Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/kKRRrrkHhF6FDN01MwErEk5CuJ8.roa
File: kKRRrrkHhF6FDN01MwErEk5CuJ8.roa (raw, json)
Hash identifier: ogxCvr6wqlGKgZx6Uny5WACSngkUuzi82YLOEi+0rgE=
Subject key identifier: 90:A4:51:AE:B9:07:84:5E:85:0C:DD:35:33:01:2B:12:4E:42:B8:9F
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 01971BCE4EB7A0693277ED654C48153C633C
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/kKRRrrkHhF6FDN01MwErEk5CuJ8.roa
Signing time: Thu 29 May 2025 11:29:54 +0000
ROA not before: Thu 29 May 2025 11:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.88.0/21 maxlen: 23
109.232.93.0/24 maxlen: 24
109.232.94.0/23 maxlen: 23
2a0b:93c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 30 May 2025 11:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:ce:4e:b7:a0:69:32:77:ed:65:4c:48:15:3c:63:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: May 29 11:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90a451aeb907845e850cdd3533012b124e42b89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:f8:29:49:29:c8:15:db:a0:0b:42:fb:0f:
fb:1a:c5:2d:f9:ae:41:b9:d0:f7:81:8c:be:55:ea:
e5:8f:ef:ce:c4:d9:53:d9:e2:2a:ed:7b:b8:71:6d:
d8:f1:8c:06:2f:82:fb:d4:83:4f:2b:a5:6c:1f:95:
e6:0f:e8:a4:44:22:3c:5f:5e:be:7c:71:1e:d1:9e:
34:45:fd:da:ee:81:87:fd:b3:91:52:c8:02:fc:f3:
53:a8:08:68:9f:47:82:e6:51:65:c2:4f:bf:29:4f:
48:d1:b9:91:81:48:d7:53:31:d5:15:10:d4:87:59:
3b:3c:3c:a7:7d:d6:fc:9a:d1:ce:a0:d1:05:85:a1:
87:16:0b:41:d2:5e:2f:72:2f:f1:b2:f7:36:eb:de:
fb:b7:1f:24:bd:a2:cd:d9:4a:86:43:89:f7:3a:83:
18:40:9a:77:9b:c5:d4:9f:e4:4b:e5:8d:8d:3a:b5:
f7:76:14:35:44:e0:02:b0:11:3f:01:04:bf:9e:ce:
f9:6f:6a:c1:07:63:76:45:a9:1d:9a:67:cb:6c:d4:
77:9c:c3:4e:c0:f8:62:78:af:88:03:53:22:2e:aa:
2a:f1:12:f5:4c:40:7d:a1:96:c6:d9:88:18:7e:01:
2b:9f:e9:07:ca:6d:08:7d:53:7a:9f:bd:21:fa:d7:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A4:51:AE:B9:07:84:5E:85:0C:DD:35:33:01:2B:12:4E:42:B8:9F
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/kKRRrrkHhF6FDN01MwErEk5CuJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
IPv6:
2a0b:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:cc:1b:b3:ef:ae:02:55:10:72:32:a2:96:23:c0:7a:95:92:
cd:fe:a9:10:7d:0b:77:4f:b9:b4:3c:c0:6f:4f:50:75:39:ab:
77:e4:20:0d:c3:36:9c:9d:40:e1:18:51:26:91:71:f5:68:71:
1b:7e:21:81:27:bb:86:41:83:a3:50:3b:0e:38:35:67:0b:47:
fc:b6:19:1b:64:b0:f1:06:bc:f6:7b:f5:91:de:b4:32:01:f1:
b4:9b:e7:05:ff:6e:05:86:0d:cb:55:d9:9f:18:2c:e1:1f:54:
33:3e:8f:78:e8:96:31:5e:ed:c0:3a:d1:1c:31:0f:f0:bc:10:
25:a7:3e:5f:fc:5b:eb:77:85:31:6c:8c:9d:6e:e2:fa:ff:a3:
7f:4c:c0:6e:9e:c7:74:20:6f:56:f7:b4:7d:b8:66:39:f9:f3:
82:e6:e1:81:2e:bc:c3:5d:c1:cf:02:06:dc:81:8d:df:19:97:
1f:69:46:fe:c4:f1:8b:45:fc:3b:10:97:aa:26:74:ab:47:b9:
52:20:77:ae:b4:57:16:50:d5:47:2e:8e:7a:f9:f1:9d:d0:e3:
90:90:85:6a:41:9d:00:7d:8f:08:ad:70:6e:c5:36:6d:ce:d7:
20:9e:7c:8a:ac:9a:09:bd:db:6d:cd:bc:ee:c7:80:02:94:04:
96:db:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:58 2025 by rpki-client