Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PxSv9qHRuffME106OV3FSzRDVEk.roa
File: PxSv9qHRuffME106OV3FSzRDVEk.roa (raw, json)
Hash identifier: 8dHksSItQHIMP6UUZ7c42oxT6EBRqM59MMEa2Jo8vzg=
Subject key identifier: 3F:14:AF:F6:A1:D1:B9:F7:CC:13:5D:3A:39:5D:C5:4B:34:43:54:49
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F8D5B3CD8CF70F7CC47EF20A6D19C7713
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PxSv9qHRuffME106OV3FSzRDVEk.roa
Signing time: Thu 23 Jul 2026 05:03:14 +0000
ROA not before: Thu 23 Jul 2026 05:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/22 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:5b:3c:d8:cf:70:f7:cc:47:ef:20:a6:d1:9c:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 23 05:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f14aff6a1d1b9f7cc135d3a395dc54b34435449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:84:f5:b5:62:6d:35:27:e3:1a:60:05:74:
1a:56:bc:77:e2:89:3c:82:c1:16:d0:f1:9e:6a:6d:
6a:ec:ee:12:e9:b0:e7:61:79:21:bc:88:e9:f3:0c:
0c:f0:a6:73:d0:9d:86:58:c4:f7:a5:5d:c7:ed:5f:
23:8e:5a:c7:66:83:82:dd:98:89:18:c5:96:33:39:
a5:7a:6b:14:3e:c6:6e:86:da:20:e8:9a:0b:97:67:
3d:77:82:89:2a:8b:37:a2:77:8b:db:7b:5d:37:1d:
ac:dc:9c:d8:fa:b9:a3:a0:67:2f:75:e1:80:9b:3f:
7a:02:fc:73:ab:e8:dd:49:0b:65:63:15:db:cb:27:
c5:98:31:54:1f:26:aa:8b:53:1a:59:47:91:32:90:
6c:3a:a0:14:33:ad:d6:6f:19:d4:dd:42:25:49:f3:
7d:28:35:b3:65:fe:07:38:a4:b5:3c:f6:96:b7:94:
58:db:84:cb:ae:ed:df:87:47:97:e8:fc:0e:e5:49:
33:98:dd:64:f2:95:98:d6:bd:b9:e2:bd:45:ef:d4:
7a:48:d9:80:2f:bc:cb:8f:3e:c4:56:a5:34:c4:8a:
c7:b2:c4:bf:91:3f:ab:2c:84:9d:4b:76:22:72:14:
59:f5:15:1e:4a:27:92:34:ea:c2:d8:dc:57:f1:29:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:AF:F6:A1:D1:B9:F7:CC:13:5D:3A:39:5D:C5:4B:34:43:54:49
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PxSv9qHRuffME106OV3FSzRDVEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
43.242.136.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
77.111.105.0-77.111.106.255
89.106.2.0/24
89.106.28.0/22
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.102.133.0/24
189.12.48.0/23
189.12.52.0/24
189.12.56.0/24
189.31.208.0/23
189.73.16.0/22
189.73.24.0/24
189.75.176.0/24
189.75.180.0/24
189.75.183.0-189.75.184.255
189.75.186.0/24
191.44.16.0-191.44.18.255
191.217.160.0/24
191.217.168.0/22
191.217.175.0/24
191.219.16.0-191.219.21.255
191.222.42.0/23
191.222.240.0-191.222.242.255
191.222.244.0/24
194.36.33.0/24
200.102.91.0/24
200.102.179.0-200.102.184.255
200.165.16.0/24
200.165.29.0-200.165.31.255
200.181.81.0/24
200.181.87.0-200.181.89.255
201.11.224.0/24
201.11.232.0/22
201.14.211.0/24
201.14.216.0/22
201.24.193.0-201.24.195.255
201.24.197.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f9:5f:5b:31:52:94:c0:0e:30:cd:61:e6:9a:77:30:88:a3:
ef:9d:db:cf:cd:6a:8d:ff:6b:d4:dd:df:5e:1c:90:c8:38:fe:
c4:dd:fb:e2:97:4b:00:2b:45:7f:5a:4c:16:c4:18:6e:a2:be:
eb:8c:df:3c:28:46:3c:c8:0c:43:3e:21:06:cf:2d:32:10:09:
98:46:ac:3c:cd:ab:a8:33:82:e9:b4:af:01:53:61:b3:0b:52:
33:36:6e:0b:a9:11:d0:19:98:dd:65:78:e8:71:5b:84:c6:f0:
e7:ce:6f:92:b0:eb:84:4d:d2:b4:62:db:5f:73:83:ac:14:b9:
96:59:37:66:cd:bb:1e:b4:4c:15:37:86:78:44:e5:81:60:af:
19:40:01:f3:ee:fb:48:aa:df:99:0c:4b:4c:a1:c0:9c:c8:e2:
46:0a:e2:c8:fd:50:82:53:79:76:7d:5e:e2:e7:bb:bd:d9:ed:
cd:52:db:26:e1:4a:63:c2:e8:dc:21:69:cc:7f:8a:c2:69:b9:
0d:58:35:66:05:6f:d8:ae:39:a2:2f:57:b4:a0:b8:6b:af:ae:
77:14:85:ff:70:d8:8a:9c:a1:dd:c3:c6:06:ed:d7:ec:8f:b1:
8c:07:f0:f2:24:74:73:22:fa:fd:44:e2:9a:1c:18:09:6d:69:
5a:e0:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:36 2026 by rpki-client