Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/CXM1K8J_pybSpye7dqp1-4AZ6-U.roa
File: CXM1K8J_pybSpye7dqp1-4AZ6-U.roa (raw, json)
Hash identifier: 5ofck1kcfOiHB/oeJmPYc5utAsCQji74t7fb8s1y0Fk=
Subject key identifier: 09:73:35:2B:C2:7F:A7:26:D2:A7:27:BB:76:AA:75:FB:80:19:EB:E5
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0197D795B6DB8BB3218E4BD4E3DCAB27CC06
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/CXM1K8J_pybSpye7dqp1-4AZ6-U.roa
Signing time: Fri 04 Jul 2025 22:36:42 +0000
ROA not before: Fri 04 Jul 2025 22:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 46.253.112.0/20 maxlen: 24
80.66.204.0/22 maxlen: 24
82.149.224.0/19 maxlen: 24
82.149.232.0/24 maxlen: 24
82.149.233.0/24 maxlen: 24
82.149.234.0/24 maxlen: 24
82.149.235.0/24 maxlen: 24
83.141.0.0/18 maxlen: 24
109.71.24.0/21 maxlen: 24
178.19.64.0/20 maxlen: 24
185.37.16.0/22 maxlen: 24
195.225.196.0/22 maxlen: 24
2a00:f520::/32 maxlen: 48
2a01:440::/29 maxlen: 48
2a01:440:1509::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Jul 2025 02:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:95:b6:db:8b:b3:21:8e:4b:d4:e3:dc:ab:27:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 4 22:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0973352bc27fa726d2a727bb76aa75fb8019ebe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:98:5f:da:75:92:3f:d9:fd:30:2d:8a:5f:
1e:c5:74:87:ea:e8:09:02:04:71:c7:2c:96:0d:61:
b2:ab:d8:6b:75:a6:d3:48:cf:df:3b:ea:90:b7:c3:
cc:83:e6:1b:84:2e:c1:33:2b:2e:5f:8e:63:0b:95:
ac:34:8f:b7:6f:5e:ec:a4:e2:eb:29:51:93:3a:83:
48:24:1c:61:25:3a:ac:98:0e:7e:7e:a1:26:77:bd:
84:ea:79:cf:f8:6e:e2:e9:f8:6a:fc:a6:aa:a2:66:
17:8d:e6:c2:fd:a8:c3:ae:0a:83:8c:b7:c7:97:cd:
af:3b:72:7e:0d:2b:af:73:37:65:65:30:7a:ea:17:
cc:71:af:a4:54:c7:5a:ce:ad:89:6a:b1:6e:29:9e:
29:ec:f2:d4:f7:76:60:ad:f7:95:46:e2:1e:ef:b6:
a8:3f:05:4d:0b:aa:ba:36:3d:24:06:e9:37:c3:80:
11:21:db:a6:4d:dd:61:76:74:11:06:9c:d9:6f:53:
3a:94:e0:b8:bc:b5:b4:65:42:cb:3c:ce:67:25:d9:
71:e3:83:50:bc:a7:bd:71:6a:55:14:7b:2f:8b:31:
4c:ad:bd:f8:b7:fa:a2:b6:d5:78:b5:a3:a7:22:4e:
3e:27:e0:5b:1c:e8:09:b4:22:22:4f:5f:49:9f:e6:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:35:2B:C2:7F:A7:26:D2:A7:27:BB:76:AA:75:FB:80:19:EB:E5
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/CXM1K8J_pybSpye7dqp1-4AZ6-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
185.37.16.0/22
195.225.196.0/22
IPv6:
2a00:f520::/32
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
86:78:e2:ec:2e:c6:2a:55:e1:fa:61:89:39:29:97:a6:60:31:
01:fe:40:33:1d:fd:b4:37:a2:29:bc:e3:9f:55:a1:6e:93:cf:
46:79:c4:80:5a:e1:a2:37:d6:0e:68:65:d7:77:2a:3d:09:44:
ff:27:9b:c5:ac:48:3b:68:b0:08:25:cd:ee:5d:23:f7:24:dc:
4b:43:36:52:fe:95:ce:c9:34:82:41:c8:27:54:5b:65:27:65:
93:53:bb:9a:e1:ea:09:9d:77:74:2d:76:8d:f7:74:82:af:b5:
8e:70:c2:d9:6a:e4:7f:0d:33:58:6b:a4:b0:9a:b2:47:2c:90:
aa:0c:15:97:21:3f:0d:5f:fc:5e:11:4f:bf:ba:15:e3:ce:1e:
ca:92:77:2d:51:26:cc:04:f1:09:ad:f5:aa:1b:36:57:48:6d:
0f:78:df:a4:65:ee:1f:7e:98:c0:88:41:d1:95:7c:67:57:76:
5a:6f:42:63:dc:80:b7:95:36:46:0f:8b:99:05:21:f2:36:b1:
5b:6b:6c:00:68:a3:ce:04:ba:36:e5:3d:81:7e:fc:d6:98:c6:
db:cd:13:1b:02:fd:96:1d:df:c7:9a:db:64:dd:71:60:61:be:
cb:eb:76:d9:cf:16:77:ed:9f:e2:ec:ee:a5:e2:c5:53:b0:da:
33:4c:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:05:36 2025 by rpki-client