Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/J51JOxiG0RyaJlgUDkK3qyXrheU.roa
File: J51JOxiG0RyaJlgUDkK3qyXrheU.roa (raw, json)
Hash identifier: /Se58+EpLP3LaO0i/zcgB+1Sz4+BqRm5OO2HWKy28cY=
Subject key identifier: 27:9D:49:3B:18:86:D1:1C:9A:26:58:14:0E:42:B7:AB:25:EB:85:E5
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0196C8D650E5B63A81B86DA65D56BF841995
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/J51JOxiG0RyaJlgUDkK3qyXrheU.roa
Signing time: Tue 13 May 2025 08:50:10 +0000
ROA not before: Tue 13 May 2025 08:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.73.200.0/22 maxlen: 22
185.73.200.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.202.0/24 maxlen: 24
185.165.77.0/24 maxlen: 24
2a04:7c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 May 2025 11:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:d6:50:e5:b6:3a:81:b8:6d:a6:5d:56:bf:84:19:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 13 08:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279d493b1886d11c9a2658140e42b7ab25eb85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:46:73:31:ae:b3:12:bc:f1:71:d1:81:8c:
f0:de:60:e6:d9:b2:86:16:55:4d:2c:c0:a0:be:de:
d6:2d:0c:cc:07:e0:e4:4a:41:8c:49:99:30:81:b7:
58:76:ad:e5:fd:ec:46:cc:d4:19:e3:00:7a:2f:ba:
d6:a1:23:e7:81:07:dd:0f:4b:c8:f3:42:e9:d8:46:
f0:d6:a5:c1:e8:f9:6f:81:e4:27:27:ed:b5:39:32:
fd:fd:f4:c2:bf:6b:2f:27:dd:4a:cf:b2:d5:cb:ce:
ff:ca:57:48:e9:a3:7a:4a:4d:6b:ba:26:f7:cd:4d:
3f:20:76:05:7b:54:dc:8b:4f:fe:c7:ac:d3:fb:cd:
33:30:23:12:c8:5b:f6:88:2f:9f:df:26:94:f0:54:
45:5c:87:fb:b9:5f:69:e5:bb:8d:7c:b7:07:b6:41:
7f:2c:28:4a:a2:80:77:ad:00:35:3a:31:b4:eb:07:
28:6e:88:a0:68:8f:d9:0b:8c:28:e2:f3:df:0d:4e:
19:fe:21:1a:3e:9d:c6:fa:47:3b:fb:72:2c:ed:b8:
7a:ff:4c:45:ed:76:77:4c:08:9c:fc:37:f6:7b:5a:
0e:df:15:77:6e:62:07:44:6a:9c:43:93:2a:35:1b:
29:27:03:3d:64:d7:21:46:64:de:61:ab:47:3e:11:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:49:3B:18:86:D1:1C:9A:26:58:14:0E:42:B7:AB:25:EB:85:E5
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/J51JOxiG0RyaJlgUDkK3qyXrheU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
185.17.113.0/24
185.73.200.0/22
185.165.77.0/24
IPv6:
2a04:7c1::/32
Signature Algorithm: sha256WithRSAEncryption
41:b9:34:e0:91:ea:63:13:69:e5:33:ab:a3:57:9c:df:4b:55:
be:5d:fb:2e:c7:10:af:cc:b6:c6:be:36:c9:6d:6d:23:de:ad:
84:ce:89:4b:cd:27:07:ea:2b:2c:88:de:ff:52:5f:93:cc:6b:
03:99:a0:e9:05:12:81:92:20:ac:ed:1e:48:91:55:8e:8e:f5:
23:1c:28:01:30:90:c3:e7:23:d6:08:51:fe:19:30:45:64:d5:
c6:88:b4:2c:3f:cc:cd:a2:fe:57:55:13:df:79:bb:4c:08:4d:
c6:85:1f:ee:10:9b:3c:94:a7:e3:e8:6d:ed:07:51:aa:00:52:
00:22:a7:6f:5d:02:2a:91:ef:bb:e8:c4:81:d7:82:a1:4e:60:
c3:b3:00:70:3f:ba:00:b2:3d:13:73:b4:b6:69:98:93:7e:a9:
2e:ed:cf:a3:e9:ea:58:de:5e:05:8c:4e:b0:08:97:ec:f5:8f:
88:d3:08:9d:3d:55:ef:74:34:bf:67:db:08:f2:64:f9:c8:9b:
dd:b5:77:08:6a:a5:53:48:4d:24:d0:ca:89:b5:bc:44:6c:28:
6b:b5:e5:f4:71:33:f9:2f:c5:8f:29:a1:92:1c:20:c9:c6:f4:
69:fe:b5:05:ce:39:04:6c:1c:82:ee:97:ff:fe:87:42:51:51:
a1:81:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:00 2025 by rpki-client