Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7kHpX-kyTh9NVyMbqJgFJBy7FWs.roa
File: 7kHpX-kyTh9NVyMbqJgFJBy7FWs.roa (raw, json)
Hash identifier: bBaIg1Hs/lLXb0TrYiYZTnQiXtkokXeXWs/Cl57BShs=
Subject key identifier: EE:41:E9:5F:E9:32:4E:1F:4D:57:23:1B:A8:98:05:24:1C:BB:15:6B
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 01971B09788D6E8D5DEC8331766399C8091A
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7kHpX-kyTh9NVyMbqJgFJBy7FWs.roa
Signing time: Thu 29 May 2025 07:54:54 +0000
ROA not before: Thu 29 May 2025 07:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.88.0/21 maxlen: 21
109.232.93.0/24 maxlen: 24
109.232.94.0/23 maxlen: 23
2a0b:93c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 May 2025 11:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:09:78:8d:6e:8d:5d:ec:83:31:76:63:99:c8:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: May 29 07:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee41e95fe9324e1f4d57231ba89805241cbb156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:ad:95:15:6c:82:a7:e3:56:7e:e9:df:49:
90:04:68:e7:e7:c8:7a:37:45:28:40:3e:c0:54:d3:
8b:e4:d4:b4:7c:93:b9:00:49:af:df:af:bb:84:53:
d5:92:e9:96:17:60:4e:29:bc:42:fa:db:4e:4c:b6:
05:eb:8f:b7:be:33:03:44:e0:e3:e9:14:22:d2:4f:
04:a2:cd:ff:23:51:5b:d4:f9:f1:76:92:b4:41:bc:
f2:61:6d:57:62:90:79:ca:91:19:2e:2d:4a:6d:8b:
d8:e4:18:2e:6c:23:8b:e2:ca:fa:3a:6c:10:da:7e:
66:82:7d:06:7e:43:2a:7b:81:b8:40:2f:3a:6a:ab:
b6:64:e4:68:df:0d:4c:cc:5f:4f:a6:b4:4a:d2:2b:
55:b5:e0:af:9e:1c:7d:c4:54:ee:aa:9e:70:de:fd:
83:c8:a0:5b:b2:0f:09:cd:e3:d2:99:09:4b:2c:cc:
9d:62:32:20:99:c9:c0:fa:48:68:ce:ae:77:b8:f2:
e2:e0:52:66:d6:67:1a:91:06:3f:3c:a6:c7:13:ce:
7b:16:68:91:0d:7b:44:3b:73:a6:1b:82:cd:df:b6:
2f:49:68:18:62:06:1f:d5:be:5c:13:93:ab:31:11:
ad:47:95:1f:0e:7f:5a:ce:ed:31:dd:33:b4:97:c0:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:E9:5F:E9:32:4E:1F:4D:57:23:1B:A8:98:05:24:1C:BB:15:6B
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7kHpX-kyTh9NVyMbqJgFJBy7FWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
IPv6:
2a0b:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:e5:03:47:47:f2:69:05:34:48:31:30:54:1f:34:00:22:e4:
c5:fe:c3:fb:30:8f:03:5c:67:06:e8:8b:e2:30:4b:9e:4e:49:
a5:6f:ec:06:de:5a:89:5e:1d:23:6b:bc:b9:a7:81:64:d0:7f:
33:b8:29:d7:48:0a:2a:9b:88:d6:e2:56:26:38:ff:b8:db:07:
ec:2d:34:a6:a5:df:c5:42:40:b1:c0:89:44:27:8a:30:d1:2f:
40:02:bd:23:d0:67:12:17:f5:c7:7c:72:cc:b0:d9:ec:68:6b:
60:e8:e5:e0:08:88:bb:9b:a3:0c:ea:dd:1c:55:4b:6a:65:a0:
07:52:d1:3a:67:dd:c5:93:c2:80:cf:a3:32:b9:8c:0c:91:70:
42:66:0a:e2:fe:cb:05:0b:b5:a2:48:68:d6:9e:c2:f9:09:7a:
f2:31:b5:63:50:5b:a3:69:ee:15:4b:e8:74:c2:13:79:1d:75:
7c:2a:90:14:d9:1f:49:76:48:d6:23:01:1c:00:9b:23:8c:ca:
e1:9e:41:88:b7:02:f3:13:a3:33:59:bd:e7:30:26:45:c8:a8:
4b:26:27:89:6a:b2:ec:b5:4c:36:f9:62:f8:60:06:57:3d:dd:
c8:c9:22:39:8b:ea:36:b7:e4:5c:4a:32:90:9a:ec:89:9c:7c:
25:02:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:57:55 2025 by rpki-client