Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/ScftVNTiKcRiHwwXoKGgg4EqsvQ.roa
File: ScftVNTiKcRiHwwXoKGgg4EqsvQ.roa (raw, json)
Hash identifier: BV3cyPAY8ID9C8SXtTn9VRGqqfdBoFuxVpJbAGSgKGY=
Subject key identifier: 49:C7:ED:54:D4:E2:29:C4:62:1F:0C:17:A0:A1:A0:83:81:2A:B2:F4
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 01977DF80D9CAD7770D24A50FF31CED3235B
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/ScftVNTiKcRiHwwXoKGgg4EqsvQ.roa
Signing time: Tue 17 Jun 2025 12:58:17 +0000
ROA not before: Tue 17 Jun 2025 12:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44565
IP address blocks: 79.171.16.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.4.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.17.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:f8:0d:9c:ad:77:70:d2:4a:50:ff:31:ce:d3:23:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jun 17 12:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c7ed54d4e229c4621f0c17a0a1a083812ab2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:f0:c6:72:fa:cc:e7:fb:41:3a:f7:0b:c2:
ad:32:db:eb:23:c3:7c:a1:01:68:2a:26:67:81:c7:
a4:44:d3:32:43:4b:1d:70:72:8d:05:20:ba:30:40:
45:a9:a4:08:77:26:64:d3:98:8b:c4:75:09:be:7e:
11:fa:72:e5:13:71:f0:80:b3:89:72:54:17:ad:18:
ef:47:e9:23:9c:5f:d6:21:ba:48:ca:95:4f:12:94:
42:63:71:66:a3:6b:58:10:70:ad:cf:99:31:07:17:
01:b0:b4:ad:c2:95:1c:05:79:16:ee:83:16:1c:4f:
e2:23:ec:a3:9d:77:35:26:8b:1a:05:af:0c:a3:7e:
80:11:3a:56:bb:18:6b:07:15:5e:de:85:71:3b:e6:
b0:f5:e4:a9:21:7d:0b:8e:d9:62:2f:e9:6b:89:bb:
2a:52:8e:bb:f4:fc:90:a2:52:4c:50:ca:4c:ae:e5:
45:60:9e:d0:cc:a3:ae:c2:46:18:54:5a:c2:67:4c:
7d:ce:4b:04:8c:d7:3e:15:ce:67:de:85:3d:ac:4b:
20:43:08:44:2b:ea:7a:dd:40:e6:a9:6c:87:b7:98:
36:39:dc:56:d9:06:f3:1a:68:e4:06:7b:14:15:7a:
1e:06:db:b7:c8:26:de:cb:eb:4b:21:80:89:1d:d7:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:ED:54:D4:E2:29:C4:62:1F:0C:17:A0:A1:A0:83:81:2A:B2:F4
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/ScftVNTiKcRiHwwXoKGgg4EqsvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.1.0-188.124.2.255
188.124.4.0/24
188.124.6.0-188.124.21.255
188.124.23.0-188.124.30.255
Signature Algorithm: sha256WithRSAEncryption
2b:25:79:2e:c3:6b:2e:a2:16:c2:10:2a:b2:1a:ba:af:f9:46:
7a:96:c4:ff:c4:56:aa:4f:0c:98:55:ac:6a:a0:01:df:92:69:
57:84:23:64:a2:13:69:c7:6d:2e:71:21:f2:9c:d2:01:87:2e:
86:d9:45:04:0f:57:66:bb:a7:79:84:12:db:af:b8:4e:5e:95:
a4:c0:33:c5:24:dc:1a:89:90:54:e1:c1:cc:da:a2:83:06:ec:
11:74:d4:27:ae:7d:46:34:38:ee:0e:12:77:e3:ef:23:91:73:
78:c6:86:91:ec:e5:11:5a:79:01:9a:ec:d0:f8:df:3c:41:2e:
c1:62:f4:3c:d3:17:4c:dd:d5:e3:11:64:4f:9f:46:93:fa:b4:
81:dc:85:69:00:14:12:5f:b3:eb:d5:92:d4:ca:74:00:72:e9:
52:06:a3:3d:e8:f6:3d:50:cf:38:ba:36:21:22:69:b5:bf:8f:
ad:e2:e1:91:90:75:c2:f3:72:1e:19:c4:4c:b2:18:66:88:19:
f4:8a:20:7c:7b:d2:e0:41:52:23:a2:e1:48:0d:c9:81:4c:65:
c8:92:e0:b5:77:84:49:3b:84:4f:ac:8e:89:90:44:f9:4c:b6:
ee:9f:2f:23:f5:58:80:01:7e:4a:29:0e:0d:43:45:c3:67:45:
49:95:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:11 2025 by rpki-client