
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/8n7Ozhzveh32BvkJ31848tTCCDs.roa
File: 8n7Ozhzveh32BvkJ31848tTCCDs.roa (raw, json)
Hash identifier: ahi9Eqq+D3SKmKTBhSx8q/UhH+Vgmv7n7of3/29lUNM=
Subject key identifier: F2:7E:CE:CE:1C:EF:7A:1D:F6:06:F9:09:DF:5F:38:F2:D4:C2:08:3B
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0197CA40A1CA9EC69A6D01394B5C3208BC8C
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/8n7Ozhzveh32BvkJ31848tTCCDs.roa
Signing time: Wed 02 Jul 2025 08:28:42 +0000
ROA not before: Wed 02 Jul 2025 08:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.3.96.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
79.170.88.0/21 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.246.207.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/19 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/17 maxlen: 24
85.10.160.0/19 maxlen: 24
85.10.172.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
85.222.224.0/21 maxlen: 24
89.31.96.0/21 maxlen: 24
91.142.240.0/20 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
91.216.162.0/24 maxlen: 24
93.191.128.0/21 maxlen: 24
94.142.208.0/21 maxlen: 24
141.138.192.0/20 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
171.33.128.0/24 maxlen: 24
176.74.224.0/19 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.15.248.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.173.0/24 maxlen: 24
185.110.200.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2001:4cb8:e::/48 maxlen: 48
2001:4cb8:40b::/48 maxlen: 48
2a00:c080::/32 maxlen: 48
2a02:348::/32 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Jul 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:40:a1:ca:9e:c6:9a:6d:01:39:4b:5c:32:08:bc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 2 08:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f27ecece1cef7a1df606f909df5f38f2d4c2083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:50:86:19:d4:d0:21:2b:a6:a9:01:ad:0d:
64:8c:5c:ca:93:52:ab:e7:8f:c5:74:60:d9:1b:07:
ac:5e:db:5d:23:0f:39:8d:04:8c:3c:a7:02:fc:1b:
1d:f8:a1:23:44:8f:89:55:a8:d1:fb:74:c2:aa:47:
bd:6c:59:ad:ba:77:1e:ff:45:3e:12:da:38:70:58:
8f:bb:8e:3b:f7:a7:9d:7a:2d:6b:fc:a2:13:80:c4:
ee:cb:a5:8a:a8:4c:5e:3d:96:ef:30:0d:56:a3:86:
b6:dd:ca:76:78:f7:07:ba:1f:7f:49:d2:2a:91:70:
da:41:23:98:af:88:be:dc:07:6b:a4:d0:a9:ff:05:
11:53:75:70:6e:ed:24:58:fa:1a:58:b6:77:be:df:
18:da:e7:16:b2:e7:10:f5:b8:e8:76:e4:77:0f:18:
5a:b3:6d:da:0e:d0:d4:6c:92:8b:26:36:32:2a:fd:
74:cc:8f:1f:41:06:5e:4d:02:38:ba:ea:33:1b:a5:
4f:ad:ab:ee:83:8c:93:1a:0c:5f:6e:ff:e2:5d:ae:
39:79:ab:bb:5f:43:c9:61:16:20:05:53:c4:ad:a2:
06:f7:2f:c8:6a:97:c3:fe:c1:ed:18:6a:e6:82:a3:
17:eb:ea:cc:b5:63:a8:4a:f4:e4:9d:27:e3:b9:f3:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:CE:CE:1C:EF:7A:1D:F6:06:F9:09:DF:5F:38:F2:D4:C2:08:3B
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/8n7Ozhzveh32BvkJ31848tTCCDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.3.96.0/21
31.223.160.0/20
37.17.208.0/20
37.34.48.0/21
37.230.96.0/21
46.226.56.0/21
78.108.128.0/20
79.170.88.0/21
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
85.10.160.0/19
85.158.248.0-85.158.253.255
85.222.224.0/21
89.31.96.0/21
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.191.128.0/21
94.142.208.0/21
141.138.192.0/20
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.15.248.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
185.110.172.0/22
185.110.200.0/22
193.93.172.0/22
193.242.119.0/24
194.60.207.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a02:348::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
b6:a8:e4:39:65:ad:17:41:5d:5c:bf:28:20:39:87:e4:1f:39:
ee:2c:bf:c9:a0:03:2d:3e:47:f8:88:2b:d5:70:c3:46:19:87:
8f:1c:a0:8c:78:54:56:bd:ae:d6:6e:5a:31:e2:39:bd:d0:c7:
9e:b8:9a:bf:b8:47:7c:f9:ba:13:b4:50:8e:e8:e6:cc:25:a6:
4c:3b:5a:11:28:73:d9:bf:69:3a:09:c5:d8:b6:2f:e7:43:c1:
c1:1a:bb:50:b1:36:f9:de:7f:c2:f4:bc:fa:c4:63:31:47:28:
05:28:20:f4:3f:4e:c4:c0:a4:0b:af:d3:ae:44:de:48:69:c0:
20:9d:a2:6e:c9:60:d3:02:c1:95:8f:62:85:00:96:a9:21:04:
7d:fa:05:67:91:de:b9:39:6b:15:d3:19:75:f6:59:0a:de:13:
39:5e:32:a1:72:cc:2b:f1:7e:fe:c7:47:a4:37:fc:da:f0:3b:
22:a2:74:93:2e:55:62:56:a3:92:93:23:a3:ae:61:93:82:71:
f0:f8:ee:86:15:2e:7c:8f:37:ee:7a:7e:e3:8b:d1:d6:8d:dd:
db:1c:2e:30:0b:cc:f2:a1:55:1b:d4:df:97:ca:a2:cc:b5:d8:
20:2d:ef:3e:3e:7e:cc:bc:ca:99:9b:f0:8a:49:0a:5f:26:4d:
41:6d:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:20:37 2025 by rpki-client