Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z8xiUsLJ35SFjUa902hIR2Kgcr8.roa
File: z8xiUsLJ35SFjUa902hIR2Kgcr8.roa (raw, json)
Hash identifier: ZBPE34cmXO2Uc2Ia2phK5wEsJLQ+19n6vsANilvUZys=
Subject key identifier: CF:CC:62:52:C2:C9:DF:94:85:8D:46:BD:D3:68:48:47:62:A0:72:BF
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019818B62180CCAFFC4901BF7252C57130D5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z8xiUsLJ35SFjUa902hIR2Kgcr8.roa
Signing time: Thu 17 Jul 2025 14:07:25 +0000
ROA not before: Thu 17 Jul 2025 14:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 16:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:b6:21:80:cc:af:fc:49:01:bf:72:52:c5:71:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 17 14:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcc6252c2c9df94858d46bdd368484762a072bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:e1:16:db:72:1a:1a:c0:30:38:a1:55:00:
57:97:a9:94:7c:4b:00:34:42:3b:f9:1e:ea:9e:65:
da:af:1a:f9:34:db:8b:24:dc:85:33:99:4d:42:51:
4c:6f:8f:e1:da:c7:69:ef:e2:ea:3b:95:42:7a:e8:
42:60:f3:74:2a:87:70:34:ca:ad:8d:8d:13:c3:a6:
80:b5:5d:e0:c5:f0:57:be:38:b0:e1:d0:82:88:96:
f5:75:a8:97:a5:d1:42:f3:95:7e:3c:0e:3d:f1:ab:
4d:f9:c0:c8:6a:18:b7:24:bf:42:61:99:0d:0c:00:
b8:84:ed:95:45:a8:ae:9c:fa:2e:ed:f2:fc:6a:55:
32:ec:5a:77:21:b7:ed:7b:2a:36:60:b5:dd:bd:d2:
57:d0:47:02:aa:75:c7:55:37:e8:cf:6c:f7:2d:ee:
d8:0e:78:0c:72:15:50:09:42:f3:34:d1:0b:9c:22:
7e:9d:4a:ca:73:56:41:9e:d9:9d:fb:95:d3:21:14:
cd:4f:dd:33:db:44:16:64:25:89:07:c3:72:b9:77:
fb:ec:79:db:38:17:43:cc:54:ae:0f:f6:45:2d:60:
fd:68:49:27:54:9a:3e:3e:08:82:e0:82:c6:db:0b:
a9:c3:24:fd:41:68:0b:c9:16:a8:00:b5:24:ec:af:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:62:52:C2:C9:DF:94:85:8D:46:BD:D3:68:48:47:62:A0:72:BF
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z8xiUsLJ35SFjUa902hIR2Kgcr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.51.255
185.86.6.0/24
185.254.28.0/23
185.254.31.0/24
193.35.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:96:5e:75:74:e9:4f:a0:fa:ee:b4:97:c5:ef:9d:5e:44:f9:
3d:41:b8:70:d0:27:74:c8:1a:08:11:d9:5b:1a:e7:7f:70:61:
a5:15:49:4c:4b:b5:a1:28:2e:42:00:f8:fd:ce:86:d7:40:1b:
7f:e7:2b:7c:96:54:52:5b:48:ec:4b:20:d9:2e:1f:d4:00:82:
7c:1b:39:e8:78:33:2c:03:7c:24:17:fb:99:47:75:3a:a8:e6:
c0:4f:79:fc:b1:8c:86:d9:db:eb:ab:36:c7:1a:9c:df:3b:85:
88:29:64:08:28:cc:c9:7e:99:53:95:ac:4a:ac:0a:1d:03:94:
21:33:84:45:0c:8c:77:d3:79:3b:35:eb:0c:4f:c1:67:d8:8a:
40:9e:73:12:0c:68:af:37:7c:5e:d6:2a:cc:1d:e2:aa:b1:e4:
49:43:dd:96:bb:26:08:23:c4:e1:be:09:aa:81:8e:bd:b3:d6:
19:17:77:5e:ea:12:5d:48:ae:b3:ff:74:05:3d:66:f3:dc:b8:
bb:d6:92:86:d3:0e:95:97:e4:cd:e1:9d:08:de:70:37:82:ca:
1c:b9:8b:8e:04:89:b9:27:26:f5:dd:76:73:83:54:f3:87:07:
40:83:bd:df:33:4c:e5:6e:a7:b5:77:79:f1:f1:99:81:35:ce:
a7:c0:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:44 2025 by rpki-client