Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/fFewAZ74EGGznsBDtJwt6hVHypE.roa
File: fFewAZ74EGGznsBDtJwt6hVHypE.roa (raw, json)
Hash identifier: 01RwHvMwT04U2WTrlaL8fHa7TgeMjVeQsrqDCk5hS8A=
Subject key identifier: 7C:57:B0:01:9E:F8:10:61:B3:9E:C0:43:B4:9C:2D:EA:15:47:CA:91
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0197B030B2D9755500BDF9B680FC25157970
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/fFewAZ74EGGznsBDtJwt6hVHypE.roa
Signing time: Fri 27 Jun 2025 07:01:10 +0000
ROA not before: Fri 27 Jun 2025 07:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 31.128.32.0/22 maxlen: 24
37.233.82.0/23 maxlen: 24
37.233.84.0/23 maxlen: 24
37.233.86.0/24 maxlen: 24
45.130.212.0/22 maxlen: 24
45.137.188.0/24 maxlen: 24
45.145.163.0/24 maxlen: 24
77.73.233.0/24 maxlen: 24
77.73.235.0/24 maxlen: 24
77.73.238.0/24 maxlen: 24
83.222.20.0/23 maxlen: 24
90.156.254.0/23 maxlen: 24
91.218.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 07:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:30:b2:d9:75:55:00:bd:f9:b6:80:fc:25:15:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jun 27 07:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c57b0019ef81061b39ec043b49c2dea1547ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:f4:40:16:5f:a5:47:24:65:af:94:6e:ed:
65:2b:4a:aa:15:9c:23:3e:e9:28:0a:28:88:0a:1c:
94:01:59:eb:69:6a:e2:ec:95:2f:c7:25:26:c7:d3:
b2:ad:aa:16:bb:7a:23:27:94:63:08:64:24:7f:78:
82:f1:e8:8a:3f:5d:fe:cb:43:3e:43:46:44:0e:ab:
48:50:ef:c1:46:ba:ed:71:41:3b:00:0d:a4:b4:a1:
ba:7e:86:c1:52:3e:94:51:f3:d7:88:8f:39:8a:cf:
e1:eb:c5:38:1f:76:20:70:e4:5d:71:5c:0b:bb:a5:
6f:3c:ac:3a:27:ce:35:a2:c0:22:60:0d:8e:ac:60:
1e:91:4a:36:7e:64:72:77:5d:f7:aa:13:09:38:88:
2f:80:63:83:49:56:64:92:36:4a:d6:a6:4e:70:e5:
a4:6d:7f:58:08:c8:a3:4f:24:19:aa:04:33:06:4c:
cf:fe:40:2a:4f:20:34:92:e1:36:e2:e0:36:47:ca:
3a:c5:23:0d:4f:c3:13:0a:20:9c:0b:67:d2:ea:ef:
4a:90:69:5f:f5:39:c5:db:5d:01:5f:ae:a6:b1:83:
59:e0:67:28:e1:7e:6c:00:5d:be:00:71:4e:50:5b:
ea:2c:22:91:b5:9d:85:65:a8:41:d9:fc:2c:fc:12:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:B0:01:9E:F8:10:61:B3:9E:C0:43:B4:9C:2D:EA:15:47:CA:91
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/fFewAZ74EGGznsBDtJwt6hVHypE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.32.0/22
37.233.82.0-37.233.86.255
45.130.212.0/22
45.137.188.0/24
45.145.163.0/24
77.73.233.0/24
77.73.235.0/24
77.73.238.0/24
83.222.20.0/23
90.156.254.0/23
91.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
12:52:6f:26:ce:74:e0:fc:e2:9d:65:56:d8:95:bf:83:75:ab:
66:dc:8b:12:58:07:a5:7f:16:8b:87:d1:1c:0d:82:69:4d:13:
03:ab:50:40:fe:c0:1a:4a:a3:45:76:d5:fe:1e:89:1e:4b:25:
f5:e3:54:4c:51:9a:c8:5f:42:38:eb:7b:9a:dc:98:56:a3:25:
f5:ae:a9:cf:e0:ac:05:2d:69:b4:9d:cf:22:ea:37:a2:dd:71:
a2:8e:25:e1:84:2f:52:c3:44:1b:34:24:fc:3c:31:e7:d2:52:
ef:98:9b:f2:2b:cb:ec:84:5d:13:db:4c:1a:8f:43:94:31:13:
6f:e3:bc:fc:34:10:c3:8c:88:74:59:53:7c:33:07:10:77:e0:
21:0e:6d:73:a7:8e:c9:b7:a6:08:49:27:6d:58:9b:e5:a0:1c:
09:6b:78:08:ba:8b:78:2c:24:7c:a9:12:18:67:6f:b3:f0:39:
73:1b:42:36:8e:d7:8b:93:7e:a5:4c:2a:e6:35:1e:86:7e:d3:
4b:d8:e1:47:dc:0c:a4:60:29:92:2a:da:0c:4f:94:b1:fc:eb:
e7:99:25:e8:9b:3d:16:ff:d7:ab:31:58:aa:c3:ae:53:89:cd:
c7:f1:7d:b7:0e:49:be:7b:d2:bd:71:fa:d3:d5:02:90:5f:e1:
81:40:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:21:36 2025 by rpki-client