Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Erk2BYpgFVJ10Uqr9Yj8RsPskwY.roa
File: Erk2BYpgFVJ10Uqr9Yj8RsPskwY.roa (raw, json)
Hash identifier: yR4KhRoZO/XzMeB1yRLI4Psya11y8uSpfmTGHoTus8Y=
Subject key identifier: 12:B9:36:05:8A:60:15:52:75:D1:4A:AB:F5:88:FC:46:C3:EC:93:06
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01982E65E24EFC42F49DB01B73A9C95C1FDA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Erk2BYpgFVJ10Uqr9Yj8RsPskwY.roa
Signing time: Mon 21 Jul 2025 19:11:25 +0000
ROA not before: Mon 21 Jul 2025 19:11:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 146.19.21.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:3c80::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c3c0::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 09 Aug 2025 19:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:65:e2:4e:fc:42:f4:9d:b0:1b:73:a9:c9:5c:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 21 19:11:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12b936058a60155275d14aabf588fc46c3ec9306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:d0:25:60:52:0c:f6:ba:c4:1e:3e:2c:31:
67:52:f6:db:43:af:d9:24:93:d0:8f:09:a7:d0:db:
8d:a2:ed:00:a8:6d:21:c5:dd:ab:b8:19:7b:ba:70:
eb:89:b4:c2:e6:d7:20:9e:cf:08:0c:45:5f:67:e4:
0d:d4:49:b9:bf:03:7d:87:6c:e0:ec:a7:a2:e5:e6:
ad:f6:42:dd:26:4d:92:d5:c4:88:82:df:61:cf:9a:
c3:e5:a0:74:79:d7:d9:57:b1:a7:49:d9:bd:40:d6:
2b:a6:cc:3b:03:b1:3a:bf:eb:6f:c9:5f:39:c5:b5:
10:9b:8a:9c:70:8b:80:5d:4b:54:d3:4e:01:8e:a3:
b8:ef:76:82:81:3c:ba:11:96:93:ea:70:8f:0d:7f:
8c:3a:c0:a9:6d:da:94:b7:e6:d8:d7:bf:4e:02:db:
ae:ff:0a:02:ed:dd:68:a6:89:23:89:6c:e8:71:78:
75:80:41:e0:74:49:d2:eb:f9:92:8e:1a:12:f1:70:
e4:22:9b:cd:70:3c:c8:41:e3:90:94:0a:11:a5:ef:
26:e1:66:32:62:9c:05:c2:1f:e8:65:d6:a3:6e:2e:
35:d3:cb:eb:a1:02:1f:01:8e:e4:e8:4f:23:bd:bb:
fb:1c:46:ea:72:42:59:9a:74:b3:63:1a:29:bc:5b:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:36:05:8A:60:15:52:75:D1:4A:AB:F5:88:FC:46:C3:EC:93:06
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Erk2BYpgFVJ10Uqr9Yj8RsPskwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a10:3c80::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:c240::/29
2a13:c340::/29
2a13:c3c0::/29
2a14:42c0::/29
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:96:0e:ad:2a:6f:bc:a3:ad:b2:f1:26:a9:22:fd:41:fc:aa:
a0:36:20:60:ab:44:9d:4f:54:56:fb:47:ee:2f:8a:de:f1:9e:
49:48:40:b6:40:8e:9b:e3:25:51:de:8e:22:ee:c7:0a:ea:a0:
e2:db:e8:e2:dd:4b:db:7d:c2:5f:99:1b:45:87:9c:f6:32:4a:
6b:0b:29:9e:c5:4a:88:f0:40:70:91:d6:e6:b5:80:a5:48:c9:
b3:cd:c3:b7:cf:68:79:19:bf:ea:d7:91:98:0e:af:20:0b:58:
4f:3e:2f:3a:ab:fa:8f:23:fc:b5:7c:2f:40:95:01:b6:bb:f9:
be:9c:0f:49:67:8d:96:0c:f4:3b:a0:f6:4d:f6:cb:af:ec:e6:
4e:06:18:c4:0c:0e:b2:ae:10:14:fd:43:93:d7:4c:45:ab:cf:
29:da:4d:91:aa:ba:b1:2a:4d:6d:74:98:d4:15:94:df:5b:c0:
f8:84:7f:10:63:19:83:ae:11:c7:db:f4:66:2a:d2:f6:57:41:
39:fe:b9:91:0b:c0:83:b5:a9:de:6f:41:2b:f4:b1:1b:71:04:
6d:81:28:28:7e:14:2b:3c:ac:32:9c:d5:8c:66:9b:7e:60:5b:
55:6b:7e:96:07:52:b8:4e:0a:8c:84:fe:a6:0f:96:07:67:7a:
96:0f:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:10:07 2025 by rpki-client