Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/8Hc9Je94fdBEOsVCMnNw4KEWI-Y.roa
File: 8Hc9Je94fdBEOsVCMnNw4KEWI-Y.roa (raw, json)
Hash identifier: 6GeBpvkKMLwl6/cOVSH/0hhhamoZjoQyTC27/p6vdhc=
Subject key identifier: F0:77:3D:25:EF:78:7D:D0:44:3A:C5:42:32:73:70:E0:A1:16:23:E6
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 0197B19AD02746FE586F37D61D1EBC245817
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/8Hc9Je94fdBEOsVCMnNw4KEWI-Y.roa
Signing time: Fri 27 Jun 2025 13:36:42 +0000
ROA not before: Fri 27 Jun 2025 13:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 46.18.224.0/21 maxlen: 21
91.216.43.0/24 maxlen: 24
185.24.152.0/22 maxlen: 22
185.33.88.0/22 maxlen: 22
185.147.65.0/24 maxlen: 24
185.195.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 09:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:9a:d0:27:46:fe:58:6f:37:d6:1d:1e:bc:24:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 27 13:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0773d25ef787dd0443ac542327370e0a11623e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:11:79:0c:93:d4:41:a9:9c:65:19:b4:44:
a6:45:54:3a:f0:c9:aa:38:2b:82:dc:dc:be:40:aa:
53:14:1b:2c:61:e3:ce:10:79:3e:a0:8d:65:85:0a:
34:76:3b:03:bc:6a:51:ba:9f:3f:bc:2b:3c:06:92:
f4:3c:29:c0:94:9f:80:90:3a:1d:73:c1:50:e0:2b:
f4:e5:62:70:c1:68:2f:e3:fb:de:4d:65:d3:40:a4:
39:71:3d:48:d9:1a:21:73:fa:e7:c2:e9:98:99:02:
e7:87:e9:c5:fd:ca:75:79:38:8b:ee:06:29:e1:58:
51:17:89:ad:76:07:36:3c:e2:74:d5:d0:b9:41:a4:
aa:74:a6:0c:9e:23:e9:2a:0d:0c:65:4d:c1:12:17:
03:d6:6f:c4:c5:bf:8e:25:a9:5d:53:5c:39:4c:49:
28:e1:f1:c7:45:19:f8:93:1e:d0:f4:ad:19:e7:67:
69:e2:10:8e:08:5b:d2:06:43:7d:3b:bb:45:7a:6a:
2f:58:bb:e7:50:e0:90:43:ec:b9:2a:cb:73:67:90:
b5:4c:fa:02:8b:07:d9:b1:a7:cd:99:57:ec:8f:1a:
d1:52:df:00:ca:f0:c0:ad:1c:fb:90:38:b5:6b:ec:
cc:84:a3:75:07:c0:d8:0a:6f:bf:fc:11:f0:3b:02:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:77:3D:25:EF:78:7D:D0:44:3A:C5:42:32:73:70:E0:A1:16:23:E6
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/8Hc9Je94fdBEOsVCMnNw4KEWI-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.224.0/21
91.216.43.0/24
185.24.152.0/22
185.33.88.0/22
185.147.65.0/24
185.195.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:90:0c:c7:1b:52:d7:87:a0:ae:0b:e0:ad:21:63:6f:51:42:
dc:2f:67:b6:be:ca:b1:ed:8e:70:f3:5f:14:bd:f2:3a:7b:77:
2c:83:65:02:8c:2e:9b:7f:e1:c5:11:6f:44:b5:82:53:46:8f:
af:e9:d1:df:ef:0e:31:2c:f6:ab:61:bd:c4:00:2c:3a:dc:7b:
a6:af:26:fd:03:9e:17:9d:fa:a7:2c:78:83:98:9c:5a:e8:75:
da:fb:b1:49:77:0f:ae:28:c4:08:b2:81:95:b8:14:2a:6e:57:
5c:d3:e1:7d:a1:6b:92:4c:49:cc:dc:df:ea:33:97:fd:4d:f0:
b3:a3:30:86:77:21:ae:6c:83:fb:9b:cf:89:89:52:f6:18:a4:
f5:2f:59:a1:b0:f8:e4:56:14:78:d6:ba:aa:3e:0f:3d:23:c7:
5b:ee:eb:01:0c:a6:1d:a1:42:2e:c2:a2:c5:16:90:e6:8b:ac:
0c:3a:21:60:30:0c:e6:e6:69:7b:90:43:c2:f4:4a:ae:89:12:
9e:e8:13:37:e9:22:5f:6d:ba:70:28:28:5a:98:2b:1a:1c:c1:
e5:9e:6a:6c:61:9d:af:b9:fe:c7:b1:2f:f3:84:5b:67:10:c4:
ac:c7:83:f0:cf:f0:18:21:6c:a1:2c:26:a0:b9:9b:e2:51:39:
69:6d:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:55:34 2025 by rpki-client