Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7Mrk_HFdDKHCCSRUuEh61R3NT5E.roa
File: 7Mrk_HFdDKHCCSRUuEh61R3NT5E.roa (raw, json)
Hash identifier: yw3ieZieb6SfI1czuJsrULq/iQRnSWJ2RC1l3t9pCM4=
Subject key identifier: EC:CA:E4:FC:71:5D:0C:A1:C2:09:24:54:B8:48:7A:D5:1D:CD:4F:91
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961BB9A07EA00994B17F22D5C5F5BCBA0E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7Mrk_HFdDKHCCSRUuEh61R3NT5E.roa
Signing time: Wed 09 Apr 2025 18:04:32 +0000
ROA not before: Wed 09 Apr 2025 18:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 89.144.34.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:b9:a0:7e:a0:09:94:b1:7f:22:d5:c5:f5:bc:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 18:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eccae4fc715d0ca1c2092454b8487ad51dcd4f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:55:e1:cd:de:93:c4:ce:56:fa:c7:4f:37:
58:eb:80:4e:01:9b:d2:56:7e:ee:49:92:06:c7:58:
48:8c:99:3f:fe:cf:61:36:7f:8c:e6:9e:26:1e:35:
6b:56:2d:b4:6b:27:ff:67:18:3f:9b:1d:92:7c:43:
9f:51:5f:cb:e0:48:c6:cc:86:bb:0c:aa:d3:23:f6:
c6:ba:27:c6:b0:ed:a8:7b:3b:58:39:07:ec:41:fc:
09:a3:31:cc:d8:b6:37:0d:43:3d:34:38:f1:80:a4:
02:20:16:75:75:42:c9:be:26:f3:e9:02:bb:d6:5e:
5b:f1:91:2d:30:25:e4:e9:24:fb:12:a3:56:1e:74:
84:fd:d4:7b:4d:0a:57:c1:b1:8f:73:52:eb:73:27:
f9:af:94:07:fa:71:c4:8d:43:3b:11:aa:81:48:3e:
0b:02:49:bf:f2:56:11:fa:8b:3c:00:d0:b4:84:c3:
12:88:38:db:57:a6:53:ab:b0:fd:42:9b:a0:50:44:
88:48:d8:f0:64:f0:4b:14:65:d1:93:92:75:e8:12:
98:5b:29:6f:5a:fa:cc:ac:dc:3c:1b:d2:37:f4:3b:
a2:af:39:b1:57:07:14:f5:a0:3f:c0:f2:af:15:59:
61:51:b7:ea:b6:8c:b7:73:22:61:10:49:e5:ee:db:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:E4:FC:71:5D:0C:A1:C2:09:24:54:B8:48:7A:D5:1D:CD:4F:91
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7Mrk_HFdDKHCCSRUuEh61R3NT5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.34.0/24
94.103.170.0-94.103.174.255
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:bb:bf:16:99:6a:bb:93:ab:3c:70:24:0c:6d:1d:66:d4:80:
52:f8:11:2f:45:b3:7e:f8:5e:19:a0:be:26:c8:91:fa:9e:fa:
c0:8b:74:d7:25:b3:e6:f9:02:f1:00:60:f2:83:34:23:92:4e:
e3:53:17:de:d4:f3:c0:0b:3e:d8:7b:76:b5:6d:32:45:d8:36:
ab:0c:f7:bf:7a:8a:05:fc:d5:ef:f5:af:dc:f8:e9:04:f1:32:
66:66:d0:91:0b:a8:cd:60:58:71:65:f4:4c:4e:6e:e1:0d:83:
77:c2:aa:11:22:41:ee:c2:4b:e7:44:74:be:08:7f:3b:da:4d:
1f:3d:17:b4:6d:13:76:14:bf:b2:d2:b4:70:c2:36:6c:45:b1:
4c:d3:71:73:68:28:77:80:1b:ad:b1:32:6b:eb:3c:29:0d:b7:
f6:4a:98:8d:52:6a:8a:11:4a:35:9b:32:17:0a:e8:2e:be:0d:
b4:45:c3:7b:3f:0b:a7:44:67:65:a3:97:a8:09:97:49:7c:83:
92:a8:76:4a:5b:4b:72:51:e5:4b:27:05:9d:79:8a:52:cb:17:
41:1e:84:f5:f6:be:0f:d9:86:1a:cb:71:41:5b:d4:3e:21:1b:
33:c8:9e:c1:09:3d:58:76:79:ce:b3:48:2b:3b:3b:41:a2:78:
29:de:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:23:41 2025 by rpki-client