Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/sEYv1AwIqvgeNTQNZDWgyogH_CM.roa
File: sEYv1AwIqvgeNTQNZDWgyogH_CM.roa (raw, json)
Hash identifier: UZgXhY6vJgOjyUtKjnWvqpBYXQ0bF+CAvkM6RWjYdX4=
Subject key identifier: B0:46:2F:D4:0C:08:AA:F8:1E:35:34:0D:64:35:A0:CA:88:07:FC:23
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0197692B5991323CA128A6C88E2127EF1985
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/sEYv1AwIqvgeNTQNZDWgyogH_CM.roa
Signing time: Fri 13 Jun 2025 12:02:18 +0000
ROA not before: Fri 13 Jun 2025 12:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 91.204.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 12:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2b:59:91:32:3c:a1:28:a6:c8:8e:21:27:ef:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 13 12:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0462fd40c08aaf81e35340d6435a0ca8807fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:96:fa:bc:ca:05:ab:b2:04:a3:c1:d8:53:
df:06:ec:30:5f:ad:07:d0:b8:eb:cc:08:32:75:5d:
87:1a:2b:c5:5d:f5:e9:14:d1:4f:e5:6d:30:0a:bc:
d2:71:bb:66:52:9d:7f:a5:83:0e:34:73:65:e1:e4:
4e:a6:bd:8e:e0:7f:e3:49:1d:7b:57:6f:d5:64:20:
a1:dd:4f:7e:f2:21:08:b6:b4:23:10:66:ba:33:89:
57:33:99:07:60:fd:04:22:6f:55:49:63:75:3a:b7:
c3:a4:f3:13:71:0a:b0:91:a0:f4:f7:d1:28:c2:1a:
30:06:6d:f8:ac:54:8a:69:32:18:bb:f8:5a:49:8e:
ce:8f:ae:3a:0f:42:76:bf:43:6d:ed:d7:b9:bf:53:
97:ec:a0:2b:d4:b2:b5:c5:a0:55:6c:07:cb:fe:b2:
3e:46:47:84:db:d4:32:d0:a3:73:b1:e2:82:e8:ba:
fa:33:53:45:0a:29:36:68:5c:a0:94:66:4e:9a:39:
ca:cb:5f:8f:4d:ba:b5:57:68:34:94:de:c2:db:25:
12:78:cf:95:a3:03:b2:73:9c:14:a3:65:cd:51:d3:
e9:0a:fc:1f:95:f7:25:b6:52:88:04:dc:91:fe:b0:
35:db:87:48:22:18:bf:7e:a0:ae:eb:b3:61:1a:b5:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:2F:D4:0C:08:AA:F8:1E:35:34:0D:64:35:A0:CA:88:07:FC:23
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/sEYv1AwIqvgeNTQNZDWgyogH_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bb:a8:e2:5d:5a:45:c4:f7:62:df:5e:d3:a3:1e:7e:5f:b1:
b5:f6:c7:ea:22:d5:56:ae:52:6d:1e:0b:06:eb:92:06:40:12:
59:66:4f:f1:27:fa:99:cd:35:44:3e:54:1d:71:df:c9:79:15:
a7:04:63:ff:11:6b:24:3a:3b:bd:ea:91:61:c0:8b:79:b1:51:
57:40:45:5e:d4:99:0b:11:bc:fa:cf:2d:e9:13:e1:76:42:9b:
07:b2:ff:e5:e9:4d:cd:28:bc:64:03:2d:d4:de:a5:75:9c:86:
18:bb:4d:9c:55:3a:bc:2e:5e:c8:d7:47:9d:77:0d:44:f1:0b:
c2:0a:79:98:b4:35:65:17:f3:d5:62:96:cd:ff:98:1c:b8:96:
64:27:d8:d0:4e:05:71:95:19:b3:69:a2:83:ab:ae:70:1c:12:
6e:aa:ab:94:c1:81:33:b8:d0:83:f0:08:72:c0:de:0a:45:ff:
cd:f6:7f:56:6d:6b:2e:fe:2c:4b:b5:6c:1a:58:b7:6e:d2:d5:
d7:e7:78:9a:55:88:e5:d5:fc:5f:07:1f:7e:26:fc:a0:1c:39:
3a:eb:da:42:fc:35:60:95:66:2b:45:39:81:03:2f:c9:bf:eb:
dc:94:54:a0:b2:66:f0:b8:37:e4:38:67:4b:99:a7:5f:7a:9f:
89:93:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:25 2025 by rpki-client