Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/r5EWPDOuznwuJ_gwegmGWo_VoT4.roa
File: r5EWPDOuznwuJ_gwegmGWo_VoT4.roa (raw, json)
Hash identifier: 22oOzEPrB/F9DYXhzHq8qckGe7hR37x71XFrsgJEGOA=
Subject key identifier: AF:91:16:3C:33:AE:CE:7C:2E:27:F8:30:7A:09:86:5A:8F:D5:A1:3E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01979C50FF88B8A84CBB1B43153057CC5054
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/r5EWPDOuznwuJ_gwegmGWo_VoT4.roa
Signing time: Mon 23 Jun 2025 10:24:03 +0000
ROA not before: Mon 23 Jun 2025 10:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210423
IP address blocks: 84.232.35.0/24 maxlen: 24
84.232.36.0/23 maxlen: 23
84.232.88.0/23 maxlen: 24
84.236.226.0/23 maxlen: 24
84.236.234.0/23 maxlen: 23
88.148.100.0/23 maxlen: 24
94.24.46.0/23 maxlen: 23
95.178.112.0/22 maxlen: 22
95.178.112.0/23 maxlen: 23
95.178.114.0/23 maxlen: 23
217.61.80.0/24 maxlen: 24
217.61.81.0/24 maxlen: 24
217.61.82.0/24 maxlen: 24
217.61.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 09:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:50:ff:88:b8:a8:4c:bb:1b:43:15:30:57:cc:50:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jun 23 10:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af91163c33aece7c2e27f8307a09865a8fd5a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:dc:41:c4:09:f3:0a:6a:c4:cc:f3:9e:81:
5a:2e:c9:3c:3a:4e:7e:82:27:ba:88:b1:c0:1c:4e:
b8:81:1f:c9:c9:b2:e1:97:e7:55:27:73:42:4b:d1:
5c:73:55:c4:54:0e:b8:13:ea:3b:e3:34:0d:2f:53:
09:1a:f4:a1:8f:ab:ad:ab:84:4a:5c:f3:06:ac:d9:
25:84:92:d2:67:41:bc:d2:71:4a:eb:af:23:f6:51:
12:ab:42:ed:05:b4:84:41:c2:38:cc:c4:a8:cd:96:
60:3c:82:85:2d:9d:72:83:74:58:c5:0a:3d:1c:3c:
c6:a4:36:64:ed:a0:84:4e:47:e9:c8:a1:03:9c:f7:
0d:b5:35:d4:aa:7d:2f:c0:49:9d:d1:9f:f8:2d:e2:
18:78:4b:d0:dc:bf:b8:7b:06:b8:0f:26:ce:d7:7e:
a8:fd:56:8d:08:64:4e:7b:1a:bd:ed:b4:e7:75:20:
0e:7b:a9:f9:45:cd:23:8d:ce:d2:13:5a:9f:b5:b6:
1f:1b:0e:5c:d6:b6:ad:83:89:74:ce:9b:6b:fe:ac:
33:e9:90:9d:e4:9a:f9:64:d0:07:c5:65:ac:86:32:
fc:6b:78:25:8e:16:b3:87:79:f4:cb:70:57:3a:07:
41:7d:e1:b2:ad:de:0c:18:c9:69:db:91:b8:05:2c:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:16:3C:33:AE:CE:7C:2E:27:F8:30:7A:09:86:5A:8F:D5:A1:3E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/r5EWPDOuznwuJ_gwegmGWo_VoT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.35.0-84.232.37.255
84.232.88.0/23
84.236.226.0/23
84.236.234.0/23
88.148.100.0/23
94.24.46.0/23
95.178.112.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:aa:3a:60:11:87:7f:b8:68:ea:75:0e:20:f0:19:96:d6:a2:
ad:93:88:88:29:9b:b7:59:19:d1:99:da:66:74:f9:61:60:6b:
b5:0a:19:ba:0c:e8:16:51:f2:83:d0:8d:83:fb:65:83:a2:0e:
51:35:78:f0:cb:e3:0a:f9:05:c3:7f:a7:1a:b5:f7:1e:d2:42:
c3:ed:c2:d1:37:91:5f:3f:42:15:e2:f5:8c:10:34:69:10:d4:
d6:96:c1:91:9e:29:dc:cf:fc:61:d8:69:d3:45:f1:f1:b4:35:
c2:25:0d:e3:fd:dd:d2:14:51:e3:95:b9:29:cd:54:ee:41:a5:
64:23:06:b9:55:46:d3:fa:68:55:17:0f:eb:bf:d0:32:6a:f7:
a7:a1:5f:6d:11:66:03:3a:39:50:fc:bd:31:44:58:38:b9:ec:
d2:14:4e:81:70:5b:a5:2e:21:e9:e6:62:07:ca:f3:31:01:17:
8f:4f:3b:05:9b:ab:42:68:6d:b3:97:a9:1b:de:df:91:02:ce:
22:0e:db:4a:9f:35:1a:ee:af:68:d6:a9:1b:85:58:db:e0:bf:
45:5a:a4:5e:7f:45:37:e9:e3:6a:ad:49:50:b9:35:5b:6c:d5:
a0:4d:a6:51:c4:a9:23:16:b2:38:78:83:38:92:a2:ea:e3:cc:
c9:e3:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:41:13 2025 by rpki-client