Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y0Eb7-sKpq0Iv9W-7I5MJGnD73E.roa
File: y0Eb7-sKpq0Iv9W-7I5MJGnD73E.roa (raw, json)
Hash identifier: uFxAaz7HehXSnHuCeAeDTVkmmBVFysRoYxFpGW4P0JY=
Subject key identifier: CB:41:1B:EF:EB:0A:A6:AD:08:BF:D5:BE:EC:8E:4C:24:69:C3:EF:71
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019864676F34D4D8531BECCFA7B1449F32C8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y0Eb7-sKpq0Iv9W-7I5MJGnD73E.roa
Signing time: Fri 01 Aug 2025 06:52:36 +0000
ROA not before: Fri 01 Aug 2025 06:52:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 93.113.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Aug 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:67:6f:34:d4:d8:53:1b:ec:cf:a7:b1:44:9f:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 1 06:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb411befeb0aa6ad08bfd5beec8e4c2469c3ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:71:99:96:e4:3c:3b:f3:25:4e:52:e9:cf:
ad:e4:6b:a3:c3:51:21:3a:76:d1:d6:5f:e7:83:c7:
8b:14:11:8a:04:99:1c:ef:c0:97:c0:ca:59:be:45:
5a:c3:a0:88:84:2e:28:67:5c:4a:b5:20:63:da:4b:
ee:b9:32:52:b0:e4:01:b8:d0:28:df:c9:d2:c2:2b:
f5:c4:68:86:1d:bb:ac:3a:2d:bd:cf:b2:f5:99:16:
e5:8e:70:84:51:1c:4f:28:ca:a2:7d:ce:45:3a:77:
19:fd:35:5a:f1:51:34:8f:37:ef:97:a0:fd:5a:2d:
db:22:49:63:ce:1b:65:65:69:5d:8f:b6:5d:9c:34:
be:8c:5d:52:e8:ef:c4:62:cc:1c:85:e5:90:4e:d3:
1e:0b:63:e3:d9:dd:94:7d:2a:f4:4e:86:00:3f:92:
2a:68:b0:f1:d4:a0:72:18:b0:c8:ea:4c:c2:e5:6c:
c7:56:76:87:70:a8:8d:e5:e0:f9:b3:d9:98:46:c9:
d3:fa:d2:60:6e:06:7f:9c:c7:83:45:25:4e:f3:0a:
ea:b1:8b:63:98:7c:86:db:d4:b7:ac:8c:a0:b0:82:
f6:8f:01:e9:63:c9:2d:4d:2f:1b:2a:21:6b:f7:51:
40:bd:c6:7b:31:c8:74:d5:5b:0a:94:f7:86:06:a1:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:1B:EF:EB:0A:A6:AD:08:BF:D5:BE:EC:8E:4C:24:69:C3:EF:71
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y0Eb7-sKpq0Iv9W-7I5MJGnD73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0/24
Signature Algorithm: sha256WithRSAEncryption
52:47:10:67:1c:f6:4d:d4:74:58:8a:b0:3d:b9:7e:cd:c5:1d:
8c:cd:30:ad:92:79:7a:45:e6:6e:6d:41:44:b6:89:f1:14:e1:
70:50:17:25:c1:72:93:dd:22:81:84:88:ed:cb:4d:de:12:88:
4a:c9:17:57:4d:ff:23:6d:17:c4:12:2b:2a:10:1a:4b:40:24:
97:40:82:f4:4d:33:7c:84:d2:94:f1:5e:54:d0:2e:1b:f7:f2:
04:fe:bd:7a:95:f5:16:2c:03:b7:f4:6c:2a:31:2b:14:4c:fb:
a9:95:a4:05:05:7a:b8:c9:4a:3d:56:df:63:ce:bb:93:cd:39:
04:d4:0b:b0:57:57:f4:23:20:7c:22:3b:8b:50:55:ca:99:a4:
87:51:3a:89:29:0f:7b:fe:47:9b:99:d9:d5:a3:f8:b4:69:22:
32:41:ac:d2:02:82:4b:7d:29:4d:e2:2c:87:bf:4d:aa:66:07:
86:b5:bd:a2:cd:69:01:5f:a1:9e:94:e0:21:4b:36:82:80:a9:
a3:6b:76:9b:ff:ac:c2:59:53:88:23:b1:aa:2c:96:cf:0b:81:
7f:02:21:9a:96:3d:3e:5d:71:ca:37:f9:77:b2:e6:b6:b5:62:
70:92:cf:1f:77:0a:79:3b:96:77:23:80:1a:69:c9:96:93:38:
8f:e1:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:00 2025 by rpki-client