
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7iLW5stzHJ51VipIbWMArMEv8GI.roa
File: 7iLW5stzHJ51VipIbWMArMEv8GI.roa (raw, json)
Hash identifier: OJOv5NnYKiwQIKn9D8mbVwu+4BNw8D8B8f0Vkvs1580=
Subject key identifier: EE:22:D6:E6:CB:73:1C:9E:75:56:2A:48:6D:63:00:AC:C1:2F:F0:62
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01985CB63283174623EBE7A9CBAD54D7E13F
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7iLW5stzHJ51VipIbWMArMEv8GI.roa
Signing time: Wed 30 Jul 2025 19:01:40 +0000
ROA not before: Wed 30 Jul 2025 19:01:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 155.212.2.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 18:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b6:32:83:17:46:23:eb:e7:a9:cb:ad:54:d7:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 30 19:01:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee22d6e6cb731c9e75562a486d6300acc12ff062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:2d:65:e4:42:47:49:33:3f:7e:d1:ac:3d:
c9:07:c4:4f:6a:b3:d1:51:d5:97:ee:cc:d7:11:e9:
cf:9d:d6:5c:12:4d:c2:4e:6d:8d:98:dd:01:a8:1d:
5b:e3:96:3f:ff:80:6e:09:f0:83:eb:07:57:bc:5d:
54:3e:20:23:4a:f1:20:f2:c9:29:a6:be:c6:f9:2e:
13:0f:80:f6:0c:1b:93:d6:78:39:c8:1e:f3:fb:63:
fe:a8:36:20:4a:a0:98:cb:cf:bd:9b:10:1f:f8:b6:
8d:4f:2a:26:57:af:9d:5c:75:01:5a:47:ee:80:33:
04:6c:18:e4:13:28:7e:27:8a:15:40:59:ec:88:ea:
1e:ae:5f:8d:2b:a9:31:7e:db:5d:c4:75:e5:51:42:
6a:f3:83:ca:ec:2a:7d:df:3e:25:0d:3b:af:37:cd:
ec:6e:da:85:f4:0f:06:b3:d2:8b:3d:d5:5e:d4:30:
a3:9e:ad:b0:14:e0:0b:21:92:ad:9a:58:7f:99:d9:
90:23:3f:b1:da:ce:14:a4:2a:59:74:ea:55:cd:1f:
79:49:ee:d6:70:57:9a:3c:f0:cb:7f:e0:de:4c:df:
cc:0f:5d:3b:0c:0d:98:34:70:63:fc:8a:8b:2c:54:
42:13:39:6d:2b:32:96:af:6e:9c:90:a5:eb:42:36:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:D6:E6:CB:73:1C:9E:75:56:2A:48:6D:63:00:AC:C1:2F:F0:62
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7iLW5stzHJ51VipIbWMArMEv8GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.2.0/24
170.168.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:36:f3:ce:d1:d8:69:41:db:09:90:1e:8c:f4:fb:77:2e:6a:
46:9e:42:41:98:0d:c6:47:d3:2e:1a:31:45:c0:7c:21:54:a0:
c0:1e:44:fa:88:18:7a:1c:1c:c6:65:f3:30:ec:7d:40:a4:c2:
8b:fe:1b:b4:8d:a0:ca:b6:33:66:a0:4a:d5:04:7c:81:12:56:
e1:f6:cd:06:d7:1c:ba:ab:c4:8c:a8:20:4b:f4:4c:af:f4:cc:
7c:52:8f:9c:7a:bb:dd:e5:77:bd:67:e3:1d:60:80:28:73:b1:
6e:d6:a6:8b:47:d9:ad:10:cb:01:fb:0d:12:93:3b:ee:12:8d:
3e:88:56:e4:8b:75:60:5a:18:d8:de:58:ab:0b:e0:6e:24:d5:
a7:c5:fa:91:13:fb:42:09:83:10:8a:5b:ce:1f:c0:a8:00:82:
0c:7e:ee:71:8d:c3:4c:fc:a6:58:08:46:ce:1a:46:08:21:cf:
f1:c9:30:9d:6b:ea:c3:75:aa:2e:e2:8b:ae:ce:c7:5e:24:34:
8a:ef:16:c4:f0:f4:d7:20:82:5a:b0:20:7e:94:6c:1c:0f:6b:
59:09:d3:b6:54:65:42:d1:29:3b:92:95:b8:16:1c:c7:ac:bf:
a9:20:21:d8:5e:49:af:2e:aa:b1:db:f8:7f:05:27:f8:9e:be:
0e:2f:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:16 2025 by rpki-client