Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xwND86PTN_DyD4nssVZTFmlPlT8.roa
File: xwND86PTN_DyD4nssVZTFmlPlT8.roa (raw, json)
Hash identifier: eiqyoTewo+7qxS1Nf2BKQXXQPQQrTdkxxC11dAhtUjU=
Subject key identifier: C7:03:43:F3:A3:D3:37:F0:F2:0F:89:EC:B1:56:53:16:69:4F:95:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195FBA5A0FC523C0961E91A184EF821E564
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xwND86PTN_DyD4nssVZTFmlPlT8.roa
Signing time: Thu 03 Apr 2025 12:34:50 +0000
ROA not before: Thu 03 Apr 2025 12:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 93.88.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 09:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:a5:a0:fc:52:3c:09:61:e9:1a:18:4e:f8:21:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 12:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c70343f3a3d337f0f20f89ecb1565316694f953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:0d:2a:f5:92:81:43:08:44:57:62:07:72:
e8:e8:10:42:16:00:89:2d:1a:da:b9:79:58:be:d8:
0c:42:ad:ee:38:99:4f:c3:be:3b:af:52:ac:92:5f:
d8:e0:5b:23:93:3d:c1:76:9e:00:f8:7e:e9:f3:1b:
1d:c5:fb:fd:52:15:8b:a9:15:ca:ff:16:99:a4:fa:
82:23:1d:8e:c5:ba:54:c6:62:af:3b:2c:b4:b0:87:
86:5e:4e:df:f5:a5:07:8f:54:0a:f6:5f:9e:06:f6:
1d:e6:4e:61:32:b1:75:a4:e4:64:f9:0a:e5:83:4a:
04:5e:dd:2b:09:b9:ce:3f:d2:0d:da:c0:3f:71:75:
05:fd:69:16:97:f8:e1:eb:25:5d:6e:c5:2b:99:5a:
3b:7a:9a:a2:a3:84:7f:22:1c:9d:e1:d1:db:a0:64:
da:ac:2a:95:d2:40:65:a5:f9:df:69:d2:90:d4:60:
4f:be:df:71:8f:30:3b:e1:d9:49:fc:f3:cd:7b:98:
71:56:cd:d4:60:2f:ce:95:71:a6:2c:27:f0:fd:7e:
12:51:a1:12:a6:ae:89:c0:46:59:8f:6e:2d:81:b5:
de:4d:fd:6e:0f:11:6c:91:54:4c:bc:64:0b:37:3f:
c8:cc:d4:fd:c8:de:4d:52:c1:db:6e:b0:bc:a8:1b:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:43:F3:A3:D3:37:F0:F2:0F:89:EC:B1:56:53:16:69:4F:95:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xwND86PTN_DyD4nssVZTFmlPlT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e9:fd:dc:75:a5:cc:e3:9e:66:e7:e0:06:0d:f5:33:5f:e3:
49:06:b5:38:bf:39:6a:75:2a:32:28:0d:f7:d5:6b:d8:d8:07:
5b:1b:48:af:b0:dd:ec:67:80:e7:5b:c4:89:6e:de:cd:20:0e:
f5:0c:1e:7a:ab:3d:3c:39:3f:e4:46:2b:2b:f9:ac:d9:0a:25:
a5:2d:47:6c:38:fc:d1:56:65:f0:f6:45:21:a4:2c:ff:44:14:
17:ef:44:b6:46:79:8e:30:80:33:85:11:65:ad:2f:e2:89:0f:
bf:88:7b:7b:9d:90:1f:77:61:57:fc:f9:98:1e:d7:06:55:cc:
e9:ad:5f:f8:c2:2d:f0:f2:f5:60:d9:4b:62:c4:8a:44:36:b2:
b3:f7:b8:23:5d:10:73:8a:01:3f:b1:5c:14:5b:b7:54:1e:ed:
5f:72:39:2a:5f:cd:ac:c8:cb:f4:64:7d:f1:44:e9:99:3b:cd:
24:84:d4:c8:d0:34:12:2b:a0:68:54:13:6f:49:e3:00:bf:f8:
b3:18:3c:ba:9c:a8:46:b1:ae:73:cf:eb:01:e7:11:b3:e6:a1:
1a:35:f7:10:98:0a:30:b4:5f:44:0e:b3:77:49:05:3c:d4:3c:
43:af:8c:af:68:35:24:24:af:06:82:0a:5b:e8:57:80:e2:e9:
17:8e:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:59:08 2025 by rpki-client