Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gFac7l-Mf2r34AivPFk8CQkDv4g.roa
File: gFac7l-Mf2r34AivPFk8CQkDv4g.roa (raw, json)
Hash identifier: 93InsxUkX7K+Im6s8CaNxCSlpOQWxnbm7n2mB7KfWMA=
Subject key identifier: 80:56:9C:EE:5F:8C:7F:6A:F7:E0:08:AF:3C:59:3C:09:09:03:BF:88
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0197C67D7F5D8604DD2B402F96676E3F105E
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gFac7l-Mf2r34AivPFk8CQkDv4g.roa
Signing time: Tue 01 Jul 2025 14:56:42 +0000
ROA not before: Tue 01 Jul 2025 14:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
85.234.66.0/24 maxlen: 24
85.234.67.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 03 Jul 2025 14:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:7d:7f:5d:86:04:dd:2b:40:2f:96:67:6e:3f:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jul 1 14:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80569cee5f8c7f6af7e008af3c593c090903bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:f6:4b:3a:ef:b0:0a:95:36:fd:80:04:6a:
70:55:4b:22:81:b3:22:cd:d9:eb:3f:f2:04:e7:3d:
70:59:53:1a:eb:04:07:b2:89:1d:09:d1:c1:5a:e0:
4b:01:96:2b:f5:a7:b3:67:5e:3d:d1:ec:dc:df:e4:
38:ae:6f:b3:21:e6:35:f9:49:d8:09:ab:00:b7:29:
35:5d:61:89:2b:7d:ce:ca:4a:98:1d:60:8f:92:ec:
b7:9b:ba:32:69:85:c0:49:c7:24:d0:d4:79:d8:20:
67:82:5d:52:64:f9:1b:91:ba:16:64:8a:14:35:09:
9e:eb:8c:d6:2f:f0:c5:27:ff:45:ac:09:77:ea:db:
33:f2:bd:0f:df:2b:d2:14:3a:da:51:ce:d9:73:cc:
b7:4c:83:a5:38:34:5d:0e:c4:44:59:39:2e:fb:d4:
3f:4e:8c:5d:61:b5:38:1c:7e:4e:c8:0b:9b:91:76:
e0:d0:e8:13:d0:65:54:92:05:33:29:0d:aa:02:21:
f6:07:d6:b1:ef:df:9f:54:37:e2:b6:df:bd:1e:65:
e5:61:0d:c3:c7:7e:c9:88:17:a0:e9:ff:4f:8b:2e:
ac:4e:d4:1a:a2:29:5a:56:70:cf:4e:af:ce:cc:31:
a4:80:01:ee:29:15:ea:17:e0:e2:a3:60:e4:92:9b:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:9C:EE:5F:8C:7F:6A:F7:E0:08:AF:3C:59:3C:09:09:03:BF:88
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gFac7l-Mf2r34AivPFk8CQkDv4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.66.0/23
85.234.84.0/24
85.234.86.0/24
92.38.143.0/24
93.113.170.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
2a03:90c0:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
76:1c:db:0b:56:ef:39:67:3e:9d:3d:59:80:f0:6a:37:e8:79:
25:df:14:84:b2:ab:ca:31:c1:1b:fc:f4:d5:36:30:a0:cc:df:
7b:1a:0a:61:e6:45:ab:b1:03:4f:6c:c7:31:b7:42:7e:5b:5d:
a7:37:5d:1f:fe:3e:06:74:88:c4:4c:02:19:63:6f:d5:32:91:
db:1f:c9:ce:98:d5:9d:65:3c:f8:6a:a0:80:08:1c:3f:98:3f:
6b:78:85:83:bf:42:be:b6:9c:96:96:cb:1b:10:5a:a5:9f:c0:
fd:a2:32:e0:75:59:e5:43:38:53:84:96:b5:27:ae:96:6c:7d:
0a:6b:f6:65:03:74:ab:53:e2:ec:79:3d:36:14:c1:97:82:35:
b3:06:52:db:80:33:ff:bc:67:1f:af:2c:af:f0:b9:92:e0:13:
04:8f:18:a6:76:97:35:47:0b:6b:75:a4:6f:6e:72:6e:3e:f8:
66:52:8c:d4:46:94:2b:60:29:5b:14:f7:1f:ec:9b:5c:d2:c0:
e5:bd:84:95:a1:3d:5f:e4:f3:75:57:eb:f5:d4:91:71:09:41:
e1:cf:91:19:6e:ea:1b:d0:cb:81:e7:ab:94:21:2e:a7:ea:71:
21:62:63:16:f0:d6:5a:ba:a3:f0:cf:21:ae:70:6e:76:4c:6c:
0e:9f:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:20:21 2025 by rpki-client