Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/2CP7B5zhTLcxwJmx0t8p2trDdZs.roa
File: 2CP7B5zhTLcxwJmx0t8p2trDdZs.roa (raw, json)
Hash identifier: w9DkAQvXJq2HzTHCOO/Vc0Hf2HRt7Go2CnhNEh5jWME=
Subject key identifier: D8:23:FB:07:9C:E1:4C:B7:31:C0:99:B1:D2:DF:29:DA:DA:C3:75:9B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0199527F451EE861D1EF4F50B364F69A551D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/2CP7B5zhTLcxwJmx0t8p2trDdZs.roa
Signing time: Tue 16 Sep 2025 12:28:16 +0000
ROA not before: Tue 16 Sep 2025 12:28:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199174
IP address blocks: 185.81.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Sep 2025 22:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:7f:45:1e:e8:61:d1:ef:4f:50:b3:64:f6:9a:55:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 16 12:28:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d823fb079ce14cb731c099b1d2df29dadac3759b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:8a:34:af:51:a4:89:7f:6d:d0:ce:17:cc:
f3:c3:b0:05:e5:56:49:c2:f6:a3:77:9c:2a:f5:1e:
8d:76:41:54:94:5d:f9:c7:6d:4b:9c:07:1c:3e:ea:
0f:8c:33:2b:18:e8:ac:26:6f:07:c3:10:74:6c:02:
32:fe:16:6b:2c:c3:2f:e6:a8:15:84:d5:d8:e9:79:
a0:f3:dd:0f:72:9e:62:c2:78:b4:aa:0b:11:77:4e:
cc:11:b6:2c:6a:46:99:10:0e:ef:6c:bb:09:c7:b9:
7d:78:55:80:59:73:65:86:15:cb:4f:e2:92:ca:ed:
21:55:df:8f:f3:66:96:5a:21:eb:29:8d:3d:1e:e6:
6a:79:80:30:4f:0f:42:97:32:65:0e:50:e2:11:21:
15:cf:b3:11:91:dd:b1:ce:3b:1b:fb:c2:12:c6:f4:
30:59:aa:13:fb:04:a2:5a:27:fe:ab:3f:79:48:26:
96:b3:42:9c:cd:71:00:c1:24:23:05:f3:99:a3:41:
eb:cb:e9:1c:fa:be:fa:ab:c5:80:b7:bb:51:a6:88:
0e:bb:0f:08:19:e3:47:31:bd:1f:59:4c:14:e3:9e:
94:78:76:c1:72:be:a3:aa:14:ea:af:aa:a7:34:3f:
2e:00:85:e4:a5:40:c0:ce:22:55:43:06:21:1a:12:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:FB:07:9C:E1:4C:B7:31:C0:99:B1:D2:DF:29:DA:DA:C3:75:9B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/2CP7B5zhTLcxwJmx0t8p2trDdZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:9f:b9:d4:66:7c:a7:c8:06:2a:a2:ef:1d:86:08:7b:61:38:
e3:89:6a:42:98:ae:79:a5:1d:78:1f:c8:8f:30:21:82:e6:8c:
53:3e:89:9d:1a:b5:bd:35:fe:fb:30:33:7e:eb:89:ad:4f:1c:
09:ca:12:8b:f8:3f:f9:dc:31:27:60:19:d1:ba:f4:a5:f3:86:
56:55:93:ef:cb:2f:90:95:e8:bd:93:3a:db:78:9b:79:df:99:
f8:43:66:1c:3c:20:a0:93:3a:09:29:6f:28:b2:00:a2:29:a6:
cc:af:a7:a0:fd:1c:50:f7:d5:01:eb:13:e9:a3:97:aa:30:25:
ac:dc:5f:18:95:36:c8:e2:ed:36:e2:84:0d:0b:d2:1e:93:8e:
f2:f7:df:2a:7a:98:86:2a:e7:d4:68:0c:bd:03:2c:a3:2b:02:
02:97:bf:84:d2:fc:22:b6:54:0f:ac:a6:20:a6:04:7c:2a:ca:
3e:0b:c0:f6:fd:9a:62:89:f3:b0:d0:00:6d:dd:70:cc:d5:ff:
7b:e9:96:e0:57:7d:d2:66:27:50:70:50:70:50:7c:1a:b0:34:
36:49:8e:5d:ca:e2:2e:40:33:5f:8e:94:56:64:d3:96:e8:f2:
d4:96:6e:dc:e3:39:3d:68:7b:df:0c:2c:c3:e9:35:f3:e1:22:
83:c1:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:29:20 2025 by rpki-client