Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/x5l__-I3qn1tnoHkEqLydbNLv8s.roa
File: x5l__-I3qn1tnoHkEqLydbNLv8s.roa (raw, json)
Hash identifier: BUW58KeleIJ65c5vWPJscwISFxFq96Vay/MFqpn9xd8=
Subject key identifier: C7:99:7F:FF:E2:37:AA:7D:6D:9E:81:E4:12:A2:F2:75:B3:4B:BF:CB
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0197E517AA98A1AF816D33810E5E7802EDA8
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/x5l__-I3qn1tnoHkEqLydbNLv8s.roa
Signing time: Mon 07 Jul 2025 13:33:42 +0000
ROA not before: Mon 07 Jul 2025 13:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29262
IP address blocks: 46.29.26.0/24 maxlen: 24
46.29.27.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 09 Jul 2025 08:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:17:aa:98:a1:af:81:6d:33:81:0e:5e:78:02:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 7 13:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7997fffe237aa7d6d9e81e412a2f275b34bbfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:ae:fa:59:78:46:3d:9d:e3:13:32:9e:00:
d0:ec:1e:01:f3:3d:e9:84:b7:98:c6:bf:e8:56:e4:
c2:07:52:71:f4:b9:35:1d:b9:b7:19:02:64:bc:ea:
05:6f:51:82:67:91:5a:df:e9:0c:f2:55:58:a1:54:
c3:cd:92:08:f7:32:ab:f9:61:6c:e9:be:e7:94:7d:
a8:bb:b6:d8:af:07:e3:42:3f:8e:b4:f9:4a:28:4e:
4d:0a:db:e3:c1:11:3a:8f:d9:47:ba:50:29:b9:31:
a1:3c:2f:f9:0c:b7:4a:e6:7b:b1:94:90:f1:4b:8a:
31:6c:a0:df:98:52:7a:56:a2:1a:29:c5:30:31:23:
19:0d:d0:d2:97:15:6b:70:9d:42:b6:6b:71:97:ca:
0d:f4:3f:c0:b4:bc:de:bf:26:b8:ac:68:72:e0:ec:
b2:e4:a0:b6:a3:4f:40:45:db:06:3c:85:9a:1a:21:
fc:5a:86:e8:c0:eb:03:c1:cc:00:3e:52:95:25:46:
e1:d7:e1:3b:76:11:ba:c1:7f:d7:03:8b:f8:56:f9:
a6:11:93:22:0a:07:0d:66:d2:4a:ac:0b:b2:6d:9f:
82:4b:2c:af:20:d8:95:be:d8:b6:28:ee:77:03:29:
3a:b3:77:6a:d1:52:36:b3:7c:a4:08:8d:31:d5:a6:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:7F:FF:E2:37:AA:7D:6D:9E:81:E4:12:A2:F2:75:B3:4B:BF:CB
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/x5l__-I3qn1tnoHkEqLydbNLv8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/23
93.190.12.0/23
160.20.108.0/23
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
3f:f4:21:ed:29:8d:e0:09:33:34:66:9d:68:12:95:a6:29:e3:
24:76:65:f2:f5:1b:9b:9c:7e:1e:17:5a:7d:e6:27:1c:12:93:
f7:83:e7:0e:6d:33:f3:fd:b6:35:6b:27:d2:5c:04:da:e1:b7:
8d:43:f0:14:02:4c:e5:10:52:86:c8:63:ed:31:c3:ad:01:74:
de:90:85:42:06:38:7a:dd:01:ee:a2:75:0c:bf:da:94:94:4b:
78:04:48:b2:aa:a6:ad:72:30:b5:55:c3:bb:5d:20:85:5b:1c:
39:e7:40:f6:4f:98:1a:f6:f7:86:72:2c:86:88:79:b8:e6:93:
95:50:05:b2:60:de:04:d5:e4:53:f9:97:3f:89:a5:18:fd:7a:
b1:ca:6d:01:e0:93:2d:ce:d3:c0:d8:8a:67:d2:53:46:9e:d2:
f5:6c:34:9a:79:d3:e4:88:a4:44:02:61:9c:14:f0:39:c6:fa:
13:49:b4:7b:06:75:72:4c:41:21:83:98:47:b4:45:3f:dc:21:
71:e3:54:cd:98:a0:93:51:b8:e6:ec:9e:e5:9c:58:d4:ae:c0:
c6:28:eb:9b:52:7a:e7:98:28:a9:8d:48:72:59:d6:25:d4:95:
7c:49:2b:3e:16:4b:60:7d:ba:15:a5:4e:8c:37:dc:cf:dc:69:
a6:9a:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:30:51 2025 by rpki-client