Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cK2Qm5qYPtaJJh5Bg_VQq_Gc_cA.roa
File: cK2Qm5qYPtaJJh5Bg_VQq_Gc_cA.roa (raw, json)
Hash identifier: Foi4100wkn3gl5qb/tqrYrM7aj+dDjgIgc8zdjEA6RY=
Subject key identifier: 70:AD:90:9B:9A:98:3E:D6:89:26:1E:41:83:F5:50:AB:F1:9C:FD:C0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01982DF19CE80D80F03E0C82FEDDBD6CAC79
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cK2Qm5qYPtaJJh5Bg_VQq_Gc_cA.roa
Signing time: Mon 21 Jul 2025 17:04:25 +0000
ROA not before: Mon 21 Jul 2025 17:04:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.119.0/24 maxlen: 24
45.9.17.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.140.0/22 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
45.15.178.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.184.0/22 maxlen: 24
45.15.184.0/24 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/24 maxlen: 24
45.82.247.0/24 maxlen: 24
45.82.248.0/21 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.26.0/24 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/24 maxlen: 24
45.89.107.0/24 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/24 maxlen: 24
92.118.231.0/24 maxlen: 24
92.118.232.0/24 maxlen: 24
92.118.233.0/24 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/24 maxlen: 24
213.59.112.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 17:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:f1:9c:e8:0d:80:f0:3e:0c:82:fe:dd:bd:6c:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 21 17:04:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ad909b9a983ed689261e4183f550abf19cfdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:c2:77:89:04:6a:9d:dd:d2:28:24:cb:81:
4d:ff:e7:d4:1f:84:24:e1:25:22:67:2b:0b:29:ee:
f9:be:92:bd:4f:fc:a4:7c:3a:c1:e8:15:b0:17:2d:
e5:29:fc:46:c4:9c:bf:23:74:b1:2f:a4:a0:d2:c9:
0a:27:3a:f7:f0:0d:c9:18:0b:a7:97:04:c8:a8:99:
73:70:29:61:d7:92:2c:24:b0:18:a0:24:f7:77:b9:
44:b5:4d:f4:b4:58:ab:fc:e5:3d:48:41:6a:b3:58:
5d:05:0e:7c:6d:f5:3a:f1:48:88:84:2e:48:cd:de:
b0:5b:9d:5c:0d:a3:ff:ce:24:0c:36:28:02:f8:8d:
e5:91:4f:2b:90:1d:59:d1:4b:9c:25:87:c8:9c:a7:
24:50:a3:29:58:91:c4:0f:42:e5:28:16:9e:b7:fc:
b8:84:4a:04:ea:9b:dd:18:c8:5c:e2:ca:b7:f0:0e:
d5:35:48:65:a8:cc:49:57:85:64:fc:70:8f:76:84:
5d:18:d4:66:e3:7d:e7:2a:42:d3:e6:56:41:90:78:
b8:c6:f3:92:9f:c0:51:32:1c:4c:b6:57:58:5f:4e:
50:e9:c8:7e:80:86:79:10:3f:1c:92:26:5f:22:3e:
d4:e9:4f:c7:3e:88:9e:dc:01:0c:1c:5f:9e:51:a7:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:90:9B:9A:98:3E:D6:89:26:1E:41:83:F5:50:AB:F1:9C:FD:C0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cK2Qm5qYPtaJJh5Bg_VQq_Gc_cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.119.0/24
45.9.17.0-45.9.19.255
45.15.126.0/23
45.15.140.0/22
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.26.255
45.83.128.0/22
45.83.140.0/22
45.83.148.0/23
45.86.60.0-45.86.65.255
45.86.67.0-45.86.70.255
45.86.72.0/24
45.86.74.0/23
45.88.160.0/22
45.88.176.0/23
45.88.182.0/23
45.89.105.0-45.89.111.255
45.89.196.0/24
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
185.161.69.0-185.161.70.255
213.59.112.0/24
213.59.119.0-213.59.120.255
Signature Algorithm: sha256WithRSAEncryption
a8:dd:7e:8b:af:37:20:74:2a:f6:c0:ff:a2:a5:77:f2:4f:0a:
0d:15:5e:58:96:a4:43:e3:f6:a3:ac:9e:fe:26:01:ba:4f:27:
ba:f6:ca:dd:e3:80:17:4d:14:e9:af:03:f8:29:a4:1e:10:b9:
8f:0f:92:6f:be:32:3f:ed:49:57:e5:96:7e:7f:62:8e:93:da:
88:34:e3:aa:cb:ef:b6:19:75:9e:8d:1b:f8:b7:3a:c1:ed:9a:
8e:1c:3f:e1:eb:d6:c6:02:25:10:68:df:89:b7:28:06:02:b2:
13:9a:8d:8c:8c:ac:52:ce:37:65:07:28:50:25:ea:44:07:68:
4d:3f:38:dc:d2:f0:5c:d6:c2:a6:1d:e9:d9:10:50:a6:ce:93:
03:5f:e3:07:c1:d8:52:3c:0e:d5:b5:ed:b7:c8:80:89:38:76:
4f:fd:ea:76:5b:e5:ae:f6:3b:70:6d:88:d9:2e:4e:d5:14:e8:
06:36:51:9c:85:37:d5:39:67:8a:3c:77:a9:e9:d8:e4:a4:10:
62:02:02:f0:3f:ad:7c:41:cf:ea:23:be:e6:02:2a:00:a7:8a:
e2:28:19:2b:98:a8:69:b6:41:72:f1:27:c3:ed:93:cd:a8:31:
47:49:39:bc:30:2e:ce:ee:15:ac:1f:ee:1d:b9:8a:a3:28:ba:
3e:cc:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:57:27 2025 by rpki-client