Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/AIL6yQ57NnjBqL0R-3RZXGQAK7A.roa
File: AIL6yQ57NnjBqL0R-3RZXGQAK7A.roa (raw, json)
Hash identifier: RcR1ecWQe6xMO5loF782kcahd+jV2G/p/eXX63ntTxA=
Subject key identifier: 00:82:FA:C9:0E:7B:36:78:C1:A8:BD:11:FB:74:59:5C:64:00:2B:B0
Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial: 0196ED25A8B4C0DD6708E0D623D33D9A0403
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/AIL6yQ57NnjBqL0R-3RZXGQAK7A.roa
Signing time: Tue 20 May 2025 10:03:10 +0000
ROA not before: Tue 20 May 2025 10:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.254.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 10:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:25:a8:b4:c0:dd:67:08:e0:d6:23:d3:3d:9a:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Validity
Not Before: May 20 10:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0082fac90e7b3678c1a8bd11fb74595c64002bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:01:f7:dd:ad:08:af:9d:8c:4a:da:da:02:
c6:bd:a5:9a:8c:06:bf:6f:22:89:9e:90:04:ac:dd:
b8:92:a4:c9:bb:e3:20:33:73:3e:ba:eb:83:04:c7:
83:5c:f9:90:2e:7c:63:93:ab:c4:21:bc:f2:53:64:
2d:2f:63:9e:5d:eb:74:23:13:c8:08:cc:79:c5:4b:
34:ad:a7:c0:a7:1a:7f:46:2d:33:50:6c:dc:4a:59:
87:2e:d2:87:93:1d:bc:f8:c9:40:98:42:5f:0c:8a:
25:8e:3f:e1:f8:23:45:ae:09:f1:26:1e:7a:1e:23:
66:74:56:98:f8:bd:c6:d2:dd:05:2f:d4:fe:38:c4:
37:f4:95:3c:3f:50:80:b0:4c:21:7f:4b:1b:7a:dc:
05:fe:be:e4:e5:d7:8b:8a:23:85:e0:20:80:36:d3:
a7:f1:84:3c:ce:5f:8e:dd:26:74:74:61:52:bc:05:
57:58:83:1a:83:ab:04:4a:e6:46:79:d7:ad:fb:7f:
3e:64:47:33:b4:d9:8d:47:bc:84:cd:84:6b:a0:0f:
38:aa:bc:35:39:a5:03:90:11:6f:6a:3e:e4:3c:5d:
11:f6:75:d5:7d:e7:5a:28:e7:25:6f:ae:37:1a:5a:
d3:39:f4:d5:9e:ec:4d:57:6e:88:54:db:ab:30:9f:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:FA:C9:0E:7B:36:78:C1:A8:BD:11:FB:74:59:5C:64:00:2B:B0
X509v3 Authority Key Identifier:
keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/AIL6yQ57NnjBqL0R-3RZXGQAK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.210.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f8:57:0d:bd:87:60:6c:42:11:cb:d2:12:50:99:9f:b7:30:
98:30:4f:ca:2a:b8:bf:41:f2:bf:ca:08:82:db:a5:e2:71:63:
31:21:09:90:c7:45:33:7a:46:32:26:4a:fc:e3:bf:56:cf:26:
26:a8:27:1b:71:d1:a6:8a:d4:c8:90:98:a1:ed:8c:e2:7c:df:
49:c8:3c:00:c6:0b:95:74:92:02:9e:64:bf:c7:07:a5:b6:52:
35:c4:bb:e3:4a:95:f3:ef:7b:ab:b5:8d:ff:e5:97:16:99:d0:
65:c8:9d:b2:00:e9:07:c0:28:db:7c:59:dd:be:3a:cf:53:ca:
09:d8:9b:67:7c:60:39:4a:02:78:e5:98:9b:cb:e3:f1:b5:b6:
f0:e4:4a:44:4a:4d:ef:6e:33:4a:66:37:bb:e4:33:e5:af:47:
61:71:ca:96:ed:b0:8f:d8:85:e5:fa:e4:ea:17:42:7e:8a:43:
80:29:0e:be:83:34:af:9f:85:eb:8f:42:e9:ad:9b:8b:50:c0:
d6:a0:e0:52:5c:5b:b2:fe:d1:77:70:b8:da:a2:7d:96:ba:9f:
38:b0:1f:57:ad:99:ce:57:d6:05:f1:a2:4a:1c:0f:42:cd:1e:
a6:61:80:ba:53:b4:83:d6:eb:13:b4:0c:3f:2a:82:99:25:ee:
ef:74:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:00 2025 by rpki-client