Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z0Bc2scj6EndrG55aoRCP-d0JUg.roa
File: z0Bc2scj6EndrG55aoRCP-d0JUg.roa (raw, json)
Hash identifier: UvEAHwy/lMXouGluHi4DdfZUuy10pxud1zzk1KvR12A=
Subject key identifier: CF:40:5C:DA:C7:23:E8:49:DD:AC:6E:79:6A:84:42:3F:E7:74:25:48
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01979E0C1DCEF3AA674FBD1F07E7236A90CD
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z0Bc2scj6EndrG55aoRCP-d0JUg.roa
Signing time: Mon 23 Jun 2025 18:28:03 +0000
ROA not before: Mon 23 Jun 2025 18:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 18:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:0c:1d:ce:f3:aa:67:4f:bd:1f:07:e7:23:6a:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 23 18:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf405cdac723e849ddac6e796a84423fe7742548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:cf:ce:4e:d5:67:0b:61:6c:12:6b:d4:b1:
d4:74:e9:de:a2:ec:c5:0e:e5:8b:ed:c9:35:b0:0d:
82:72:44:b5:42:18:a9:00:2c:9c:5a:f0:54:7c:69:
34:a3:14:b0:c1:e7:ae:0b:77:18:c2:4b:20:44:62:
c1:0d:02:89:e8:88:b6:21:89:a4:02:a7:b3:bb:00:
57:d5:2c:65:b1:ae:ca:84:18:98:31:ed:df:5a:fc:
dd:0c:b9:fc:d5:8f:08:c9:74:fa:27:12:6e:dd:d5:
f6:ce:49:64:16:78:e2:ca:21:cb:7a:80:ab:c3:a9:
e3:59:40:63:62:e3:ba:9e:d4:42:0c:b2:1d:2c:0f:
c1:b7:2e:97:ad:ad:de:17:2f:1d:d3:14:d4:4e:bf:
8d:37:4b:2c:f3:fb:8e:b8:18:51:5d:c7:6f:68:a5:
ce:cb:12:e8:04:7b:46:fa:81:cd:ef:74:2e:65:0a:
fb:3f:86:c4:64:f1:02:fc:6b:b7:fe:15:22:fc:b9:
3b:96:00:2f:c0:34:33:f4:a0:74:d0:f1:3e:ef:bd:
49:c6:f4:b5:ed:97:6c:ed:ee:5d:1a:41:cd:60:58:
9a:dc:bf:8b:30:93:01:47:c8:8d:32:aa:bb:3c:8a:
48:39:9c:d2:2f:dc:52:2f:d3:b8:29:92:85:fb:75:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:5C:DA:C7:23:E8:49:DD:AC:6E:79:6A:84:42:3F:E7:74:25:48
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z0Bc2scj6EndrG55aoRCP-d0JUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
ae:78:74:86:ab:bc:9b:3f:c7:a4:5a:7b:f7:a5:b5:8e:27:59:
0a:fa:2a:5a:9c:4d:fe:98:d6:50:e5:67:ce:19:80:14:5b:a2:
08:e9:f7:5b:11:dd:7b:78:37:03:d2:34:57:77:fd:ad:e5:22:
f5:69:e4:e4:a7:35:59:3e:e0:0e:6c:fc:a0:62:d9:04:df:60:
d6:fe:83:97:7e:67:1f:97:5d:f9:af:29:bc:5e:75:9e:e9:a2:
4c:24:e9:a6:34:f2:d5:ed:61:6d:f1:f0:65:92:00:81:1b:f0:
26:91:65:1c:4a:f2:05:a2:f1:f1:e3:4d:fd:22:9e:e1:57:eb:
40:15:f3:21:ba:ae:58:4f:f7:71:6b:1e:cc:8f:80:fc:af:27:
d8:62:78:b3:e3:81:f4:6b:2c:b9:d4:48:99:64:cb:14:7c:6f:
44:5b:94:21:55:1d:17:e2:de:0e:42:44:8d:ff:1c:f8:ac:91:
e0:98:72:3a:0c:31:87:44:06:d4:67:9a:c4:c9:1d:99:2d:96:
34:e0:bc:d8:9b:3e:1e:3c:af:d8:01:83:83:e7:03:d1:d2:22:
a1:8f:0f:3e:d9:0c:dc:dd:cc:64:c7:10:3b:97:80:3b:69:ef:
3a:fa:71:d3:ce:bd:33:64:56:42:46:11:51:83:64:a6:d3:15:
e2:a7:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:56:42 2025 by rpki-client