Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/veMrDikhVgCNZ7GyV7NMFcI15TU.roa
File: veMrDikhVgCNZ7GyV7NMFcI15TU.roa (raw, json)
Hash identifier: I/tsWWABoGlgp5TUvW93O+5WBHjDMx+No+tHQ8EtvKg=
Subject key identifier: BD:E3:2B:0E:29:21:56:00:8D:67:B1:B2:57:B3:4C:15:C2:35:E5:35
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01985FBD77CDF18805645B68E822277A6193
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/veMrDikhVgCNZ7GyV7NMFcI15TU.roa
Signing time: Thu 31 Jul 2025 09:08:29 +0000
ROA not before: Thu 31 Jul 2025 09:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.42.176.0/23 maxlen: 24
37.16.75.0/24 maxlen: 24
91.202.4.0/23 maxlen: 24
91.239.76.0/24 maxlen: 24
213.111.144.0/23 maxlen: 24
213.111.146.0/24 maxlen: 24
213.111.147.0/24 maxlen: 24
213.111.154.0/23 maxlen: 24
2a11:6100::/32 maxlen: 32
2a11:6101::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Aug 2025 10:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:bd:77:cd:f1:88:05:64:5b:68:e8:22:27:7a:61:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Jul 31 09:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde32b0e292156008d67b1b257b34c15c235e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:4b:98:f8:21:41:03:b6:c9:8b:60:45:36:
9e:88:07:b1:ba:da:9f:e0:6a:e0:9a:8a:13:61:4e:
cd:61:6f:27:6c:07:46:e3:da:34:ad:a5:82:6c:ee:
7d:48:e3:6b:52:21:16:68:8b:5c:2d:97:b7:84:27:
82:a2:57:56:75:2c:13:39:e8:3d:ab:65:6a:c7:d1:
b3:28:45:29:ea:de:43:ad:f2:33:dd:7e:91:76:6c:
fc:cd:47:41:23:95:42:ac:de:38:d5:2a:28:f9:5f:
12:32:71:be:2d:a9:72:c7:8b:c8:f1:9c:c4:5f:1a:
8d:b6:3f:85:4d:79:8f:bd:81:e7:0a:c9:cd:34:65:
b5:92:96:1e:f3:9e:d8:c6:45:4d:f0:56:0b:90:e7:
33:8d:f6:37:39:05:dd:d5:fa:ae:64:21:d7:39:b7:
34:9a:9d:10:53:fe:ff:b8:66:a6:9c:31:88:30:6f:
dc:3d:eb:2e:48:56:2a:80:75:29:f4:65:23:7b:ee:
8b:01:36:20:e4:d7:e0:af:65:1e:3d:a5:b2:ca:f9:
41:f9:a0:ea:79:fc:63:68:a4:cc:31:93:e6:5d:cb:
b4:cb:66:e7:57:93:49:e3:db:a8:56:cd:94:49:3c:
c4:46:60:91:f6:17:7a:65:e2:c7:45:16:ea:a4:27:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:2B:0E:29:21:56:00:8D:67:B1:B2:57:B3:4C:15:C2:35:E5:35
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/veMrDikhVgCNZ7GyV7NMFcI15TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.176.0/23
37.16.75.0/24
91.202.4.0/23
91.239.76.0/24
213.111.144.0/22
213.111.154.0/23
IPv6:
2a11:6100::/31
Signature Algorithm: sha256WithRSAEncryption
6c:74:d7:66:3c:9b:95:34:6d:ec:23:36:91:59:df:33:b3:f3:
eb:19:c5:18:ce:fd:b9:f5:45:9b:c8:24:35:d6:d5:51:91:2e:
61:e6:62:9e:21:5c:a5:c6:7e:1e:08:91:ab:84:4f:af:f6:14:
02:dd:b3:65:97:c9:ca:a4:18:b7:e2:ff:d7:5b:fa:da:98:14:
bf:0a:04:b6:22:01:04:16:86:ef:15:f0:95:35:b5:c6:a6:5a:
4e:cb:d5:9f:ff:7e:69:19:bd:5b:c4:b1:5e:b3:0a:6f:94:ed:
6b:86:e9:1f:28:b0:66:5c:38:0a:a7:bc:41:07:9e:73:7e:05:
ed:8c:76:f2:83:1c:4c:e9:34:ed:c8:8e:d6:d9:96:84:0b:08:
ae:65:a1:77:83:29:6d:95:1a:eb:d9:c4:ba:2b:f5:ed:4e:6b:
06:6c:a8:74:d2:a3:de:57:53:08:9b:61:70:b9:ec:7d:40:00:
3a:e3:89:2e:4c:55:6d:75:83:4c:15:99:8d:99:c6:77:7c:39:
74:7c:79:96:51:ff:91:77:da:eb:f1:5c:f9:61:7c:1e:f1:43:
f1:59:3d:78:34:12:08:49:5f:bc:47:5a:fd:0b:c5:87:31:b6:
ec:e8:76:40:98:a4:e9:38:aa:16:b3:3c:6b:2a:15:32:3a:e4:
ee:37:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:40 2025 by rpki-client