0a:b5:e8:b3:
1f:01:5f:b7:74:ec:9f:c1:58:01:5c:3c:37:9a:98:
e3:c7:53:f9:71:2e:48:59:f0:b8:2b:8a:f4:eb:9b:
91:b1:c7:f1:2e:0a:f7:d7:85:ba:b9:11:c4:e9:62:
69:0f:13:a1:9e:5c:63:d5:26:73:22:ea:8b:5e:2e:
a9:4c:ed:9f:e0:cb:a7:49:1a:e2:43:e1:00:4b:1e:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:F2:86:7D:4F:3B:5D:E3:36:F9:0E:5C:19:10:D5:95:07:76:4C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i6Lyhn1PO13jNvkOXBkQ1ZUHdkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
89.106.28.0/22
94.229.212.0/24
94.229.220.0/24
94.229.222.0/23
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c1:76:65:28:79:d9:42:e6:31:9a:71:6a:12:dc:a6:15:d9:
ab:38:8f:34:1d:99:d7:ee:a1:8f:a4:c8:44:94:2c:d3:c6:0c:
24:48:01:ad:25:15:92:09:d1:c4:6f:07:db:b0:11:11:53:fd:
ff:a2:d0:88:72:fb:ee:b1:f5:c8:4c:13:0a:d9:94:bf:84:86:
da:7c:6c:7d:99:4e:64:7b:a3:ae:12:07:8a:07:0e:91:3f:a4:
79:49:80:65:5a:f7:8d:15:23:e6:cc:f8:af:40:ca:98:f1:5d:
bd:a3:7c:61:7e:9f:68:32:6a:7d:53:a3:49:77:87:0f:bc:ef:
c0:74:3a:d7:0d:ef:49:16:9c:0e:a7:11:0c:08:10:4e:7d:93:
47:90:72:a5:33:e7:ec:5b:58:f6:9d:e7:e6:6f:85:63:32:a0:
0e:08:63:20:86:86:42:fe:7d:d0:fe:91:08:de:47:f2:8b:3d:
3f:fa:bf:99:ce:58:95:41:91:72:b9:8c:cc:31:20:2a:48:79:
5e:d3:ef:59:20:89:2c:54:c7:c0:e7:ae:56:fa:0e:cd:5e:4d:
ef:3c:cc:f9:53:53:7d:44:4b:a3:b2:f7:e5:a4:ef:72:af:55:
93:93:25:32:87:f6:23:f6:4a:b1:d8:de:87:70:51:dc:12:d2:
52:ab:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:05:03 2025 by rpki-client