Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/icUxwYq84hdlZcRMGLyjaoGmS8s.roa
File: icUxwYq84hdlZcRMGLyjaoGmS8s.roa (raw, json)
Hash identifier: BqnJwdG315wJKYehO4EdlbewSR8MYGQhw9AhPFk9djk=
Subject key identifier: 89:C5:31:C1:8A:BC:E2:17:65:65:C4:4C:18:BC:A3:6A:81:A6:4B:CB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01975FFB5CFFA28A815FE19B0E279F57A8C8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/icUxwYq84hdlZcRMGLyjaoGmS8s.roa
Signing time: Wed 11 Jun 2025 17:13:18 +0000
ROA not before: Wed 11 Jun 2025 17:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 193.124.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 21:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:fb:5c:ff:a2:8a:81:5f:e1:9b:0e:27:9f:57:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 11 17:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89c531c18abce2176565c44c18bca36a81a64bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:f9:b2:28:6a:95:4a:29:7f:e4:e7:86:78:
bf:f7:b4:69:2f:e7:d5:06:8a:45:0c:7e:32:aa:dc:
67:c0:35:1d:32:8a:b2:b4:8b:36:2d:14:59:06:d9:
5b:14:aa:92:5f:68:1f:40:7a:4b:a3:93:fc:03:2e:
d0:b6:84:ea:91:63:61:11:53:6f:8f:a0:a7:4f:71:
21:2d:8b:15:9c:ce:ea:36:5a:c6:f7:b0:ff:c0:74:
14:17:d1:92:89:2a:b7:41:ee:ff:22:2b:ca:96:58:
ab:df:be:19:f7:e0:38:d3:95:e7:ea:52:31:fb:9f:
7b:af:1f:ea:58:5a:d5:d4:ee:5e:dc:6f:7c:5e:a8:
20:4e:08:ba:af:ce:23:a5:5e:48:0a:89:9a:be:d1:
46:76:22:79:bd:93:18:7b:10:14:ff:f7:0d:fe:c2:
f1:5c:b1:ed:84:fb:73:e7:b2:a2:ae:4b:3c:82:16:
0d:2d:99:2f:05:0e:93:10:e2:9c:05:82:07:55:60:
a4:b9:ff:4d:03:24:76:b1:6d:c7:3b:29:d5:5d:83:
22:6a:0f:0a:78:95:88:b9:71:1c:1a:12:a2:b6:70:
00:a3:7c:ed:f8:58:42:bc:d5:55:01:91:d7:53:45:
9a:6d:ea:38:b9:cf:11:5e:be:f3:88:94:ca:2c:3c:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:31:C1:8A:BC:E2:17:65:65:C4:4C:18:BC:A3:6A:81:A6:4B:CB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/icUxwYq84hdlZcRMGLyjaoGmS8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:44:4c:d2:95:f0:13:7b:8d:bc:a4:f1:f6:d4:5e:d2:4f:73:
ef:50:a3:47:d4:e6:95:b9:63:83:ce:ae:ca:47:c3:33:00:71:
af:83:cd:16:e2:79:87:cb:e3:bd:ff:02:2f:b3:41:72:fd:fe:
e8:9f:c8:6e:27:c4:6b:08:73:27:75:46:cf:b2:a0:36:ea:95:
11:7c:0f:31:77:b3:43:e2:75:b1:4f:e8:fd:65:ee:da:fc:f8:
fd:33:6e:be:7c:79:ca:66:2c:de:fc:c3:76:c8:f4:78:a0:bb:
02:ac:3e:ec:bf:30:ed:b3:e5:f9:0e:c2:0a:8a:bc:f3:8e:ee:
7f:32:ad:ea:c9:83:2c:64:4e:13:d2:d1:36:d4:f6:91:81:d4:
fc:df:1f:bd:4b:e4:9a:73:ef:0f:2c:b6:b9:ae:a0:11:a4:f9:
0d:66:88:79:89:65:8a:72:72:ed:23:ab:cd:00:22:4d:fd:5b:
96:ee:ca:01:1f:e6:14:0c:f9:43:18:d1:7d:35:d1:5d:be:07:
59:68:63:3c:1b:49:a0:41:78:f5:8f:d9:90:e8:87:d5:b2:f7:
11:99:66:23:61:a0:ba:dc:84:1e:d3:a9:91:0c:3a:0b:42:bb:
ab:78:52:14:5e:6f:3a:fe:e8:68:84:37:35:b4:25:1d:ae:10:
ee:11:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:49:56 2025 by rpki-client