Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nX3-niCSrSHErYAfXEvX52m7e3g.roa
File: nX3-niCSrSHErYAfXEvX52m7e3g.roa (raw, json)
Hash identifier: GA+ePP+eIK/AqsflAJHeo7FQ7/EnQ0beGP+j+t5wR2c=
Subject key identifier: 9D:7D:FE:9E:20:92:AD:21:C4:AD:80:1F:5C:4B:D7:E7:69:BB:7B:78
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196437DF7E9C194ED6EDD76D179EA1FE565
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nX3-niCSrSHErYAfXEvX52m7e3g.roa
Signing time: Thu 17 Apr 2025 11:24:10 +0000
ROA not before: Thu 17 Apr 2025 11:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 93.88.205.0/24 maxlen: 24
109.61.111.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 14:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:7d:f7:e9:c1:94:ed:6e:dd:76:d1:79:ea:1f:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 17 11:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d7dfe9e2092ad21c4ad801f5c4bd7e769bb7b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:78:30:38:aa:fe:3a:da:86:95:90:0a:5d:
78:32:bd:6a:a9:8f:32:0e:05:83:a9:bb:d9:c7:bf:
63:53:49:6e:99:5c:f9:a6:db:b7:9c:37:96:f4:bb:
78:ff:7f:e5:d1:0a:f7:94:96:5c:a6:a6:e3:22:d5:
61:56:96:92:c7:fb:1e:25:51:0d:37:db:33:03:3f:
7a:95:e9:09:8b:c1:3c:9e:60:64:45:ce:83:38:35:
1f:5b:08:df:12:93:9d:c7:ea:ad:62:2e:99:8f:ae:
76:dc:41:62:c5:6f:34:48:6e:67:98:2d:c1:2b:57:
7e:1a:cd:61:14:08:5e:d0:77:51:96:b4:4f:61:e9:
a2:10:47:9e:c1:51:5e:98:d8:16:ea:e8:50:86:b0:
f2:c9:fd:51:57:a4:07:82:b7:0b:63:cf:ff:e6:3b:
c7:85:df:e6:19:96:0e:d5:d3:b2:aa:8b:b6:9e:c2:
2d:df:66:c6:f1:ee:f1:f1:a1:fc:e5:7e:e3:69:96:
75:96:74:b4:48:a1:7e:43:be:f6:ef:79:94:0e:2c:
e5:12:84:11:96:57:7a:5e:6f:aa:76:89:5a:91:ff:
1f:84:8b:91:f6:a8:41:2f:23:47:78:63:df:b4:82:
e8:df:88:05:33:f1:a1:84:d1:c6:cd:7a:ee:84:97:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:FE:9E:20:92:AD:21:C4:AD:80:1F:5C:4B:D7:E7:69:BB:7B:78
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nX3-niCSrSHErYAfXEvX52m7e3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.205.0/24
109.61.111.0/24
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9d:c6:35:ac:b4:b5:82:69:71:fe:54:7c:ea:96:aa:b9:89:
16:c8:7e:8b:a1:01:29:6e:29:d8:b0:ef:14:2f:de:12:2a:18:
30:77:15:14:37:63:f4:16:32:8a:e3:13:0c:14:4f:67:d7:fe:
f1:f7:03:42:80:1c:c9:31:88:e7:9b:d6:a4:11:c2:97:19:2a:
f0:be:f9:f1:ac:3e:41:ec:e3:2c:11:e9:38:ef:50:37:40:6c:
8f:00:af:f2:d9:e0:3b:92:88:6d:5b:24:50:18:fe:ef:d5:14:
10:4d:6f:80:71:bf:27:43:12:be:81:bd:45:6a:12:66:32:3b:
7b:72:f7:81:2d:72:69:84:82:48:6c:ce:6b:4a:80:34:f9:94:
4d:12:2c:49:51:ce:de:31:52:cd:c3:bc:49:02:cc:8b:bd:98:
0f:5f:53:3f:1f:ea:ae:9a:8c:72:27:4a:62:87:f8:13:fe:0e:
c0:96:6e:33:35:3b:59:a7:36:0d:73:12:84:d4:b7:5e:fd:45:
b0:00:99:2d:d0:52:ab:5f:ce:1e:ef:70:5f:22:d4:a9:49:13:
47:08:e5:21:71:c1:c6:3f:95:0b:ff:14:0a:ca:b0:24:c9:d4:
df:88:8c:f2:75:2f:1f:54:b4:a0:cf:0d:35:6b:35:77:e7:52:
d5:21:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:38:55 2025 by rpki-client