Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c2VFzo6HIF3n3ndt-0M0fKvy_JA.roa
File: c2VFzo6HIF3n3ndt-0M0fKvy_JA.roa (raw, json)
Hash identifier: slufhKCxNg4CGSzXhwjvX2O0dejt4P3KbS4VdSLKP/8=
Subject key identifier: 73:65:45:CE:8E:87:20:5D:E7:DE:77:6D:FB:43:34:7C:AB:F2:FC:90
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0199F0B7EDC8AF04D24FA6464E71F1858C02
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c2VFzo6HIF3n3ndt-0M0fKvy_JA.roa
Signing time: Fri 17 Oct 2025 05:50:09 +0000
ROA not before: Fri 17 Oct 2025 05:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.50.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 13:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:b7:ed:c8:af:04:d2:4f:a6:46:4e:71:f1:85:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 17 05:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=736545ce8e87205de7de776dfb43347cabf2fc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:79:4e:7e:26:a7:fd:0e:25:d4:a6:73:73:
f9:e0:1d:da:0a:7b:d1:d6:78:90:43:c3:22:21:55:
f1:e9:a6:67:19:13:6a:31:01:5c:bc:89:8d:64:6b:
79:ee:ad:1a:71:0c:0d:fe:b1:31:bf:dd:b8:7e:ea:
11:b0:e9:8f:0d:e5:eb:88:60:51:f5:f1:31:37:b3:
f1:bc:e4:50:36:b0:63:7a:55:37:1e:a9:03:2e:f2:
7a:23:b9:45:73:e7:80:d2:9c:17:91:10:a5:49:c0:
4e:29:ad:cb:b4:81:08:37:b1:13:b5:e2:ee:74:45:
8e:29:2c:4d:95:0d:e9:fd:0c:e6:bb:31:c8:2b:72:
dd:95:ae:26:a6:3b:ac:09:5a:1b:d7:86:5b:84:6e:
3e:93:e0:75:da:fd:38:3b:c5:86:1b:5b:35:14:a9:
a0:d5:1e:c6:66:6f:09:c0:0b:85:60:29:96:4a:b8:
f9:aa:cc:d7:3a:0e:b8:f4:b6:1d:41:7b:b8:5c:6e:
83:72:1c:09:47:60:98:ed:f7:98:aa:35:20:62:69:
7d:c5:20:a0:bd:f1:35:2d:c9:4a:e2:db:94:31:b4:
5b:d7:66:8b:0b:0e:62:14:a7:d7:cd:ea:03:92:18:
b7:aa:ba:5d:33:ca:c0:b6:93:ba:c6:b5:88:20:38:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:45:CE:8E:87:20:5D:E7:DE:77:6D:FB:43:34:7C:AB:F2:FC:90
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c2VFzo6HIF3n3ndt-0M0fKvy_JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
95.173.48.0/24
95.173.50.0/23
Signature Algorithm: sha256WithRSAEncryption
18:a4:55:86:28:34:f3:cf:fb:2e:51:d1:ac:11:3c:93:e2:1a:
95:76:0b:d9:ae:23:b3:b0:a8:52:bd:f0:47:af:33:fe:36:ac:
73:75:69:88:2a:56:51:27:ca:e1:b9:0f:76:03:e5:41:9a:8e:
16:4f:2a:61:66:37:13:64:9c:4c:18:ce:03:ba:47:42:ca:e3:
d9:65:ac:51:e3:5f:88:1a:d0:7b:94:4c:7a:51:d9:1f:61:38:
a3:bd:30:8d:97:33:b0:6b:a8:d7:b5:61:0a:9a:fd:4c:58:ee:
1a:ee:d5:99:ef:f7:9f:99:06:50:cf:56:c5:eb:eb:a4:4b:0c:
79:da:2d:e6:6a:cb:0d:52:81:80:0f:5f:fd:d4:34:45:33:37:
f5:15:52:e7:28:cf:7e:11:26:09:8a:5e:92:71:e3:e1:8d:16:
e5:cb:94:08:c1:32:90:13:80:d1:f4:41:75:7d:12:87:c2:c2:
9d:d4:11:8d:3b:78:26:04:29:13:f3:79:34:26:b3:20:be:4c:
67:28:65:fa:8d:d9:c6:ae:48:30:37:10:ca:0f:e0:7d:71:ef:
3a:eb:de:bc:66:2f:c7:b9:dc:03:b0:c2:e1:c0:9d:27:f4:84:
68:60:15:0c:fc:8b:4f:15:a2:1e:57:56:ae:f5:ee:64:f4:33:
a9:08:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:22 2025 by rpki-client