Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hX6z4fLq9S-tOePSWaxj9EhxtwA.roa
File: hX6z4fLq9S-tOePSWaxj9EhxtwA.roa (raw, json)
Hash identifier: tO/ieRejr5JPHp5p+7oc7PGOM8U5rm8pTxZL4OLK+pw=
Subject key identifier: 85:7E:B3:E1:F2:EA:F5:2F:AD:39:E3:D2:59:AC:63:F4:48:71:B7:00
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01977DF1A4E21AD6DF384AAF15FECE943D1F
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hX6z4fLq9S-tOePSWaxj9EhxtwA.roa
Signing time: Tue 17 Jun 2025 12:51:17 +0000
ROA not before: Tue 17 Jun 2025 12:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.23.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 15:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:f1:a4:e2:1a:d6:df:38:4a:af:15:fe:ce:94:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 17 12:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=857eb3e1f2eaf52fad39e3d259ac63f44871b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:6e:7f:96:f3:66:04:ca:72:26:73:ed:9f:
fa:8c:29:73:f3:02:c6:ec:d9:9f:0e:47:1b:fc:f0:
53:96:92:d3:80:46:50:b3:3a:b2:c0:ef:62:d8:2f:
65:8f:65:4c:f2:9a:b2:3b:ee:31:c4:c3:33:73:4e:
33:ff:68:57:f7:e7:f4:ff:80:0a:e9:9f:b2:42:ee:
1a:35:84:89:4a:71:6a:77:bf:0e:80:18:72:c7:28:
45:54:f7:77:6f:04:3f:38:a8:19:38:bd:29:3d:7c:
d0:fc:3b:9d:83:65:41:4b:e1:4a:8f:48:58:94:16:
bb:f0:77:7f:50:64:13:f3:6f:ce:68:52:65:ad:6f:
f2:ad:bf:e5:9d:60:74:74:5b:02:22:60:86:57:ac:
df:08:56:b2:ac:98:dc:cc:55:ad:6f:b8:6c:cd:d2:
97:6e:4e:93:eb:4f:50:4f:ce:f4:f1:af:ac:07:cb:
d3:ec:32:7f:ee:64:b6:a6:50:65:92:cc:db:8e:13:
0b:fa:97:ae:14:1f:de:d9:e5:04:71:6f:cd:07:af:
02:db:5c:cf:56:8e:63:bb:a5:71:dc:92:2f:f5:7e:
69:2b:c8:4d:b0:4f:69:94:48:0b:8a:b5:5d:ca:aa:
3b:61:8c:44:ae:d5:b8:5b:27:2f:e4:55:af:df:3e:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:B3:E1:F2:EA:F5:2F:AD:39:E3:D2:59:AC:63:F4:48:71:B7:00
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/hX6z4fLq9S-tOePSWaxj9EhxtwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d7:21:9c:68:cb:d5:4e:03:0d:81:ab:ea:a8:0a:9c:19:31:
8f:de:c3:11:78:b2:8c:9e:27:28:d4:cc:f9:59:5d:f9:9f:6e:
2c:b5:88:ac:06:4e:67:2d:3a:db:8e:01:7b:c0:3c:7d:66:e8:
74:ad:74:8d:92:4a:99:ee:38:07:09:30:3d:54:8a:bc:be:d0:
f5:49:80:d1:40:93:68:8d:98:9d:46:4b:b5:27:a5:30:89:87:
72:f0:59:b8:92:e5:d5:af:d3:b7:95:89:de:94:cb:f3:a4:82:
80:02:1d:85:bb:9e:f6:0b:5b:91:47:9b:66:9f:24:19:f5:37:
54:f4:5a:21:19:87:e4:97:12:80:a5:31:d6:6f:c8:0a:5e:42:
8c:04:a3:b2:e5:73:aa:37:f7:22:54:88:b4:7c:30:17:43:86:
d0:8f:2e:a4:b1:bb:d5:f7:fc:76:22:ce:d0:b2:64:eb:7f:aa:
12:70:e4:7a:2e:a9:7b:37:b7:f4:21:6c:9f:97:88:d3:40:ba:
ab:7a:c4:61:86:86:37:83:97:35:9a:ac:73:07:a5:88:4e:e7:
4a:6d:0c:fb:58:40:d9:0a:c1:df:c8:f4:03:08:d8:96:50:b7:
33:ff:3d:73:df:11:e7:8f:ea:2e:ae:bc:80:24:00:51:d1:e4:
6e:ce:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:57:06 2025 by rpki-client