Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/tK2IfOKbBeB0x9ee8TMGO4Zc2Jo.roa
File: tK2IfOKbBeB0x9ee8TMGO4Zc2Jo.roa (raw, json)
Hash identifier: BISnj44QXDH5EzmtBN2w0q9eGD4Ak1dylDFy0q7fgPw=
Subject key identifier: B4:AD:88:7C:E2:9B:05:E0:74:C7:D7:9E:F1:33:06:3B:86:5C:D8:9A
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01983DCBD54A1379167B754AD5762F86A6C3
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/tK2IfOKbBeB0x9ee8TMGO4Zc2Jo.roa
Signing time: Thu 24 Jul 2025 18:57:05 +0000
ROA not before: Thu 24 Jul 2025 18:57:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
85.234.66.0/24 maxlen: 24
85.234.67.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
85.234.91.0/24 maxlen: 24
85.234.93.0/24 maxlen: 24
85.234.94.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7a0::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 25 Jul 2025 11:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cb:d5:4a:13:79:16:7b:75:4a:d5:76:2f:86:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jul 24 18:57:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ad887ce29b05e074c7d79ef133063b865cd89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:c7:c9:5a:7f:9f:01:f6:0b:d3:e2:b3:10:
38:32:08:f3:98:1b:d3:6e:a2:8a:10:e6:24:f6:c0:
a8:d7:f2:57:16:46:e3:a1:48:54:ff:8c:99:97:38:
f5:0b:6c:75:74:74:90:fa:4f:fa:a0:66:d8:77:00:
6f:21:8c:f8:0b:3a:3a:5e:48:1a:c9:89:5d:ad:2d:
89:03:91:48:a9:ed:ad:cc:4e:4f:d3:12:3a:bb:4a:
ea:65:1c:18:17:94:21:79:b5:ae:e6:a3:bf:39:c6:
01:e6:b3:bd:5c:e1:ff:52:af:2c:7d:6a:3b:52:fd:
cf:d1:12:cb:66:3b:12:54:ee:cd:d8:64:24:df:37:
7e:df:1e:51:c0:d7:95:ba:80:e5:c1:22:8b:7e:b4:
af:c6:45:55:17:f6:63:49:61:e9:69:63:8e:9d:16:
a2:dc:75:3f:1e:93:43:b5:ce:c5:15:b5:a0:74:90:
76:7e:68:06:98:f3:1b:8a:6d:70:c4:05:25:c7:72:
8d:71:e8:6d:d8:87:3f:96:81:86:eb:8b:98:bc:ea:
82:70:50:d5:3b:2b:ba:da:b6:4e:ad:29:b2:2f:c5:
f8:8c:c7:76:fa:90:16:24:b0:d0:18:43:c1:b6:a0:
66:db:97:59:c6:fc:c5:6e:7b:66:f3:a1:fe:82:e8:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:88:7C:E2:9B:05:E0:74:C7:D7:9E:F1:33:06:3B:86:5C:D8:9A
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/tK2IfOKbBeB0x9ee8TMGO4Zc2Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.66.0/23
85.234.84.0/24
85.234.86.0/24
85.234.91.0/24
85.234.93.0-85.234.94.255
92.38.143.0/24
93.113.170.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
2a03:90c0:7a0::/43
Signature Algorithm: sha256WithRSAEncryption
c3:b7:c7:f2:7e:7a:4e:3f:82:b9:65:10:18:73:55:07:ff:49:
cb:58:51:b9:c3:c8:70:c5:da:eb:c6:df:8e:69:fa:1d:35:fc:
02:a8:fd:e0:ea:9a:23:bf:ab:a1:8c:a6:6e:d0:d7:9c:6f:79:
ab:4c:78:b3:9e:82:b8:b3:2f:08:bf:85:f9:84:09:46:15:b4:
66:af:f4:e4:59:7e:60:d7:83:30:a2:63:98:e7:5c:00:50:4a:
23:61:f1:cf:5f:aa:26:0e:69:b4:19:7e:bc:0b:61:f7:c1:14:
2b:a4:7b:f6:77:c1:d8:13:bc:87:d0:c0:cc:45:dd:87:b8:03:
fc:eb:c0:d2:67:74:8b:b0:1b:d7:7c:4b:f1:f6:f4:63:40:8b:
af:42:13:e1:da:a1:ef:5b:cc:1b:13:21:49:9e:42:84:14:17:
25:b9:12:c7:45:4d:d9:c2:f7:85:ff:ae:67:be:ba:96:6c:7a:
21:a5:c2:82:cf:45:0d:ac:5e:21:f4:db:e1:d5:9c:e0:b5:d3:
2f:6d:46:76:85:89:0d:ab:db:95:c2:52:f6:4d:4a:7b:3c:34:
c4:a9:14:0e:d4:28:ab:0f:9c:eb:f4:6e:21:cb:95:70:64:94:
38:4b:64:76:86:8a:96:fe:5d:d0:45:26:6e:0c:99:7c:38:b4:
f6:23:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:03:19 2025 by rpki-client