Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9eiLF_gYgXCc29DXlHW8WfK-7Ew.roa
File: 9eiLF_gYgXCc29DXlHW8WfK-7Ew.roa (raw, json)
Hash identifier: YuQdeT+XaulCvaZDE1H/V2QskhZsLsADckAYFyTKqrI=
Subject key identifier: F5:E8:8B:17:F8:18:81:70:9C:DB:D0:D7:94:75:BC:59:F2:BE:EC:4C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0196A1AF1F43E14878E94E53A651187E6E61
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9eiLF_gYgXCc29DXlHW8WfK-7Ew.roa
Signing time: Mon 05 May 2025 18:22:10 +0000
ROA not before: Mon 05 May 2025 18:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215882
IP address blocks: 81.16.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 06 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:af:1f:43:e1:48:78:e9:4e:53:a6:51:18:7e:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 5 18:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5e88b17f81881709cdbd0d79475bc59f2beec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:10:4e:5b:c1:4e:68:af:a2:94:47:b4:46:
82:60:a9:66:86:33:81:c0:8c:75:f4:90:22:d7:47:
e2:df:f9:8b:60:72:27:9c:7e:0a:5f:5d:e6:bc:c7:
0d:9b:6c:22:5f:fd:1e:20:b9:ef:13:66:41:2c:ff:
d7:e1:7e:8c:9b:8f:e2:0d:a7:4f:66:b4:99:0b:03:
03:c1:c0:65:fb:00:8e:dc:05:6b:3d:35:37:4a:92:
3d:ce:e8:33:56:6a:a8:fd:d5:a5:56:dc:10:78:07:
63:f1:70:81:7e:1c:80:a4:2e:2d:8a:cb:2e:75:4d:
20:f4:2e:70:ed:cd:d0:f9:fd:4f:8d:4e:24:5c:c8:
0e:33:4e:0b:97:d7:ee:d0:e1:ee:79:6a:aa:91:c0:
67:1b:88:f5:25:dd:fa:10:b2:3a:f1:d5:b2:8f:3c:
b1:87:5d:2e:63:b0:63:a0:e4:31:3e:63:3b:f6:98:
81:fc:a1:64:46:6a:0d:c1:ca:65:b8:a5:cf:a1:ad:
14:7c:75:9d:d3:d4:3b:e0:4c:6e:aa:6b:e0:69:af:
b9:a7:43:d2:14:06:ee:11:da:0e:2a:21:23:e0:35:
12:3d:17:e8:09:95:ee:57:82:80:ed:88:ea:af:ef:
cf:c0:9d:40:8a:8e:3f:52:0b:59:44:c9:95:e2:b7:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:8B:17:F8:18:81:70:9C:DB:D0:D7:94:75:BC:59:F2:BE:EC:4C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9eiLF_gYgXCc29DXlHW8WfK-7Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:3d:b0:74:c8:90:13:41:c6:c3:da:ed:4e:b6:4f:5a:4d:40:
fd:52:4a:21:55:b7:13:92:5c:b9:94:3f:da:ce:e1:56:cb:d1:
d0:a3:a0:65:ad:9d:0d:cc:5b:c1:ff:b8:3e:4e:79:e6:da:97:
22:82:97:10:b2:86:e0:3e:d5:bf:12:d5:2a:f9:30:04:4f:3d:
fe:5f:61:dd:5b:c6:54:e2:30:d2:55:81:40:97:c2:54:f9:a3:
6a:da:e9:e5:54:18:59:90:60:76:1b:49:75:19:97:ab:71:d6:
50:5d:c7:d5:c4:3e:8d:24:0a:a5:84:95:1c:b1:55:85:c0:82:
6d:1c:9d:cd:28:a1:8a:d8:14:aa:38:11:0c:73:17:f8:c7:c6:
6b:61:8f:7c:9e:16:32:d4:10:2c:48:1d:99:4d:2f:c4:96:8c:
c4:f8:58:24:33:f6:6f:a7:67:38:c6:b4:c4:91:df:b8:4f:40:
c4:08:2a:b7:61:7b:d5:5c:b1:da:db:5f:da:5d:28:94:9a:97:
eb:ee:34:9f:17:f8:f3:00:7f:4f:54:7e:0a:78:50:22:c1:92:
18:c1:04:39:ea:7b:d1:57:d2:6d:e3:f5:5c:96:2b:38:a6:04:
b3:60:32:7b:d7:07:d1:3c:bb:17:60:ae:4c:da:57:d7:fd:48:
b3:a4:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:22:43 2025 by rpki-client