Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/utJTGG7GrnOGXtFZcUKACG7ULms.roa
File: utJTGG7GrnOGXtFZcUKACG7ULms.roa (raw, json)
Hash identifier: M8dRlRT1pokBfMzVDEPPvgTe1GN3yeQ00SeSyvGB2No=
Subject key identifier: BA:D2:53:18:6E:C6:AE:73:86:5E:D1:59:71:42:80:08:6E:D4:2E:6B
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 019759801105129B15A47918D623AA35D61F
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/utJTGG7GrnOGXtFZcUKACG7ULms.roa
Signing time: Tue 10 Jun 2025 11:00:54 +0000
ROA not before: Tue 10 Jun 2025 11:00:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 79.121.124.0/22 maxlen: 22
91.147.216.0/21 maxlen: 21
94.248.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 10 Jun 2025 11:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:11:05:12:9b:15:a4:79:18:d6:23:aa:35:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jun 10 11:00:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad253186ec6ae73865ed159714280086ed42e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:21:67:4e:bb:5f:45:9d:5f:05:ba:d5:11:
01:90:22:b8:cf:46:3a:2c:04:37:a2:20:4c:5a:92:
43:b6:42:17:7f:e0:89:5f:8e:60:51:27:fc:4f:1e:
20:5d:37:65:db:62:47:f6:7e:ca:ea:ba:ba:28:02:
09:70:a7:68:be:14:23:26:e2:36:5d:3c:4e:64:5e:
f6:c9:83:32:6e:9d:07:b3:43:4d:2f:a5:87:51:43:
21:64:04:e6:c4:d2:8d:c0:fb:e5:a0:e9:75:5f:7b:
ff:02:e3:51:dc:b1:65:c0:07:3b:f5:ed:21:1d:b7:
f3:7e:26:2c:64:82:51:83:5e:35:57:c0:4a:2e:ef:
74:a0:0a:c4:dd:2f:0f:ba:3c:fc:69:c0:90:d9:1d:
87:74:b5:34:5b:b8:6f:de:c4:49:81:be:23:bd:aa:
09:cd:7d:fe:ac:b7:9c:dd:2a:58:b4:fb:0f:2d:bb:
65:9b:81:6a:28:69:bc:56:a2:02:58:c0:1f:6f:87:
68:7c:f4:a9:60:b7:d8:1c:8a:d2:46:fb:7d:91:1b:
5f:33:ef:bd:be:db:ba:36:c1:17:64:ce:6c:9e:13:
1d:bd:e5:8b:5b:35:9c:80:98:ad:70:98:41:66:18:
eb:9f:8a:e3:28:af:6c:92:84:4a:53:09:a3:6f:c2:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:53:18:6E:C6:AE:73:86:5E:D1:59:71:42:80:08:6E:D4:2E:6B
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/utJTGG7GrnOGXtFZcUKACG7ULms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.124.0/22
91.147.216.0/21
94.248.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:d8:9a:01:56:b2:77:58:e6:81:1e:af:ed:85:62:6e:19:fe:
c2:29:15:f9:11:2e:e9:7b:b4:e4:b6:13:b1:11:93:3d:b7:7c:
3e:b9:0a:28:7d:f7:6a:cb:33:7c:8c:7e:c4:62:a8:ef:36:24:
d7:c9:7d:d6:9c:93:17:29:9c:d9:aa:55:d3:81:3b:ae:df:f8:
c7:64:fe:57:30:9d:56:a3:bf:79:91:19:9c:06:c1:1c:ad:ac:
4a:47:c8:39:04:ff:f4:52:9d:f1:72:75:6d:e8:2e:8c:6e:f1:
6e:cd:55:07:66:e2:89:38:5a:bf:02:e7:c1:fd:d5:28:b0:41:
2b:13:38:2e:90:72:0c:16:13:7d:2b:ec:42:8e:37:bf:16:4e:
05:83:cd:53:72:46:8d:c6:7a:44:88:20:c8:a4:ee:a5:d0:48:
40:5e:f3:fa:39:90:bc:f5:e1:c3:30:f0:45:05:45:7e:17:fc:
1f:ae:84:45:2b:fa:0d:2b:b5:8b:5b:1c:6c:8b:b8:d7:b6:a1:
e2:17:10:1e:0f:17:06:16:d5:55:b8:68:3b:d0:cf:55:4d:36:
57:6e:94:95:1b:a4:51:8e:88:11:a6:5f:27:1a:95:93:d3:fc:
e8:0e:22:c9:70:8a:db:8b:a6:b3:8d:c5:c0:70:66:ee:8d:a3:
b0:01:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:51:36 2025 by rpki-client