Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/vHlaTrrnDokWBry4ZJ37wqk53j8.roa
File: vHlaTrrnDokWBry4ZJ37wqk53j8.roa (raw, json)
Hash identifier: SsVmvSg8GBzNArTVETDsWfTOcSBDPJ7fxWLL8jZ2GEI=
Subject key identifier: BC:79:5A:4E:BA:E7:0E:89:16:06:BC:B8:64:9D:FB:C2:A9:39:DE:3F
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0198995423B0A768568F71B8586BB658B514
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/vHlaTrrnDokWBry4ZJ37wqk53j8.roa
Signing time: Mon 11 Aug 2025 13:31:24 +0000
ROA not before: Mon 11 Aug 2025 13:31:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.144.176.0/21 maxlen: 24
5.178.96.0/20 maxlen: 24
5.178.97.0/24 maxlen: 24
31.192.240.0/21 maxlen: 24
45.12.216.0/22 maxlen: 24
45.12.216.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
103.136.68.0/22 maxlen: 24
185.5.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 15:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:54:23:b0:a7:68:56:8f:71:b8:58:6b:b6:58:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 11 13:31:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc795a4ebae70e891606bcb8649dfbc2a939de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:24:f9:87:5c:41:ff:e9:c4:c4:b0:c0:55:
68:85:de:90:c6:e4:c2:56:b2:8a:12:27:33:54:47:
38:9a:27:79:47:36:b0:fb:89:c7:c7:ca:01:4e:5d:
de:41:7f:5f:01:42:6f:d6:5c:0b:97:ab:74:f9:ad:
a4:1d:3e:ba:35:8b:fe:d0:a5:a2:71:cf:7e:4d:cc:
a9:6b:b7:db:d1:96:b5:63:56:40:07:b0:86:9d:f5:
02:65:65:90:91:dc:a2:86:3f:4a:17:05:3f:3e:5c:
94:90:fa:31:0b:3c:50:ac:a9:65:6c:68:13:bf:62:
2d:0c:8c:19:8e:24:18:d1:fe:93:dc:57:cc:f6:14:
98:fd:e0:98:12:fe:9b:92:02:87:19:74:5f:30:e5:
81:4b:12:59:71:f8:7f:6c:4b:a1:35:76:4d:0e:f1:
3b:6c:af:20:65:b9:ac:0a:fe:76:6d:47:60:d0:6b:
c4:21:71:87:6e:cc:97:8a:fb:7b:04:5c:ab:d6:cf:
50:c4:a1:91:27:f5:70:54:a6:8e:88:30:e0:f9:48:
ad:2d:2e:1d:92:4b:9b:8a:03:5e:ce:36:7f:7e:2e:
a6:01:7d:e2:5d:1a:33:93:29:aa:24:b9:5b:09:b1:
53:b5:46:b4:0b:b8:fc:9f:1e:19:f5:ad:6a:e4:66:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:5A:4E:BA:E7:0E:89:16:06:BC:B8:64:9D:FB:C2:A9:39:DE:3F
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/vHlaTrrnDokWBry4ZJ37wqk53j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.144.176.0/21
5.178.96.0/20
31.192.240.0/21
45.12.216.0/22
103.136.68.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:26:64:70:96:75:7d:18:2b:e3:4a:a6:d1:9a:88:30:a1:32:
d0:9d:85:bd:f8:a0:ad:ad:5a:e9:fd:ec:68:4f:d3:70:83:65:
88:2e:b9:89:ae:80:b5:c1:9e:53:67:b9:5c:a2:4f:7c:97:58:
fe:a4:91:74:90:64:3d:1b:c8:01:c1:14:dd:0d:19:54:e9:32:
6d:a5:ff:63:6c:75:24:a1:00:3a:ad:dc:5d:fa:78:c6:4a:62:
0a:01:1a:58:38:95:fe:1d:01:1e:cf:e1:c2:f4:ac:db:53:0e:
50:de:00:8b:b0:a7:77:4c:d8:2c:b2:38:64:09:63:25:70:da:
5a:f1:1a:64:76:58:ee:ce:9d:5f:96:86:c9:46:a8:8c:82:50:
37:1a:35:0a:29:b2:c4:74:3c:91:f5:e0:fb:c6:64:b4:9a:be:
7b:cd:1a:d8:51:1d:59:dd:f5:b0:25:24:1d:dc:b7:24:3b:40:
d1:62:24:52:64:3c:91:17:0c:4c:54:4b:b9:cf:a0:7c:4b:62:
b5:c2:24:76:df:19:8e:7a:ce:4f:0e:e5:19:01:f6:88:ac:e2:
b9:50:e6:d6:45:39:48:43:3d:09:49:3e:b6:fe:19:f4:f2:3e:
2f:68:90:1d:21:ed:79:c2:74:8a:0f:1c:a0:0d:89:f1:d2:7d:
fd:fa:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:59 2025 by rpki-client