Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7GoG8non7UPEmGX74y5_QReR6W8.roa
File: 7GoG8non7UPEmGX74y5_QReR6W8.roa (raw, json)
Hash identifier: jhiWUYNSu8fytRr9DYQFQfbt3oqSlOgwylLrCyWgVBY=
Subject key identifier: EC:6A:06:F2:7A:27:ED:43:C4:98:65:FB:E3:2E:7F:41:17:91:E9:6F
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0196CBCA8971C7AEE0C7073619944D486F3D
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7GoG8non7UPEmGX74y5_QReR6W8.roa
Signing time: Tue 13 May 2025 22:36:10 +0000
ROA not before: Tue 13 May 2025 22:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 46.31.78.0/24 maxlen: 24
46.31.79.0/24 maxlen: 24
85.117.238.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
185.17.115.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 11:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:ca:89:71:c7:ae:e0:c7:07:36:19:94:4d:48:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 13 22:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec6a06f27a27ed43c49865fbe32e7f411791e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:9c:dc:a2:9e:e0:c6:00:f1:cb:a1:71:74:
ad:1e:cf:84:aa:e3:e3:60:b1:d8:d7:02:98:7a:20:
06:34:ae:5e:c6:29:4c:1a:14:4a:63:c5:ee:ae:ad:
f3:bd:c5:79:77:20:69:f3:e5:0d:43:17:21:25:78:
70:1e:82:78:7b:e2:44:32:ac:75:fb:bf:0f:00:f9:
ce:16:a2:2c:33:95:7e:1e:b4:8d:2c:d5:cd:96:3f:
89:f4:61:68:72:2b:5f:85:db:cd:57:bb:e2:6e:8f:
fc:6b:74:bb:94:a6:ab:e3:6f:a2:04:37:ba:b7:75:
03:d5:98:7e:60:18:c0:19:7a:6a:96:96:7a:30:50:
67:71:9e:fe:e0:09:a7:2d:59:5a:b1:e8:65:6d:dc:
0b:a2:e1:f8:60:c6:5a:a6:af:3b:10:65:2c:88:ae:
b1:f0:56:ef:7a:51:8c:5c:82:16:59:76:32:93:b9:
2d:be:41:38:f7:e6:1f:32:18:b2:16:c9:fd:3c:c3:
a7:29:b1:06:48:d0:04:12:df:60:19:3a:22:3b:7e:
8e:96:ff:81:f9:1f:14:f6:40:2c:6d:bd:0c:c8:eb:
8c:c2:7e:4c:9f:11:77:cc:92:f9:1e:12:12:2d:61:
34:21:49:12:0e:bf:b2:4e:c1:22:e8:f5:9b:0a:05:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:06:F2:7A:27:ED:43:C4:98:65:FB:E3:2E:7F:41:17:91:E9:6F
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7GoG8non7UPEmGX74y5_QReR6W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/23
85.117.238.0/24
185.17.113.0-185.17.115.255
185.73.200.0/24
185.73.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:78:48:d0:6a:67:ae:12:9a:b7:b8:e2:8c:29:c1:50:ed:b9:
01:8a:f9:98:7b:52:3e:1b:b1:87:be:d0:78:a3:29:cd:27:02:
f7:99:4a:61:ef:74:7e:ae:00:35:07:73:5d:68:c0:ff:a8:12:
96:26:28:0f:64:f5:93:04:80:90:34:ec:4c:24:6a:87:c6:20:
2c:81:4c:3b:bc:04:42:d7:d0:b9:e1:00:e8:7e:15:ed:cc:d9:
51:3a:87:25:da:46:3d:fb:c8:72:30:c6:84:32:d8:0c:1f:3f:
9a:9c:ff:fb:ce:da:76:31:f8:e5:ed:0e:21:c6:16:21:a0:45:
98:ce:6d:02:39:6d:91:15:e4:0c:5c:6e:59:7d:cc:8a:ca:90:
44:4c:6e:fe:c3:6e:e0:0d:7f:28:c3:c5:bd:3e:d2:f6:57:a4:
fe:de:b4:cc:09:4e:7c:95:38:45:b3:7f:25:89:6f:8b:27:7d:
65:ac:27:4d:02:af:ea:a1:48:66:38:38:30:89:b6:a2:e6:be:
6e:25:95:70:1a:c9:89:49:92:48:76:bc:ae:cf:4c:90:96:ed:
10:28:a4:82:1f:1d:62:8c:68:bd:57:cc:88:57:e5:77:73:32:
57:bf:8c:83:f8:73:c0:88:8a:3d:29:85:8e:ca:c4:16:c8:b7:
bd:01:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:40 2025 by rpki-client