Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/R8lBlsQbLkUhIuSv7KFjxnMpky8.roa
File: R8lBlsQbLkUhIuSv7KFjxnMpky8.roa (raw, json)
Hash identifier: xtBIDKIst7r0+evuR8VMOhkuJilI8lTOIeywPFE+qlg=
Subject key identifier: 47:C9:41:96:C4:1B:2E:45:21:22:E4:AF:EC:A1:63:C6:73:29:93:2F
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0197D749BA08650ED4A1199C69A4823243AD
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/R8lBlsQbLkUhIuSv7KFjxnMpky8.roa
Signing time: Fri 04 Jul 2025 21:13:42 +0000
ROA not before: Fri 04 Jul 2025 21:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 46.253.112.0/20 maxlen: 24
80.66.204.0/22 maxlen: 24
82.149.224.0/19 maxlen: 19
82.149.232.0/24 maxlen: 24
82.149.233.0/24 maxlen: 24
82.149.234.0/24 maxlen: 24
82.149.235.0/24 maxlen: 24
83.141.0.0/18 maxlen: 18
83.141.10.0/24 maxlen: 24
83.141.15.0/24 maxlen: 24
83.141.16.0/24 maxlen: 24
83.141.26.0/24 maxlen: 24
83.141.27.0/24 maxlen: 24
83.141.28.0/24 maxlen: 24
83.141.29.0/24 maxlen: 24
83.141.57.0/24 maxlen: 24
83.141.60.0/22 maxlen: 22
83.141.60.0/24 maxlen: 24
83.141.62.0/24 maxlen: 24
83.141.63.0/24 maxlen: 24
109.71.24.0/21 maxlen: 21
109.71.29.0/24 maxlen: 24
109.71.31.0/24 maxlen: 24
178.19.64.0/20 maxlen: 20
185.37.16.0/22 maxlen: 22
195.225.196.0/22 maxlen: 24
2a00:f520::/32 maxlen: 32
2a01:440::/29 maxlen: 48
2a01:440:1509::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Jul 2025 22:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:49:ba:08:65:0e:d4:a1:19:9c:69:a4:82:32:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 4 21:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47c94196c41b2e452122e4afeca163c67329932f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:e4:2f:c8:49:3f:ab:b8:1a:15:04:ac:d7:
4b:66:9b:b9:9d:df:a7:48:f4:8f:46:84:5e:c2:32:
a0:e8:65:ee:d2:47:ad:a1:c0:50:5e:c8:27:41:22:
4a:cb:a3:a0:93:d8:05:d7:13:15:d9:ac:0c:55:7e:
de:16:56:11:bf:9d:c0:3b:f3:2e:98:ef:d1:da:78:
66:4a:84:c6:70:5c:79:5d:bd:3e:2b:aa:44:96:b8:
4d:7b:41:d2:76:10:ec:dd:36:ec:bc:50:11:d6:86:
f1:7e:e8:ef:53:d4:96:f4:7a:de:18:7e:30:fe:78:
7f:06:f1:fc:63:15:12:f7:28:44:54:cb:7a:6e:ee:
01:fb:7e:d3:67:3a:98:c0:1b:1c:62:85:90:84:cb:
05:e6:bf:6d:93:d4:d5:99:69:91:82:1e:ff:ad:7b:
ef:92:58:70:30:c1:84:fc:36:c8:d8:de:51:fd:3c:
ca:8c:8a:6b:15:5e:97:ee:41:f8:35:14:29:1c:a9:
51:bb:73:93:66:74:b9:f2:cc:2f:34:49:03:32:a9:
f9:d5:8a:f1:82:be:2d:b5:2a:78:4f:15:81:bb:7a:
b1:8f:1b:25:35:c1:54:95:5a:46:3c:0b:67:15:00:
65:3a:f7:5e:ec:f2:f1:7a:6f:39:a0:96:99:c6:19:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C9:41:96:C4:1B:2E:45:21:22:E4:AF:EC:A1:63:C6:73:29:93:2F
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/R8lBlsQbLkUhIuSv7KFjxnMpky8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
185.37.16.0/22
195.225.196.0/22
IPv6:
2a00:f520::/32
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
21:29:8a:04:d6:6d:d7:eb:7b:64:69:db:d1:3d:97:d6:d9:62:
3d:b7:05:35:65:1d:9f:9e:1c:83:67:4d:e5:14:c6:c4:9e:32:
c6:30:f6:30:e9:12:76:15:19:0d:c4:93:95:4e:df:1e:27:c4:
89:c5:f3:35:50:45:3f:cf:d2:f0:f4:8c:96:09:48:00:13:56:
fc:5c:cb:1f:27:6f:58:aa:db:36:36:58:f3:3d:97:28:28:22:
fc:ac:64:b8:4d:23:e0:06:23:27:b4:f9:2f:03:f6:46:eb:0f:
bd:ac:59:5d:fa:c1:54:ce:c3:f0:3c:1d:81:b3:5a:54:0b:6d:
f9:1e:f8:80:6b:f5:c4:ed:c9:11:c3:c6:ef:12:4b:51:1c:ee:
c4:aa:81:bf:e5:78:3c:2d:c1:2a:9e:af:21:cd:97:64:3c:79:
f5:df:26:40:37:da:49:db:48:a7:1d:c0:2b:aa:c8:3c:77:03:
c9:6b:d0:9a:3d:95:cf:ce:04:82:49:54:d1:2c:7f:ba:79:e4:
d4:a6:da:3f:7a:c3:64:f9:10:5f:2d:6e:20:a8:45:f8:32:3f:
02:cb:21:b2:23:6b:f0:ba:e5:6d:b5:01:c4:95:98:f8:89:47:
39:1a:71:1f:6c:44:5f:05:3a:82:01:51:96:59:a7:a0:18:2c:
ea:8f:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:19:16 2025 by rpki-client