Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fXEKdTcH9pxXtCe53rK2Tvj5KnA.roa
File: fXEKdTcH9pxXtCe53rK2Tvj5KnA.roa (raw, json)
Hash identifier: AFUUzXu6OQR/EYk84DgVdYtZc6qWZAjefxHzvuY1lKc=
Subject key identifier: 7D:71:0A:75:37:07:F6:9C:57:B4:27:B9:DE:B2:B6:4E:F8:F9:2A:70
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197B09E249B7F3772F774130D9B5FA32261
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fXEKdTcH9pxXtCe53rK2Tvj5KnA.roa
Signing time: Fri 27 Jun 2025 09:00:43 +0000
ROA not before: Fri 27 Jun 2025 09:00:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.216.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.52.0/24 maxlen: 24
89.213.56.0/22 maxlen: 22
89.213.139.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.230.0/24 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.76.0/22 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.134.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 19:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:9e:24:9b:7f:37:72:f7:74:13:0d:9b:5f:a3:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 27 09:00:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d710a753707f69c57b427b9deb2b64ef8f92a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:d6:80:a8:21:6b:6e:39:58:2f:2b:c4:9a:
df:9e:63:12:f2:e7:2b:ec:31:27:0e:e3:16:20:ef:
02:d2:24:41:94:c7:ea:23:ca:36:b6:16:a1:9f:f8:
5e:d6:db:23:aa:d9:b4:d7:8b:0f:f9:8f:a3:d7:64:
c4:e1:bc:99:f8:70:ff:95:11:9f:c8:42:dc:7d:56:
45:9d:c6:64:b6:11:43:01:db:d6:4c:70:41:c9:ef:
8e:0b:2f:c9:1b:b2:d7:bb:5d:40:66:62:4d:98:2f:
f7:20:27:89:62:33:c9:fb:5e:1b:2a:2b:e3:d8:39:
81:8b:6c:a3:72:63:9e:95:2b:a4:7a:2e:07:92:47:
fa:99:9d:9d:f7:01:37:3a:79:ab:da:24:9c:88:50:
27:ba:f3:07:24:c5:23:51:03:bf:09:87:1e:66:7c:
5f:90:c1:07:4d:72:5f:1c:95:4e:ab:40:6b:ef:71:
f7:0b:4c:4d:db:b9:f0:8f:a8:75:a9:4c:b2:39:2c:
2a:40:5b:d2:34:30:23:c5:6b:74:07:b1:2f:2e:23:
c8:6b:2d:b6:bc:1a:a2:ab:3e:e3:69:88:24:b0:20:
bd:a4:b4:51:8d:62:b2:49:c3:84:ae:15:dd:e5:e9:
87:1a:2c:64:ba:89:b6:13:1a:6d:33:2b:00:c4:db:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:71:0A:75:37:07:F6:9C:57:B4:27:B9:DE:B2:B6:4E:F8:F9:2A:70
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fXEKdTcH9pxXtCe53rK2Tvj5KnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.216.0/23
82.153.220.0/24
89.213.0.0/22
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.139.0/24
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.169.0/24
89.213.172.0/22
89.213.181.0/24
89.213.183.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.230.0/24
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.76.0-194.105.95.255
212.38.79.0/24
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
58:96:8f:10:6f:2a:f3:5c:ea:c8:7d:be:c6:f0:0b:22:73:49:
21:e9:85:6e:f3:25:68:1b:6b:d0:91:7d:66:af:89:37:98:6f:
f9:65:10:0a:89:34:d7:25:3e:9c:be:66:e1:26:cd:db:58:a1:
e8:9e:80:89:55:9a:d9:e7:25:f8:e6:ec:5b:fc:68:13:90:ea:
1a:1f:a8:12:3c:44:f1:9f:23:d3:b5:79:b9:fa:e4:f1:1d:50:
ef:14:87:d8:85:98:e6:81:d2:11:52:25:af:1b:dc:2f:a0:43:
77:74:12:6a:c1:65:c1:52:88:5f:82:5e:7b:04:02:13:65:53:
18:67:18:7b:c2:79:6c:d0:9e:be:8c:a9:8a:15:51:cb:01:8c:
24:f9:48:3b:6c:c0:8c:60:e9:b9:6e:19:9f:f3:45:9f:1e:47:
ae:5e:8b:d8:56:87:47:98:84:fa:2d:8c:89:a0:e6:8c:36:2e:
e4:12:c9:da:6b:54:d6:20:fa:92:96:ae:a1:37:64:ca:21:61:
1f:26:da:7e:f3:d7:1a:c7:43:27:81:21:8b:b5:50:77:c4:7f:
18:6e:d9:3c:68:ba:17:33:65:fb:12:fd:64:68:d7:68:39:95:
0e:de:33:27:1c:7c:6d:56:e6:52:dd:dc:e9:e1:8f:a7:0f:85:
6c:4a:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:57:56 2025 by rpki-client