Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/vl3pY-Q1EzFzUO6AI2owthoO5co.roa
File: vl3pY-Q1EzFzUO6AI2owthoO5co.roa (raw, json)
Hash identifier: j2MSj/hrKlgKTJsqXyF92f9gcgWu8TXYv+RTK5nQQf0=
Subject key identifier: BE:5D:E9:63:E4:35:13:31:73:50:EE:80:23:6A:30:B6:1A:0E:E5:CA
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 01977C8AC44604B88FD2A5DCFDDBB0F81725
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/vl3pY-Q1EzFzUO6AI2owthoO5co.roa
Signing time: Tue 17 Jun 2025 06:19:18 +0000
ROA not before: Tue 17 Jun 2025 06:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202660
IP address blocks: 92.63.206.0/24 maxlen: 24
92.63.207.0/24 maxlen: 24
109.94.172.0/24 maxlen: 24
185.100.52.0/22 maxlen: 22
198.163.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:8a:c4:46:04:b8:8f:d2:a5:dc:fd:db:b0:f8:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jun 17 06:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be5de963e43513317350ee80236a30b61a0ee5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:10:36:ad:73:a7:c1:84:1c:98:d1:b2:55:42:
aa:a3:18:ef:1d:c1:d2:ff:26:27:50:fd:29:11:6b:
8c:7d:1d:45:82:f9:d8:0b:10:cf:a5:32:02:d5:77:
10:72:01:27:af:78:e3:28:25:39:64:8e:c8:8b:30:
d5:33:ee:a8:16:09:bf:29:20:7b:03:4c:63:aa:6f:
6f:ce:9c:44:ff:65:93:b0:5c:78:9a:40:46:ec:8b:
9d:d5:b5:b6:10:0c:43:15:35:f7:a2:4c:79:16:ec:
7d:7d:25:8f:e5:6a:c9:ec:fa:ff:fd:a2:32:2e:8d:
b8:6c:97:9e:26:52:8e:c9:05:92:8f:7c:5e:d8:71:
3a:76:22:58:67:f4:7b:94:54:91:fd:38:9d:58:9d:
d7:4c:9e:80:67:b1:1d:a5:42:cc:8c:bc:19:6c:99:
93:01:ae:9a:a9:bd:be:b9:c5:cf:12:3f:50:5f:67:
b7:ad:48:09:a7:2a:c9:80:77:71:4b:ef:56:80:e3:
80:e3:8e:92:d4:fe:fa:3b:7f:6a:39:91:e5:a9:e3:
fb:7d:8e:3c:de:c7:ef:57:bf:6b:0d:07:f4:ac:9f:
e5:7f:d2:7c:b2:4c:22:3a:19:3a:55:d2:e6:64:8c:
cc:e9:b0:6e:ef:69:34:f9:af:31:3e:66:5e:4f:22:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:E9:63:E4:35:13:31:73:50:EE:80:23:6A:30:B6:1A:0E:E5:CA
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/vl3pY-Q1EzFzUO6AI2owthoO5co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.206.0/23
109.94.172.0/24
185.100.52.0/22
198.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fd:80:cb:97:9f:9c:60:c7:8a:17:e6:79:07:40:d2:2a:6c:
75:9d:e9:43:67:f9:9a:b6:ee:32:60:ce:8e:fd:19:27:42:76:
56:78:bf:01:3e:30:cd:dd:45:5d:d9:ce:04:d8:f7:47:74:e6:
20:ad:43:93:38:27:31:46:a8:7f:f5:0e:68:ea:ea:59:fe:ab:
40:0a:7e:ed:6b:1a:82:b8:a8:fa:bc:ed:3e:36:ea:e4:2f:8a:
93:c7:68:38:64:18:31:59:bb:6b:fe:d3:f8:66:08:6c:80:80:
26:b0:6b:47:4a:0d:6e:8e:0b:82:cd:97:88:b3:8e:eb:6b:70:
8e:67:d3:f4:a3:90:d2:ee:03:30:bf:81:c2:fc:43:87:2d:b5:
da:fc:cd:97:50:25:0d:5a:22:f7:ce:a5:d3:b2:0c:6a:c6:dc:
d0:2d:3d:fd:ca:81:b2:eb:59:82:4c:30:2a:f7:84:ef:27:53:
17:63:47:f5:b8:ae:fe:3c:37:12:c2:12:ac:dc:d1:5b:9a:1e:
d1:15:29:fb:2f:58:7c:a8:ad:3b:b6:4f:3c:fb:67:ae:b9:4a:
c3:58:87:c4:a6:3e:33:3d:57:fc:69:a4:4c:57:ed:f9:4b:e1:
82:16:1b:fe:f6:d0:75:b6:cf:58:cd:75:79:b1:84:c2:9e:61:
8c:6b:58:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:00:00 2025 by rpki-client