Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/spZQIU3Osyd2hGyY6tw1C5aJx3k.roa
File: spZQIU3Osyd2hGyY6tw1C5aJx3k.roa (raw, json)
Hash identifier: CIMqQjDKXwMZP9MCUztcDlYdRniaW6JDOkvrP34Ftxo=
Subject key identifier: B2:96:50:21:4D:CE:B3:27:76:84:6C:98:EA:DC:35:0B:96:89:C7:79
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0197F03006EBB1ABE5A4AE26D7B4DD250A95
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/spZQIU3Osyd2hGyY6tw1C5aJx3k.roa
Signing time: Wed 09 Jul 2025 17:16:08 +0000
ROA not before: Wed 09 Jul 2025 17:16:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 12 Jul 2025 14:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:30:06:eb:b1:ab:e5:a4:ae:26:d7:b4:dd:25:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 9 17:16:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29650214dceb32776846c98eadc350b9689c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:0f:53:d2:4f:67:2c:b1:fc:84:03:67:50:
d6:88:67:0a:6c:90:d9:d6:7c:94:39:9a:12:4e:28:
bd:e6:c7:49:66:f5:94:63:d0:b3:c8:14:4e:4e:98:
0d:68:d1:ae:08:4a:5d:ab:ee:ee:11:52:ff:fd:78:
19:07:f3:c9:e3:1c:e3:55:45:cf:35:60:db:fd:3c:
1d:8a:b8:75:ff:6b:70:5a:79:b6:83:50:8e:d5:af:
c6:a8:9a:49:83:6e:57:11:91:b6:cf:88:1d:f4:8c:
dc:6c:8a:07:65:aa:b8:16:fe:6c:13:20:6a:4e:68:
de:9b:d6:2a:f0:8a:59:40:70:fa:39:5f:e0:44:4c:
d4:bb:84:39:a5:9d:f9:79:b2:d9:42:13:40:ad:91:
d9:d3:3a:f2:6e:b1:a5:57:40:47:76:b7:3e:1e:ec:
f8:01:ac:84:34:34:8e:f2:4d:e3:99:c7:cd:a3:d7:
7b:18:15:41:69:f8:32:77:ed:86:f5:03:8f:d2:8f:
d1:50:1e:c7:d8:ec:fd:4b:d3:84:eb:eb:a6:9c:0f:
43:74:f3:91:f8:69:4e:09:0b:9a:ba:e2:50:05:a3:
ec:d2:5b:27:34:1e:56:42:f3:41:21:b3:09:6b:05:
94:75:c6:df:3d:75:d9:72:aa:5b:bb:08:f5:6a:fc:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:96:50:21:4D:CE:B3:27:76:84:6C:98:EA:DC:35:0B:96:89:C7:79
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/spZQIU3Osyd2hGyY6tw1C5aJx3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
8a:68:6d:c2:46:f2:1e:ab:06:b7:67:a4:d2:58:8f:29:a0:d9:
fe:1b:32:d4:da:02:96:33:2b:37:ae:74:73:51:c1:c2:85:f1:
b2:b2:b0:e7:1c:1a:9e:f2:28:00:76:f3:ba:36:38:99:cb:0a:
40:0d:60:35:a8:88:c0:f4:f8:66:05:c2:2c:85:19:2e:5f:60:
2b:2b:64:fa:ad:59:00:dc:34:4f:17:69:36:c4:ab:31:6f:5b:
e3:0c:68:4d:ca:c9:cf:c1:39:58:6b:fb:a8:0a:eb:c8:4d:8f:
86:cf:6d:10:25:d1:21:e9:20:c6:56:65:f2:91:7a:bc:68:c5:
fa:2e:c0:ac:49:48:94:20:d3:ac:41:7b:8b:27:2f:8f:8b:d4:
fc:22:18:83:6c:98:ae:89:a9:75:8c:8f:85:a4:19:0c:7d:72:
07:1d:25:4b:52:c6:3c:9b:fe:28:78:1f:a9:15:48:b7:2b:2e:
df:44:18:a0:7c:35:4e:25:64:f9:24:84:18:df:3c:77:50:e7:
8d:c8:d4:de:91:9d:29:43:92:4a:e2:1a:1c:0f:b5:f8:18:b5:
06:4d:97:22:6c:64:68:c4:18:28:86:c6:a2:f3:5b:35:64:5b:
f1:d5:4e:37:33:79:c2:4a:81:23:e2:11:44:fc:7c:af:be:c9:
ef:ec:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:07:25 2025 by rpki-client