Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-jeu0gtfxOKqcE1d_5Bcr0MJXg.roa
File: R-jeu0gtfxOKqcE1d_5Bcr0MJXg.roa (raw, json)
Hash identifier: vail5PfEHX+BlSQGYnlY2ylCv8B4mtTzF8rwtjTADyw=
Subject key identifier: 47:E8:DE:BB:48:2D:7F:13:8A:A9:C1:35:77:FE:41:72:BD:0C:25:78
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01986BC725194087D0292ACC895987DBF4FB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-jeu0gtfxOKqcE1d_5Bcr0MJXg.roa
Signing time: Sat 02 Aug 2025 17:14:29 +0000
ROA not before: Sat 02 Aug 2025 17:14:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.183.150.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 06:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:c7:25:19:40:87:d0:29:2a:cc:89:59:87:db:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 17:14:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47e8debb482d7f138aa9c13577fe4172bd0c2578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:2a:c7:2a:a6:b0:7f:9e:32:56:8f:b9:d9:
f9:2b:24:9b:8c:56:94:2e:ad:7d:a7:d9:3f:d8:da:
bc:29:8d:bf:24:9a:2e:21:e2:3c:72:d9:7c:03:24:
da:e7:c7:f2:90:6c:d2:47:46:95:bc:f1:87:e6:1d:
ff:8e:bf:2a:03:b3:76:db:2a:22:c1:74:f8:78:83:
5a:0b:4b:e6:8f:12:08:c6:e4:e9:80:41:8e:75:3c:
d5:85:52:df:37:f5:b8:4f:2a:b5:24:15:46:0c:49:
14:91:41:96:38:ae:ed:3b:02:45:84:51:e8:0e:cf:
20:e6:35:76:48:10:66:f5:7c:4c:2e:63:3c:82:bb:
94:03:75:ac:27:f1:70:7d:1e:59:84:4d:90:d4:81:
ee:78:ed:1c:8d:61:15:dd:b7:5a:33:5e:f4:0b:63:
ae:93:e4:c5:70:20:6f:e2:92:81:d8:86:16:e3:d2:
c2:cd:02:07:a2:f6:35:ab:61:59:7f:2a:03:ba:f5:
e2:4a:ab:11:0b:85:27:04:50:ea:e4:39:6c:e1:40:
51:04:d8:7c:d8:87:44:01:1b:84:77:8b:b0:fe:52:
52:28:a2:c6:9a:b8:1e:a0:d7:8f:40:d6:34:5a:2e:
7e:99:25:08:15:71:3f:3d:84:27:7a:90:aa:0c:a3:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:DE:BB:48:2D:7F:13:8A:A9:C1:35:77:FE:41:72:BD:0C:25:78
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-jeu0gtfxOKqcE1d_5Bcr0MJXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
217.60.12.0/22
217.60.24.0/22
217.60.60.0/22
217.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
35:3c:f8:28:50:00:4d:5b:ea:84:18:7a:79:0b:55:0b:10:9c:
ad:dd:c1:54:3f:07:fd:5c:3b:78:5f:d3:de:4f:e4:5b:20:85:
b9:17:68:c1:3a:07:64:c8:bc:71:49:24:e0:9e:4e:4b:b9:df:
1b:35:22:e8:0b:80:a6:4e:89:fe:55:cb:ac:77:99:25:a2:98:
96:f5:5e:93:5d:8a:2c:03:8c:57:95:4f:12:e5:85:b8:53:60:
5f:b5:4e:39:56:b1:e9:b6:9a:fa:02:c1:eb:8b:28:e1:5d:af:
3b:70:fb:de:c0:97:1d:55:df:92:df:bc:e1:df:ea:e3:6d:e3:
f0:08:dc:a0:94:b1:3f:79:bc:08:2e:49:af:6c:7a:39:a9:08:
98:7f:87:e2:69:e3:9c:69:6d:c4:cf:ba:83:60:22:f2:c7:ba:
8b:e7:18:70:27:0c:ea:0c:a6:80:fc:b2:56:53:b8:e8:c8:b7:
da:2a:eb:be:74:a8:92:1f:68:75:3d:1f:b8:77:82:ef:ca:b5:
2b:cc:ef:a7:64:50:47:90:0f:34:5f:68:99:8f:ae:09:be:8f:
9a:60:54:14:16:a0:ec:aa:34:84:08:48:d9:8a:03:98:84:61:
30:d7:ef:38:89:83:1e:cb:5c:7e:0f:ca:61:bd:4f:37:97:b8:
1e:0d:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:14 2025 by rpki-client