Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JPsR_xtQ1WcWRa-LDcfCLtVLgpo.roa
File: JPsR_xtQ1WcWRa-LDcfCLtVLgpo.roa (raw, json)
Hash identifier: b3ttZg1kcGnl7m+ec+gmWmQEVDgNdZBaCxaNGwcThnM=
Subject key identifier: 24:FB:11:FF:1B:50:D5:67:16:45:AF:8B:0D:C7:C2:2E:D5:4B:82:9A
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DB1DC78C6702236880143F35C1D9BB
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JPsR_xtQ1WcWRa-LDcfCLtVLgpo.roa
Signing time: Sun 06 Jul 2025 22:28:42 +0000
ROA not before: Sun 06 Jul 2025 22:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
194.67.196.0/22 maxlen: 22
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:db:1d:c7:8c:67:02:23:68:80:14:3f:35:c1:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24fb11ff1b50d5671645af8b0dc7c22ed54b829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:56:b7:d2:9b:29:6b:00:a5:ff:c0:14:2f:
eb:b7:09:d7:ad:6b:ce:a0:da:ca:1a:55:f1:45:f0:
a2:50:0b:c6:98:e3:71:27:7e:9f:ee:5c:9d:2f:80:
7c:72:07:8a:c3:44:e3:dd:ce:c1:5f:7c:74:40:a8:
d1:86:80:35:51:2a:84:ca:24:5a:7e:26:80:30:18:
17:cc:70:fe:00:86:2e:3e:97:30:db:18:78:84:f1:
61:ca:92:4d:30:39:72:a6:a9:99:a6:95:56:d2:7c:
e6:82:97:4f:af:5a:e6:e7:d3:50:e7:ce:7f:f7:50:
40:44:d9:ea:91:be:0f:08:ee:4d:ca:03:23:81:39:
07:cc:28:3f:63:ba:8d:24:01:d6:3d:6b:2f:4b:28:
37:f4:e4:4f:c6:c3:04:c2:13:50:30:3d:86:09:41:
9c:8a:f3:b1:92:7f:75:35:6c:28:7c:40:ed:ea:c9:
90:37:d5:b3:2c:c8:0f:21:9a:84:0b:6e:3e:0c:4d:
7f:c4:30:2d:ac:49:e1:cb:fe:f4:fd:1f:05:30:e9:
66:fe:49:21:89:f5:5f:ee:e4:50:f8:12:2a:49:7e:
3b:15:65:ac:13:e0:23:e7:7c:cc:33:66:7a:a6:4b:
ed:8b:0e:4a:73:c8:18:bd:de:27:28:21:44:20:f5:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:11:FF:1B:50:D5:67:16:45:AF:8B:0D:C7:C2:2E:D5:4B:82:9A
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JPsR_xtQ1WcWRa-LDcfCLtVLgpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.176.0/22
45.132.252.0/24
45.133.247.0/24
91.217.80.0/24
185.105.116.0/23
193.109.85.0/24
193.124.176.0/20
194.67.196.0/22
194.67.202.0-194.67.223.255
Signature Algorithm: sha256WithRSAEncryption
b2:cd:28:b3:39:8d:65:b8:7b:ab:63:ea:2e:42:5d:9f:c5:bc:
76:53:a9:e9:58:37:2f:9b:9b:c6:3b:d4:db:b8:c1:78:3b:12:
fe:a9:46:1f:f9:77:c1:05:28:a0:e9:63:9a:06:c6:2f:74:ee:
13:42:10:2e:05:6c:a7:0c:8f:e0:25:47:bf:bf:7c:ae:67:92:
5e:d8:1d:b0:a3:e2:49:0f:39:4d:7d:d7:db:c1:d6:a8:a2:13:
39:23:01:b8:22:03:9f:62:9f:bb:3d:1b:e2:4d:36:03:0f:93:
40:ba:97:23:04:47:d4:d6:d1:0e:82:54:5a:b6:b6:ea:5b:83:
16:3b:ec:20:69:4b:3f:b4:3b:79:ef:7e:df:23:58:0a:0f:54:
9e:64:cc:95:95:b9:bf:13:87:fa:5e:ee:ea:32:4e:f7:dc:56:
5d:75:ad:04:ab:e0:66:9e:f9:6e:f8:ac:5a:a8:35:bb:d5:e1:
d4:4c:73:46:a9:b5:ce:81:c0:79:96:3a:b5:11:ff:a6:eb:65:
86:b0:d6:93:6d:29:51:05:81:8e:4f:09:f4:99:9c:95:f8:d4:
a8:39:c5:8b:d4:7b:8e:76:25:ca:25:b1:6d:c0:d0:b0:57:28:
8a:67:da:73:b4:0b:1b:2d:e0:16:b2:fa:f5:6c:d0:24:da:8b:
92:fa:5b:3c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZfh2x3HjGcCI2iAFD81wdm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjUwNzA2MjIyODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGZiMTFmZjFiNTBkNTY3MTY0NWFmOGIwZGM3YzIyZWQ1NGI4MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ERWt9KbKWsApf/AFC/rtwnXrWvO
oNrKGlXxRfCiUAvGmONxJ36f7lydL4B8cgeKw0Tj3c7BX3x0QKjRhoA1USqEyiRa
fiaAMBgXzHD+AIYuPpcw2xh4hPFhypJNMDlypqmZppVW0nzmgpdPr1rm59NQ585/
91BARNnqkb4PCO5NygMjgTkHzCg/Y7qNJAHWPWsvSyg39ORPxsMEwhNQMD2GCUGc
ivOxkn91NWwofEDt6smQN9WzLMgPIZqEC24+DE1/xDAtrEnhy/70/R8FMOlm/kkh
ifVf7uRQ+BIqSX47FWWsE+Aj53zMM2Z6pkvtiw5Kc8gYvd4nKCFEIPWcTQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCT7Ef8bUNVnFkWviw3Hwi7VS4KaMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvSlBzUl94dFExV2NXUmEtTERjZkNMdFZMZ3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCLYCwAwQA
LYT8AwQALYX3AwQAW9lQAwQBuWl0AwQAwW1VAwQEwXywAwQCwkPEMAwDBAHCQ8oD
BAXCQ8AwDQYJKoZIhvcNAQELBQADggEBALLNKLM5jWW4e6tj6i5CXZ/FvHZTqelY
Ny+bm8Y71Nu4wXg7Ev6pRh/5d8EFKKDpY5oGxi907hNCEC4FbKcMj+AlR7+/fK5n
kl7YHbCj4kkPOU1919vB1qiiEzkjAbgiA59in7s9G+JNNgMPk0C6lyMER9TW0Q6C
VFq2tupbgxY77CBpSz+0O3nvft8jWAoPVJ5kzJWVub8Th/pe7uoyTvfcVl11rQSr
4Gae+W74rFqoNbvV4dRMc0aptc6BwHmWOrUR/6brZYaw1pNtKVEFgY5PCfSZnJX4
1Kg5xYvUe452JcolsW3A0LBXKIpn2nO0Cxst4Bay+vVs0CTai5L6Wzw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:05 2025 by rpki-client