Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/RxdCY8-CRETDjG7hXwdk_yKTTgo.roa
File: RxdCY8-CRETDjG7hXwdk_yKTTgo.roa (raw, json)
Hash identifier: 3Js5iwACo6Lnc1Q2RmNEAxBSj2T9/O156SOaSkypMcQ=
Subject key identifier: 47:17:42:63:CF:82:44:44:C3:8C:6E:E1:5F:07:64:FF:22:93:4E:0A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0197596D6CD157CB813C3832C7CA4D958F6D
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/RxdCY8-CRETDjG7hXwdk_yKTTgo.roa
Signing time: Tue 10 Jun 2025 10:40:32 +0000
ROA not before: Tue 10 Jun 2025 10:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209290
IP address blocks: 92.119.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 08:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6d:6c:d1:57:cb:81:3c:38:32:c7:ca:4d:95:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 10 10:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47174263cf824444c38c6ee15f0764ff22934e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:63:bd:e7:e1:db:ff:00:03:f9:4d:fa:64:
30:3e:d9:d8:35:4a:81:5d:d2:07:77:bd:06:31:4f:
11:b9:bc:86:b9:64:06:3f:c4:56:14:6e:6c:e6:af:
df:ce:1a:18:52:1f:13:2c:72:5f:bb:d6:01:72:f3:
4f:38:c4:c8:42:e0:3b:e0:48:47:02:2d:e8:91:00:
41:29:85:c1:4d:ef:48:f0:10:60:e6:a7:f9:3a:c7:
54:6b:39:e8:89:91:c9:ec:44:b9:8e:bd:8a:22:70:
fb:6b:45:22:16:5f:92:19:20:63:9d:4c:73:4d:34:
55:43:02:1b:62:04:d3:93:0b:ec:fc:b7:92:0d:54:
ea:7a:87:54:82:0e:1c:13:a0:5f:43:15:34:d8:ed:
59:c6:84:26:58:26:2a:e5:b9:23:e5:76:a2:c3:28:
38:2a:37:23:7f:d2:af:35:52:b1:98:1d:77:6f:c7:
e2:03:50:94:20:57:09:77:33:8f:cf:64:0a:61:22:
d4:1f:58:36:2b:f9:eb:e0:79:80:c0:dd:c4:56:97:
1f:6b:db:f6:72:04:2f:e0:c5:11:7d:c6:ad:6b:55:
ef:bc:b7:72:4b:2b:eb:97:35:f5:25:1e:a3:51:f2:
c9:1a:43:13:58:a8:d8:1b:ca:3d:bc:5c:b5:77:da:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:42:63:CF:82:44:44:C3:8C:6E:E1:5F:07:64:FF:22:93:4E:0A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/RxdCY8-CRETDjG7hXwdk_yKTTgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.162.0/24
Signature Algorithm: sha256WithRSAEncryption
80:23:08:4e:6b:22:79:e4:82:bb:b0:eb:57:91:1c:af:2e:2a:
93:bd:52:66:8d:75:de:2a:e6:4b:e7:fb:f2:8c:15:c2:38:75:
59:75:46:6f:6f:0b:50:b7:2f:d1:a1:ba:bc:97:5d:79:a1:b2:
8d:36:39:47:86:46:e5:f1:41:de:50:1b:5c:a3:3b:e7:77:60:
42:a6:95:fe:05:50:f8:78:de:f1:72:f5:33:52:02:2e:54:f7:
48:e0:3a:83:1a:de:d9:4b:74:37:d4:16:36:6e:2d:af:5f:d2:
e9:2b:45:2a:9b:25:66:94:c9:2e:04:19:b1:dc:10:81:91:78:
52:8b:1d:4b:4b:0f:a6:d3:bf:c6:12:e2:b7:25:56:da:4f:02:
5b:32:5b:01:90:ee:df:29:b6:3d:42:af:02:76:7a:7b:84:3a:
d1:67:dc:10:56:c3:ba:56:a0:7e:82:12:f9:de:5a:da:80:ed:
80:24:f3:6a:a9:96:0e:1b:ad:80:81:4b:81:90:c3:b4:ae:13:
60:eb:b7:3a:8b:98:79:3e:9d:43:c1:0d:27:c5:cf:69:58:9e:
01:13:86:bc:1b:2e:33:69:7d:db:56:74:ba:8f:ca:eb:79:88:
08:d6:b1:4e:9c:ba:91:71:20:07:50:9b:73:21:a0:8b:12:6d:
7a:af:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:35:00 2025 by rpki-client