Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/p8QM2iZL_24wnL05DMLRYx5c-FY.roa
File: p8QM2iZL_24wnL05DMLRYx5c-FY.roa (raw, json)
Hash identifier: W2PUQoGs67QK+W9ZjiCOKRONnrZx4/UZc1CT/+B5PyA=
Subject key identifier: A7:C4:0C:DA:26:4B:FF:6E:30:9C:BD:39:0C:C2:D1:63:1E:5C:F8:56
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0196F3370ED2852559B64141272D4205A836
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/p8QM2iZL_24wnL05DMLRYx5c-FY.roa
Signing time: Wed 21 May 2025 14:19:53 +0000
ROA not before: Wed 21 May 2025 14:19:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 94.154.183.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.16.0/23 maxlen: 23
217.197.168.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 18:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:37:0e:d2:85:25:59:b6:41:41:27:2d:42:05:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 21 14:19:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7c40cda264bff6e309cbd390cc2d1631e5cf856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:51:ad:88:7f:1b:41:b8:25:91:dc:b6:78:
38:e1:a9:a9:ec:d5:6b:de:7f:44:d3:f4:5a:cd:1b:
f6:3d:64:5a:4d:ca:ab:d5:ae:23:e2:93:67:8a:18:
a3:f3:1d:fc:5e:18:f3:cc:83:16:8e:f6:6e:1e:be:
2c:1a:12:09:18:af:25:df:4d:ae:f0:c5:f6:20:be:
5a:57:8a:82:99:56:10:b2:77:28:3a:6e:2a:2a:5c:
4f:74:2c:e5:2d:68:b2:32:1d:dc:ce:9e:5c:ee:3e:
2c:bc:8f:f9:95:7c:d7:99:89:be:b2:b3:81:2e:e3:
b4:b9:d5:35:3f:5e:8f:b7:f3:d3:21:a8:af:bf:8a:
16:7b:35:e5:b9:64:fa:1f:a6:42:87:6a:fb:10:a4:
08:0f:e4:06:6f:e3:a8:10:e5:2e:b4:cf:19:da:1f:
5f:a6:f1:33:5b:9b:d4:1c:14:c7:bc:bc:6b:26:97:
33:9b:8a:41:1d:59:f7:24:43:2c:34:cd:2d:dd:c5:
5c:0f:dd:86:8f:a1:cd:eb:14:36:ed:c5:de:e6:1d:
05:86:63:0f:76:03:27:f8:90:d2:a0:33:c6:d4:fd:
63:fb:50:a1:9c:bb:b9:9a:0a:a3:f8:80:e0:03:63:
e6:5e:64:f8:61:db:00:84:f2:27:8d:c7:8c:56:e9:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:0C:DA:26:4B:FF:6E:30:9C:BD:39:0C:C2:D1:63:1E:5C:F8:56
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/p8QM2iZL_24wnL05DMLRYx5c-FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.183.0/24
162.218.95.0/24
212.60.16.0/23
217.197.168.0/24
217.197.170.0/23
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
0e:c6:fa:4d:77:4e:63:ee:1a:6d:ef:e9:1e:31:09:9b:3f:17:
6c:af:c6:87:b6:ea:23:91:d3:ae:ff:6e:20:b5:92:34:e3:c0:
f6:6a:c1:ab:f5:37:c8:bf:e3:c0:07:e7:16:b5:a4:05:a1:8f:
a7:62:9a:66:a6:a4:b4:61:77:23:43:88:b0:cb:f1:80:4a:29:
fd:bd:c5:84:7b:42:83:2b:76:2e:54:75:a1:f7:4b:36:02:78:
0d:b2:4d:19:f2:af:10:a3:ec:01:a2:b3:98:33:88:a9:1b:52:
5f:e6:bb:31:82:64:81:83:ad:d4:25:e1:b6:0c:50:10:a8:c9:
f4:f5:45:6b:46:9c:12:c8:cd:66:3f:c6:bf:ee:18:97:82:9f:
1c:b3:d4:1b:81:f5:21:1d:b7:d5:de:e4:96:5a:fd:dd:7b:ba:
91:4c:e5:29:78:74:77:f1:21:b1:2c:fa:47:b2:72:5e:62:2e:
fd:f7:36:43:34:95:7b:db:ae:03:b7:bf:c8:1b:ae:77:5e:a6:
06:bb:7f:e5:2e:8f:7b:b7:b8:21:51:37:51:a4:52:93:9e:7a:
16:d5:62:ad:b8:ad:60:d4:a6:24:1a:c7:9d:67:51:50:49:d8:
b3:b5:d3:74:4f:f2:a1:4c:f0:35:1f:cf:e9:06:0a:3b:0e:3f:
c4:cd:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:15 2025 by rpki-client