Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/fuPuVgrWkzi1RtcD3D28njSkAoc.roa
File: fuPuVgrWkzi1RtcD3D28njSkAoc.roa (raw, json)
Hash identifier: OBVnM/1PaCCLm2y5uyTYx3wV99WmL/XntFk/ckU26z0=
Subject key identifier: 7E:E3:EE:56:0A:D6:93:38:B5:46:D7:03:DC:3D:BC:9E:34:A4:02:87
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0196C8D6504C45B8FF6DD47E8D9310D9A237
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/fuPuVgrWkzi1RtcD3D28njSkAoc.roa
Signing time: Tue 13 May 2025 08:50:10 +0000
ROA not before: Tue 13 May 2025 08:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 46.31.76.0/24 maxlen: 24
46.31.78.0/24 maxlen: 24
46.31.79.0/24 maxlen: 24
85.117.238.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
185.17.115.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:d6:50:4c:45:b8:ff:6d:d4:7e:8d:93:10:d9:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 13 08:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee3ee560ad69338b546d703dc3dbc9e34a40287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:22:02:d8:a4:41:8e:4b:7d:b5:9a:78:cc:92:
2a:33:c2:9e:5a:4b:70:0a:aa:70:df:11:35:07:95:
27:ff:e1:d4:54:57:e1:ea:cb:e0:36:eb:2b:c8:ed:
21:7b:2b:27:34:70:b0:f6:ef:60:2d:aa:53:98:5f:
81:2e:25:4d:29:17:6a:85:bf:01:74:1b:37:05:81:
36:89:41:29:50:f4:ea:73:68:cc:e0:e7:c1:43:39:
bb:a2:34:cb:4f:d0:b2:dd:38:69:37:82:17:d0:80:
4a:68:bc:40:f5:9d:93:8e:13:60:c5:e4:27:f6:bf:
1a:cd:56:d4:f3:61:9f:63:66:b4:06:23:7a:36:0f:
f3:2e:24:86:b0:51:89:bd:02:39:33:66:59:6d:ae:
c4:cc:a8:5f:5e:83:87:ed:2d:56:47:71:b6:18:35:
0a:9a:cd:08:ab:b6:ff:14:8d:f8:97:0a:97:42:12:
6f:11:5b:81:57:d4:fd:e9:37:28:34:da:c9:48:e7:
7e:b9:7a:d1:56:63:ae:ef:3d:78:0f:b8:12:06:e0:
61:8f:85:d7:d8:5b:44:2a:9a:a3:f8:b9:38:34:52:
5c:43:58:29:15:3e:46:72:4b:49:6e:8d:2a:36:16:
9c:4c:e7:84:90:51:fd:1d:5d:74:87:50:89:fb:86:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:EE:56:0A:D6:93:38:B5:46:D7:03:DC:3D:BC:9E:34:A4:02:87
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/fuPuVgrWkzi1RtcD3D28njSkAoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
46.31.78.0/23
85.117.238.0/24
185.17.113.0-185.17.115.255
185.73.200.0/24
185.73.203.0/24
Signature Algorithm: sha256WithRSAEncryption
93:43:0f:5a:13:00:9b:b3:89:63:aa:06:22:c6:1f:b6:85:99:
01:99:9a:22:02:f4:ef:a5:10:7b:d6:a2:4f:45:1e:ce:a0:0d:
a5:5e:bd:11:0b:84:92:de:c5:1f:4e:dd:1b:16:e9:49:1e:ec:
72:e8:97:bd:d6:63:aa:01:c6:82:7d:4e:ec:0f:5f:86:25:3f:
8a:ff:10:4d:67:f0:43:31:f3:89:04:da:d6:61:34:22:5e:8d:
b4:cc:1c:51:12:54:b7:ff:16:e4:e8:92:99:ff:51:8f:f9:05:
9c:1c:a5:ab:b2:9b:8a:2c:1e:ec:db:00:fe:b6:34:fe:df:f1:
11:1f:3d:f9:84:87:af:99:78:e9:65:ea:38:c3:a5:f8:00:00:
48:d2:93:ef:f6:14:27:0d:f8:0e:59:ff:05:1a:6b:b4:48:11:
00:b2:9f:b7:c5:f0:bf:9b:b4:c0:71:7a:83:93:7b:20:96:76:
4f:90:ec:4d:5a:94:55:d9:95:13:f4:71:31:fd:68:81:b6:aa:
4d:a1:d1:88:59:cd:38:6f:72:0f:07:57:d4:42:d6:ab:45:c8:
a2:6c:d5:95:27:58:2a:28:8a:6e:2e:6e:05:fd:65:77:22:a0:
0c:d6:33:30:37:84:07:41:09:38:54:9c:8c:72:52:e7:ca:7f:
c4:c6:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:28:48 2025 by rpki-client