Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/97_IHaiKmoOsk6Mm0zzcz2eSxDE.roa
File: 97_IHaiKmoOsk6Mm0zzcz2eSxDE.roa (raw, json)
Hash identifier: YJVYXd+7LlWNLiCxUbTCaFWlQ1IE5ZS9HS6PJomkLjg=
Subject key identifier: F7:BF:C8:1D:A8:8A:9A:83:AC:93:A3:26:D3:3C:DC:CF:67:92:C4:31
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0199527F44AD5F32114CD10FB8E2B73C4191
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/97_IHaiKmoOsk6Mm0zzcz2eSxDE.roa
Signing time: Tue 16 Sep 2025 12:28:16 +0000
ROA not before: Tue 16 Sep 2025 12:28:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199160
IP address blocks: 185.81.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Sep 2025 22:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:7f:44:ad:5f:32:11:4c:d1:0f:b8:e2:b7:3c:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 16 12:28:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7bfc81da88a9a83ac93a326d33cdccf6792c431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:5b:35:02:9c:8a:17:8a:0b:44:d7:5d:ac:
ce:24:f2:70:ff:4d:46:3c:0f:e2:94:3e:4c:60:bb:
04:ca:da:c6:5a:d9:48:f8:a0:cf:2c:58:4d:8b:c8:
7b:0b:6b:0a:1f:6c:28:c3:18:bb:80:11:51:a4:cf:
e8:bb:36:6f:07:8a:7a:16:12:e0:b3:c4:42:69:d9:
19:0d:50:c4:2e:be:78:21:0b:13:25:c3:55:c4:db:
b1:6e:61:38:dd:8f:6e:a1:0b:16:96:cf:ec:4f:e1:
f8:98:34:de:f2:10:9c:ce:bf:a5:6d:71:7f:f4:07:
ff:7c:8f:74:ac:63:c6:23:7c:73:fb:f2:5a:10:22:
f4:07:33:df:b0:7b:49:41:a7:0f:09:af:aa:19:43:
15:92:70:4c:11:e3:b6:ae:61:b0:b1:f3:71:3b:5a:
59:02:42:de:a1:6e:96:74:b1:81:81:d8:56:6c:be:
ac:21:54:e1:93:cc:58:13:98:e4:33:79:85:c9:08:
0b:d2:4e:d7:b5:45:6b:90:f7:14:51:aa:cf:e5:2c:
c1:13:d7:8f:41:5c:d0:e7:29:04:cc:fc:4c:a6:04:
2b:71:e8:f1:4f:9f:b3:4b:4d:1b:76:00:41:55:bc:
ec:75:43:36:c1:c9:9b:5b:67:8c:95:d2:72:15:98:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:C8:1D:A8:8A:9A:83:AC:93:A3:26:D3:3C:DC:CF:67:92:C4:31
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/97_IHaiKmoOsk6Mm0zzcz2eSxDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:dc:37:1e:23:01:fe:57:5d:f6:3c:0e:45:d3:b4:c3:58:a1:
d3:36:a7:32:f1:74:ee:a2:5c:e9:4f:c2:9a:a7:a4:be:6c:8e:
78:84:a6:dc:d5:51:f6:92:a7:99:b7:f2:50:9b:c8:ad:1a:96:
34:d2:c6:33:82:0b:05:45:80:ae:ab:b0:69:1b:ea:37:de:4d:
ad:0a:ff:09:89:9e:dc:69:e0:f0:5d:79:24:a0:a4:98:63:55:
44:51:ac:1e:63:84:6e:d0:21:40:4c:43:d6:29:dd:47:21:da:
50:11:c2:19:26:4f:07:4c:79:0b:31:45:03:70:56:09:dc:04:
43:87:77:32:88:f9:ff:a3:20:f3:24:61:df:95:44:78:24:7d:
1a:76:0b:bb:8b:81:b3:d3:50:ac:58:8f:58:b7:30:4e:a1:e8:
4c:df:99:65:28:28:8e:29:13:cb:db:dc:2a:57:0e:8c:bf:34:
49:59:f0:8f:a5:98:90:cc:19:42:40:9d:96:9b:cb:32:f4:f3:
70:dd:ea:78:cf:2d:2e:1c:65:3c:8b:cd:0d:e2:33:75:47:c5:
c0:ca:87:b1:0d:b2:45:7a:e0:1a:eb:c0:e5:06:87:34:0b:04:
bb:91:2b:e5:4a:80:06:fc:7f:5d:60:fd:70:d9:10:9c:37:55:
32:f7:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:19 2025 by rpki-client