Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/0EDep2rM9XUk6aXLWDzitZKckKY.roa
File: 0EDep2rM9XUk6aXLWDzitZKckKY.roa (raw, json)
Hash identifier: SEVRDBFNf/a1RqGWWB9yWjYh8woGaPVR1yv1ygAmrJ4=
Subject key identifier: D0:40:DE:A7:6A:CC:F5:75:24:E9:A5:CB:58:3C:E2:B5:92:9C:90:A6
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019A27ADA7A604450183E33F5F1D9E1650DE
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/0EDep2rM9XUk6aXLWDzitZKckKY.roa
Signing time: Mon 27 Oct 2025 21:58:03 +0000
ROA not before: Mon 27 Oct 2025 21:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47721
IP address blocks: 91.241.55.0/24 maxlen: 24
146.19.74.0/24 maxlen: 24
193.9.51.0/24 maxlen: 24
195.96.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Nov 2025 10:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:ad:a7:a6:04:45:01:83:e3:3f:5f:1d:9e:16:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Oct 27 21:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d040dea76accf57524e9a5cb583ce2b5929c90a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:f8:b6:fb:4b:e0:9d:fe:f5:bc:99:17:6a:
e5:b0:16:c2:8a:6a:ec:89:45:ea:7d:14:82:87:5b:
8e:cb:59:ae:d8:c4:44:63:1a:80:ba:b6:fc:f5:b5:
e9:86:56:c6:35:29:fb:a9:ad:31:00:63:a7:2f:0c:
c9:c6:62:ff:91:9f:3d:1d:f4:41:5d:b3:46:20:85:
65:69:f6:1a:2a:91:0a:02:00:37:f6:0d:cb:e5:cb:
2f:cc:3e:af:90:f3:f5:52:a5:3b:c3:4d:2a:8e:e3:
c6:cd:73:9f:c4:74:e0:67:11:91:6f:0a:0f:c9:8f:
69:d8:be:4a:83:37:08:b4:5b:e7:4a:2a:2b:e1:8d:
33:58:35:19:97:f6:87:50:7c:27:34:7b:43:54:6a:
cf:f6:7f:b6:56:55:7e:ba:0d:65:b6:30:00:8f:5d:
da:14:98:64:c2:22:40:aa:1b:81:fc:65:f3:39:9f:
8b:c8:ac:ae:8a:80:d8:ed:89:ca:54:78:71:c6:ef:
ab:53:72:0e:36:f5:15:68:a1:fc:fe:b6:71:b3:b1:
3b:aa:3e:e0:86:57:f7:fb:08:b3:6f:74:a5:dc:e1:
32:29:f8:c7:2a:76:bc:7f:91:bd:ed:89:1e:58:61:
50:28:e1:10:65:19:02:17:c1:9c:d9:50:55:31:96:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:DE:A7:6A:CC:F5:75:24:E9:A5:CB:58:3C:E2:B5:92:9C:90:A6
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/0EDep2rM9XUk6aXLWDzitZKckKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
146.19.74.0/24
193.9.51.0/24
195.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:53:5f:58:12:82:c1:0d:42:d1:13:d3:c7:1c:6b:0b:f0:4d:
fb:2c:10:76:ed:0e:f3:41:da:16:b5:03:18:01:12:53:10:a1:
f5:40:5e:f8:6d:31:ba:2e:1d:cc:b1:c5:b7:41:6d:3e:9c:73:
e3:4c:3e:b4:19:4a:74:fc:e7:55:4a:4b:2f:ec:41:4b:ac:95:
0b:87:04:5a:c8:37:ba:63:3d:1b:ee:ad:9d:d3:f8:91:76:b2:
8a:9d:41:a5:5d:94:4a:bb:73:41:73:5d:50:31:de:02:84:da:
f6:93:35:89:58:e1:30:bd:df:81:3d:73:e5:fb:21:a8:1e:f2:
12:28:96:a0:b9:48:8d:f6:11:0a:ef:f3:a2:22:94:54:5a:9e:
a5:1b:32:e3:18:dc:ca:a3:76:24:1f:1e:f1:dd:fe:0b:f2:0b:
06:78:06:54:f7:a6:dd:25:e6:d6:38:d2:48:59:0b:26:0e:7e:
32:45:ba:5f:1e:ea:c8:61:c7:b7:57:27:c3:87:16:96:83:72:
7b:12:2c:61:77:39:ba:ed:e7:b6:06:fd:aa:e7:cb:fb:1e:eb:
e3:4c:54:6b:df:6b:90:bc:02:2e:0d:02:f3:99:98:57:f2:fd:
72:36:7a:88:c0:5d:7c:50:84:21:89:01:23:41:69:97:ef:c1:
21:40:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:01:05 2025 by rpki-client