Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/bJcms0jVXlz4HSfK8b7Og7R1aOI.roa
File: bJcms0jVXlz4HSfK8b7Og7R1aOI.roa (raw, json)
Hash identifier: Zv+EQwjat9D5nx0haIxD7JjrQonx4dczlO/tWxlbPDU=
Subject key identifier: 6C:97:26:B3:48:D5:5E:5C:F8:1D:27:CA:F1:BE:CE:83:B4:75:68:E2
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 0197598E27AC0C53163B8A12BF02530F4682
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/bJcms0jVXlz4HSfK8b7Og7R1aOI.roa
Signing time: Tue 10 Jun 2025 11:16:17 +0000
ROA not before: Tue 10 Jun 2025 11:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50181
IP address blocks: 79.121.96.0/22 maxlen: 22
94.248.170.0/23 maxlen: 23
94.248.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 10 Jun 2025 11:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:8e:27:ac:0c:53:16:3b:8a:12:bf:02:53:0f:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jun 10 11:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9726b348d55e5cf81d27caf1bece83b47568e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:72:a0:d2:5a:ed:43:96:1a:15:2b:e5:46:
62:b6:9c:f5:38:78:1f:33:64:cf:a2:5d:03:df:b9:
1e:19:8b:e8:41:7a:61:2e:e5:a9:c5:4a:88:a1:c8:
8e:4d:1e:da:18:fa:a7:c2:b4:4a:45:d1:f6:ff:25:
ab:f6:6b:8c:23:1e:00:2e:01:a4:04:7c:92:c1:59:
4b:50:ba:07:df:53:78:a4:63:04:52:7b:a1:39:ae:
5d:f8:56:8f:07:8e:af:16:58:c7:a9:69:9a:02:e4:
f9:80:f4:e5:b6:54:7b:c3:e9:8e:93:44:12:29:ea:
1b:8e:c1:89:7c:8a:71:4c:24:db:4a:32:91:2f:40:
f3:01:f0:bd:35:12:a2:b3:9e:1c:a4:15:59:84:8f:
e9:2f:fd:98:9f:fe:03:38:3c:fd:10:f2:7f:22:bc:
28:52:5b:a5:b9:07:27:64:03:a4:39:54:a6:83:1b:
5d:5e:da:3a:e0:5d:dd:7e:f7:9a:17:ad:36:37:1a:
8b:e0:e1:69:37:31:76:4c:d3:1c:7a:73:00:56:57:
73:5a:91:55:6a:74:51:53:3f:91:ef:29:2a:53:31:
f7:25:78:74:37:12:15:b2:f2:00:7e:0f:3d:9a:ad:
4c:92:76:c0:9e:d2:b5:9f:60:34:1f:d3:da:31:b6:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:26:B3:48:D5:5E:5C:F8:1D:27:CA:F1:BE:CE:83:B4:75:68:E2
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/bJcms0jVXlz4HSfK8b7Og7R1aOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.96.0/22
94.248.170.0-94.248.175.255
Signature Algorithm: sha256WithRSAEncryption
9a:17:f0:71:44:0f:16:fa:73:ed:59:85:ef:12:55:c0:37:c9:
8a:1b:bc:e6:08:48:6c:71:23:6e:c7:b8:90:64:20:bd:24:58:
36:d9:75:f6:35:da:ac:09:33:94:21:53:d2:b1:e6:50:64:38:
e9:e9:40:f4:1e:17:c1:03:e9:2c:fa:09:b2:56:6f:a6:87:fd:
04:eb:b4:6a:cc:eb:a7:8c:30:f9:2f:92:ed:63:ab:17:b7:d0:
fa:08:e8:d2:57:2a:bf:9f:25:2f:d7:82:46:4a:d4:0f:3a:49:
77:a2:4a:0c:f5:04:54:e1:4e:ca:51:fc:85:9f:3c:be:51:2a:
f3:e3:63:a5:2a:4e:9a:97:4d:86:f8:ac:9c:45:a8:00:da:9e:
42:36:a7:bb:7a:de:c2:42:4a:7e:4a:e6:b6:ff:f8:57:fb:51:
11:07:b7:dc:5f:81:83:bc:5e:40:53:ab:5f:6a:e4:d1:78:d1:
09:71:4e:6f:a4:f4:30:be:48:9b:56:ea:53:2f:a9:a5:a9:89:
48:bf:a5:93:61:52:0b:0b:5f:6e:31:5d:c3:5d:bd:fd:7f:45:
11:1b:7f:64:ce:92:6f:dc:46:c2:ca:29:5f:ef:c1:80:b9:b0:
8a:da:13:35:25:2a:f7:f3:c8:b3:1c:42:0d:18:5d:f3:53:ff:
94:8c:02:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:09:12 2025 by rpki-client