Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/xue1YdZa4_fAxfLyda6CpkT5RZM.roa
File: xue1YdZa4_fAxfLyda6CpkT5RZM.roa (raw, json)
Hash identifier: b0xit6GjhLgG0yqSIIjOMA2yg0LK09vFPhDh29HY5hc=
Subject key identifier: C6:E7:B5:61:D6:5A:E3:F7:C0:C5:F2:F2:75:AE:82:A6:44:F9:45:93
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0197127B898DBD53F47ACBF223B38497ACC0
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/xue1YdZa4_fAxfLyda6CpkT5RZM.roa
Signing time: Tue 27 May 2025 16:02:55 +0000
ROA not before: Tue 27 May 2025 16:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.168.0/22 maxlen: 22
213.182.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 19:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:7b:89:8d:bd:53:f4:7a:cb:f2:23:b3:84:97:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: May 27 16:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e7b561d65ae3f7c0c5f2f275ae82a644f94593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:46:2d:60:8e:88:be:b9:77:e9:a5:70:0b:
89:35:56:39:90:92:ba:54:62:29:58:a2:52:ca:84:
a6:12:2d:ca:66:7d:55:19:d7:42:ce:8c:ee:3f:3c:
c6:3f:1a:c9:cc:9e:a0:f9:5c:b9:04:c7:61:a5:ac:
78:22:a2:c3:97:a9:40:38:b4:c8:7d:dc:18:ae:0e:
68:a9:2c:8a:51:67:26:92:57:fd:e2:92:6b:9d:29:
93:19:4b:ee:11:ff:1c:76:5b:52:9a:b3:92:96:f1:
04:35:34:26:84:ba:b4:61:3d:83:f3:e9:6b:2e:c0:
2e:3c:0a:cf:2a:bd:f6:10:a6:48:ea:3d:de:02:83:
6b:f3:0f:39:55:d1:b0:8b:31:72:54:2a:06:d2:89:
98:3d:d5:55:73:58:1a:cb:f3:85:28:38:73:c9:40:
7f:c5:ba:1f:2e:e8:9f:99:29:e4:a0:d5:45:07:12:
77:d4:c3:0e:f8:e5:1a:14:60:46:e4:81:ea:eb:87:
12:ca:51:35:00:e0:6c:96:7b:2d:b6:9a:7c:58:e2:
23:92:2b:e3:1e:78:12:89:29:21:79:30:cf:d0:fa:
70:d1:d7:31:af:b0:b1:73:1a:7a:c5:b9:09:4d:29:
47:88:ae:10:89:3a:bb:37:74:69:76:8e:e8:21:21:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:B5:61:D6:5A:E3:F7:C0:C5:F2:F2:75:AE:82:A6:44:F9:45:93
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/xue1YdZa4_fAxfLyda6CpkT5RZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.168.0/22
213.182.195.0/24
Signature Algorithm: sha256WithRSAEncryption
63:69:df:f1:68:72:60:c2:19:48:c7:83:ee:85:06:b8:46:68:
3a:f3:62:63:97:58:32:35:d9:51:c7:d3:91:cc:a1:91:98:98:
02:9e:f4:ba:39:21:78:26:dc:3d:3c:46:ba:91:de:37:aa:e0:
52:1d:51:9c:d2:b9:a1:a9:e4:a4:72:d5:c0:9a:94:32:c4:99:
5f:fa:d1:1e:8b:58:65:8a:19:27:96:f8:11:90:73:88:3f:63:
70:c0:59:d7:52:74:6e:a2:8e:92:17:12:c0:5a:d5:cb:01:58:
3b:74:f0:b6:88:7d:d0:1e:b1:80:bb:ff:c4:55:f9:5e:7f:0a:
a9:ca:ff:fe:84:42:b1:be:44:a0:c3:a5:74:55:c2:a4:c0:fc:
cb:cf:e7:75:4b:4f:07:48:79:2f:86:07:e4:d6:15:ba:69:c4:
ad:17:c1:cf:b7:53:78:28:40:21:90:14:f8:11:61:19:0d:36:
0f:a2:58:a2:ec:3c:80:cb:33:9e:ef:94:d3:03:22:89:bc:db:
45:f5:3d:45:93:57:8e:11:50:cf:53:da:d4:3b:81:47:2a:d8:
1d:15:e3:56:f8:15:28:af:c6:3e:0b:b1:74:0c:4e:d1:aa:0f:
97:93:d6:4d:14:66:10:bf:39:5c:07:04:ed:6e:c2:43:e5:75:
1c:a0:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:26 2025 by rpki-client