Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/GQ0CxxzmGMIf26o36jMV1rwO04E.roa
File: GQ0CxxzmGMIf26o36jMV1rwO04E.roa (raw, json)
Hash identifier: UIjAedFUmI0lEi3/vw17QvXO+LsVSLHEuXqgk5BpOhU=
Subject key identifier: 19:0D:02:C7:1C:E6:18:C2:1F:DB:AA:37:EA:33:15:D6:BC:0E:D3:81
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 0198559DAB7CF1721E3CB56152CD61ED4074
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/GQ0CxxzmGMIf26o36jMV1rwO04E.roa
Signing time: Tue 29 Jul 2025 09:57:33 +0000
ROA not before: Tue 29 Jul 2025 09:57:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35485
IP address blocks: 93.94.32.0/24 maxlen: 24
93.94.33.0/24 maxlen: 24
93.94.34.0/24 maxlen: 24
93.94.35.0/24 maxlen: 24
93.94.37.0/24 maxlen: 24
93.94.38.0/24 maxlen: 24
93.174.64.0/21 maxlen: 24
158.58.136.0/21 maxlen: 24
185.84.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 13:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:9d:ab:7c:f1:72:1e:3c:b5:61:52:cd:61:ed:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Jul 29 09:57:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190d02c71ce618c21fdbaa37ea3315d6bc0ed381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:76:b2:85:8f:01:fa:74:9a:ba:f2:24:0c:
35:dd:8a:5f:f9:ff:af:69:37:47:4a:6e:b4:3b:28:
89:12:69:78:6d:a7:76:cf:52:4f:73:05:e4:4a:10:
f2:b2:da:83:51:8f:af:be:71:31:a6:7e:7b:38:99:
96:1b:0f:70:ee:8b:bf:3e:fa:e4:46:87:6f:e2:32:
2d:08:7c:b3:04:69:89:ef:f1:f8:02:2f:0d:ff:d0:
81:dc:be:34:bd:75:b7:47:e1:5a:55:8e:be:04:93:
19:d8:6c:fd:d1:d0:72:ff:90:de:87:96:e0:9d:63:
36:35:6d:ce:7a:28:40:0e:00:f9:6a:bf:07:e4:bb:
de:5c:e7:7d:cb:a7:52:60:0f:7a:43:b3:48:e9:48:
46:c2:cd:fc:5c:17:7c:0f:7d:28:b3:05:90:e1:e7:
94:2f:ef:32:d0:12:22:0a:18:4e:cf:a6:12:f7:e4:
94:4b:cc:a2:f8:bf:3f:e6:22:5a:94:cb:92:0f:3d:
c4:72:dd:09:c5:fb:fc:74:67:3e:be:44:f9:0f:cd:
9f:87:b8:04:e2:c0:0b:9f:0a:f3:43:e6:ed:69:ca:
90:22:47:10:dc:67:bd:59:9e:62:e4:5f:87:85:c4:
76:7f:58:98:45:36:3b:8a:51:ae:b8:3c:b5:41:34:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:02:C7:1C:E6:18:C2:1F:DB:AA:37:EA:33:15:D6:BC:0E:D3:81
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/GQ0CxxzmGMIf26o36jMV1rwO04E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.32.0/22
93.94.37.0-93.94.38.255
93.174.64.0/21
158.58.136.0/21
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:eb:2e:3e:c1:40:ef:30:fa:91:5d:69:aa:c4:da:a6:cd:1e:
05:b3:39:a8:4c:d4:83:63:05:04:af:ad:aa:70:aa:70:b8:10:
f2:4c:f6:de:4a:cc:93:4c:b7:7d:e6:28:28:0f:04:76:b1:16:
8f:87:df:75:35:c2:a1:44:a3:86:3c:05:88:ac:4f:f7:20:50:
f7:44:b2:96:2d:fa:03:d9:23:1e:c8:59:72:5b:cb:10:d0:b0:
9e:b7:0d:e7:1b:78:b0:0d:0c:e7:66:f9:4d:0e:56:ff:8c:61:
7a:37:a9:9f:f7:67:5b:e6:fb:42:1f:2c:92:7b:dd:36:78:a3:
d8:8c:59:9c:10:f7:2d:d1:e0:14:c5:5d:c9:73:1f:1f:ab:83:
b3:d9:4e:93:ab:95:c9:7f:9d:cb:d9:a6:b6:9b:11:54:1f:88:
0f:4b:9b:14:39:31:08:d1:a4:13:e4:a7:24:7e:19:69:c1:6b:
af:86:ed:b9:c1:af:74:8d:40:47:38:bc:40:c5:9b:c3:7d:f5:
69:f8:69:55:e2:6e:39:de:12:d4:22:9b:dd:eb:4f:2a:cb:81:
e9:e9:b9:b3:a8:ac:8d:b1:cf:93:4c:c4:70:b3:6f:67:62:a0:
44:31:88:4c:ea:a0:0e:2d:25:bd:3e:e9:99:6c:00:91:61:2d:
3a:df:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:22 2025 by rpki-client