Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/jPnTGkmq2PJ_TCxvPswn3lYKSUg.roa
File: jPnTGkmq2PJ_TCxvPswn3lYKSUg.roa (raw, json)
Hash identifier: F+2+7tNskRN9+0SuGTu4kDULD8tMBTvwNNJsuNIyuew=
Subject key identifier: 8C:F9:D3:1A:49:AA:D8:F2:7F:4C:2C:6F:3E:CC:27:DE:56:0A:49:48
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0197D73FA8EF8555BB26C85915C0E076E5DD
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/jPnTGkmq2PJ_TCxvPswn3lYKSUg.roa
Signing time: Fri 04 Jul 2025 21:02:42 +0000
ROA not before: Fri 04 Jul 2025 21:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 46.253.112.0/20 maxlen: 20
46.253.114.0/24 maxlen: 24
80.66.204.0/22 maxlen: 22
82.149.224.0/19 maxlen: 19
82.149.232.0/24 maxlen: 24
82.149.233.0/24 maxlen: 24
82.149.234.0/24 maxlen: 24
82.149.235.0/24 maxlen: 24
83.141.0.0/18 maxlen: 18
83.141.10.0/24 maxlen: 24
83.141.15.0/24 maxlen: 24
83.141.16.0/24 maxlen: 24
83.141.26.0/24 maxlen: 24
83.141.27.0/24 maxlen: 24
83.141.28.0/24 maxlen: 24
83.141.29.0/24 maxlen: 24
83.141.57.0/24 maxlen: 24
83.141.60.0/22 maxlen: 22
83.141.60.0/24 maxlen: 24
83.141.62.0/24 maxlen: 24
83.141.63.0/24 maxlen: 24
109.71.24.0/21 maxlen: 21
109.71.29.0/24 maxlen: 24
109.71.31.0/24 maxlen: 24
178.19.64.0/20 maxlen: 20
185.37.16.0/22 maxlen: 22
195.225.196.0/22 maxlen: 22
195.225.198.0/24 maxlen: 24
2a00:f520::/32 maxlen: 32
2a01:440::/29 maxlen: 48
2a01:440:50f::/48 maxlen: 48
2a01:440:1509::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Jul 2025 21:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:3f:a8:ef:85:55:bb:26:c8:59:15:c0:e0:76:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 4 21:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf9d31a49aad8f27f4c2c6f3ecc27de560a4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:3d:53:ea:84:03:7a:03:30:ef:e4:be:c5:
9e:9b:78:85:35:fb:aa:50:27:8c:e1:d3:1d:5e:12:
b8:25:67:66:49:04:b5:b5:48:b8:b7:8b:31:82:4a:
2d:c8:84:0a:38:f6:f9:a6:92:9d:e0:2b:b5:6e:c3:
58:50:b6:2d:06:87:d1:ca:a9:96:c3:a8:67:4d:f1:
ec:52:02:6a:8f:d1:05:68:9c:65:d1:9c:0c:39:15:
5c:f0:ab:e4:07:88:e7:60:ad:68:9f:85:4d:e5:ea:
f8:31:c1:ac:c9:c9:98:76:80:ab:67:b0:5b:7d:80:
41:87:30:78:89:23:47:1b:4a:36:34:fa:5c:08:90:
09:9a:25:70:06:c0:cf:b0:04:51:dc:84:3d:85:7e:
9c:58:61:e4:0f:31:9c:21:f9:00:f2:59:55:f1:32:
88:1b:e9:da:ea:1e:3d:c6:65:56:44:e1:8a:b9:06:
84:45:cb:b9:99:f2:13:bf:0b:01:21:f3:a8:c9:40:
fb:d6:51:35:19:3f:42:0e:5c:b0:0a:90:b8:20:18:
58:a3:5e:c6:6e:29:dc:5e:b7:8c:29:50:0b:3b:90:
61:b0:60:fa:c1:80:6d:cf:28:e3:85:39:a2:c0:f2:
54:74:50:c4:bb:bd:05:35:65:5b:b1:e3:a1:4c:ed:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:D3:1A:49:AA:D8:F2:7F:4C:2C:6F:3E:CC:27:DE:56:0A:49:48
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/jPnTGkmq2PJ_TCxvPswn3lYKSUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
185.37.16.0/22
195.225.196.0/22
IPv6:
2a00:f520::/32
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
68:5d:8e:86:9d:0b:bb:3c:20:90:f1:c6:c0:0a:39:32:1c:80:
de:25:7d:0e:14:a0:18:f5:36:dd:2a:54:1c:14:c3:51:6e:a1:
94:8c:67:ea:57:68:c3:02:2e:ea:33:7c:34:a2:03:93:d0:a5:
a9:9c:9a:09:ef:62:2d:e8:53:7d:36:2b:59:f1:07:1d:46:bc:
f5:1a:45:11:36:10:28:76:1b:c1:a7:d7:99:25:6f:db:e0:2e:
2a:bf:25:94:6b:7e:82:77:e4:e3:18:ec:2a:a6:26:2f:cf:3b:
4d:f2:b5:ef:b6:8e:17:0e:b2:1b:d6:84:06:8a:6c:26:a9:27:
f5:83:0f:33:f3:85:3d:cd:7d:08:2e:e5:cf:22:ec:6f:b6:4e:
55:7e:52:5f:00:25:51:9e:a3:1a:75:e7:bc:43:22:2c:0e:85:
44:f6:72:ef:91:22:d1:31:00:81:1b:6f:dc:4c:11:03:95:0a:
9b:79:a8:25:e4:28:b3:39:40:d4:a4:fd:ed:bc:2d:92:67:21:
5e:48:b9:98:2e:1c:43:e0:05:19:7e:ad:5a:dc:89:bd:29:10:
5b:7e:e2:5d:e1:0c:55:24:36:2d:0b:57:93:34:f6:71:02:b6:
d2:eb:8e:de:35:fa:81:d2:45:ec:9d:fe:31:02:65:82:c4:aa:
8c:8e:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:13:13 2025 by rpki-client