Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/e2m1aE6SKhsE0XipIBpRj8E-4hw.roa
File: e2m1aE6SKhsE0XipIBpRj8E-4hw.roa (raw, json)
Hash identifier: 5G1YjSEAukIGDN0dqaNWaTVLS7H1Fx4IZfxNUIjeltw=
Subject key identifier: 7B:69:B5:68:4E:92:2A:1B:04:D1:78:A9:20:1A:51:8F:C1:3E:E2:1C
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198D5E188B6BB6BF6942EC8D489E48D71F1
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/e2m1aE6SKhsE0XipIBpRj8E-4hw.roa
Signing time: Sat 23 Aug 2025 07:43:04 +0000
ROA not before: Sat 23 Aug 2025 07:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 46.236.254.0/23 maxlen: 23
82.139.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 12:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:e1:88:b6:bb:6b:f6:94:2e:c8:d4:89:e4:8d:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 23 07:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b69b5684e922a1b04d178a9201a518fc13ee21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:0e:41:0a:af:ad:14:f3:39:35:82:bb:cc:
35:0d:64:e7:e9:c6:0d:2a:f4:e3:90:88:1e:0a:e6:
c8:58:11:dd:54:74:d2:a3:03:38:af:4e:9a:aa:d7:
46:88:cc:4c:80:fb:27:26:8c:ee:43:b1:4a:3f:58:
05:3a:08:2f:27:59:2e:97:bd:5e:0c:32:2e:d1:84:
ce:dc:ef:5e:a4:b8:59:4f:66:8d:66:72:eb:c7:7a:
31:68:19:74:b3:b0:51:10:80:95:dc:3e:d5:b0:61:
04:d7:de:6f:b0:49:01:49:3e:71:19:8c:dc:06:e9:
fb:7c:8c:0e:51:4a:3d:e8:b4:af:66:88:21:a8:27:
a8:98:b0:63:55:eb:b1:8a:30:96:c8:48:47:1b:73:
46:94:02:c1:4e:70:20:05:c2:15:ad:a2:ff:f1:f7:
4e:0f:b0:11:cc:7b:c8:6a:d5:08:bf:e5:aa:c8:ac:
dc:29:dd:84:55:69:31:0f:a7:7d:8a:07:9a:10:f1:
19:e0:d5:ef:ef:6e:8f:fa:52:00:89:ce:15:6d:92:
1a:e0:de:de:f8:e7:b8:9c:f5:93:b0:32:2a:a3:32:
99:e8:5e:62:89:2d:8a:b5:d9:37:f4:bf:58:c4:3b:
c9:69:f1:8d:a7:20:ab:cc:1f:1b:ca:d9:73:60:56:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:69:B5:68:4E:92:2A:1B:04:D1:78:A9:20:1A:51:8F:C1:3E:E2:1C
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/e2m1aE6SKhsE0XipIBpRj8E-4hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.254.0/23
82.139.232.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:dc:16:ee:31:8e:69:bb:4c:30:e6:c7:8a:c4:93:ea:d4:
85:dd:e7:87:3c:0b:47:28:a5:03:54:f5:31:d5:93:f5:77:c6:
2a:ac:d8:3b:c2:fb:92:0b:a7:db:c4:24:87:d5:6b:cc:bc:e7:
2c:ff:31:31:a3:1d:14:fd:d5:57:4c:a9:50:ab:78:2a:54:15:
0f:74:2e:fb:29:81:64:9f:aa:2c:6a:71:ee:ff:d2:34:b7:1f:
95:81:c9:be:6c:6e:6c:39:e1:b6:08:24:9b:23:31:a0:90:75:
23:34:ed:7d:60:77:ef:1e:3b:7e:c1:36:af:00:11:bd:67:06:
41:8c:8f:7a:06:8e:a7:ab:4c:cb:89:44:2c:27:fd:ed:a0:97:
80:f2:89:36:78:1c:a4:3e:d3:46:0f:d3:67:36:c7:fa:5d:32:
95:12:cf:ce:f4:b1:9c:fd:40:97:29:c1:f0:34:51:d5:24:a0:
ae:37:68:55:6c:b6:b8:34:f9:5c:61:3f:76:1f:70:5d:2a:b9:
9e:7f:cd:9d:85:ef:db:4d:49:6f:2f:89:91:b4:05:bf:4c:7e:
62:77:fc:56:08:0a:48:06:f7:c4:da:46:25:87:4f:36:91:60:
e3:b3:08:e0:3e:58:40:8c:30:1f:5e:40:88:fc:f6:62:81:0b:
d9:aa:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:03:11 2025 by rpki-client