Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/ZIOdnNJg08fzlQjSeUkcwYh8rRY.roa
File: ZIOdnNJg08fzlQjSeUkcwYh8rRY.roa (raw, json)
Hash identifier: 9Fkoj6htKNZF5bmkpdc6793ieS7fsTCsJpzJn3rf5G0=
Subject key identifier: 64:83:9D:9C:D2:60:D3:C7:F3:95:08:D2:79:49:1C:C1:88:7C:AD:16
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0197C08A0E9C1D3D8B08294739B5560AE35F
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/ZIOdnNJg08fzlQjSeUkcwYh8rRY.roa
Signing time: Mon 30 Jun 2025 11:12:42 +0000
ROA not before: Mon 30 Jun 2025 11:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.140.168.0/24 maxlen: 24
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.155.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 09:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:8a:0e:9c:1d:3d:8b:08:29:47:39:b5:56:0a:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jun 30 11:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64839d9cd260d3c7f39508d279491cc1887cad16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:95:59:13:6c:6c:ea:f1:9f:fe:b7:a5:45:
1d:e1:ac:0e:8e:00:45:9f:39:43:7b:17:13:21:9b:
08:d3:f5:23:b4:91:75:1a:a3:bb:5e:f5:6b:2e:27:
7b:cc:11:8f:ae:8a:10:61:1d:14:97:bf:3d:fa:0e:
ec:5b:2c:0c:1c:4d:e5:e0:c2:2b:2b:dc:24:5e:e9:
06:b9:4c:6a:f9:3e:cd:e0:a5:2b:20:d6:bf:02:a1:
18:db:44:5c:2a:42:77:a1:52:30:99:ea:6e:fc:84:
a5:f6:72:cc:bd:c5:ab:64:5d:35:1c:fb:06:43:2e:
3c:d1:b5:3c:29:3f:fa:36:59:60:db:d0:c9:24:d2:
73:fc:f2:2f:4a:73:5d:62:6b:c9:ab:68:21:d8:d4:
7a:aa:1b:b1:fb:cd:99:72:94:c2:c2:5f:dc:23:f1:
12:44:75:fe:46:4e:43:dd:d9:7f:af:dd:30:9a:23:
ff:73:cc:b4:f1:bf:7e:c2:2f:5f:89:8c:ff:92:8a:
d3:39:5e:7b:2d:8d:96:67:c8:f6:33:ac:3a:c4:7a:
fe:d5:0d:20:c3:95:83:66:46:29:32:5d:a5:2b:53:
a4:a0:83:a1:ea:df:55:51:d5:78:09:10:cb:64:70:
65:3d:b5:f5:86:38:39:47:70:40:e9:3f:5c:a5:4d:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:83:9D:9C:D2:60:D3:C7:F3:95:08:D2:79:49:1C:C1:88:7C:AD:16
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/ZIOdnNJg08fzlQjSeUkcwYh8rRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.255.232.0/24
5.255.234.0/23
37.140.168.0/24
77.88.42.0/23
77.88.61.0/24
87.250.232.0/24
87.250.238.0/24
90.156.176.0/20
93.158.155.0/24
93.158.184.0/22
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
97:68:36:cb:fd:d6:9b:51:43:e9:e4:8f:a6:21:4e:03:e6:82:
9b:e7:fc:40:c1:64:aa:c9:28:70:68:14:a9:b8:b3:08:bd:0b:
52:13:a6:ec:b5:f1:33:9f:36:27:ae:ac:18:8a:30:d7:5e:3e:
fe:c5:54:e7:3f:9c:28:4a:bb:00:fc:f9:2c:18:47:9f:93:18:
86:8a:68:30:8d:56:a4:ce:de:a1:cd:9d:bd:7d:e0:ce:4c:02:
01:35:c1:c8:cb:31:bb:f3:04:9b:4b:bd:57:f4:19:19:88:eb:
ab:5a:b9:5e:cd:15:e0:e2:55:37:cc:5b:94:ce:61:c0:ca:6b:
b2:0a:65:7a:28:1a:95:c1:07:27:40:83:0f:1c:b4:26:29:4d:
bb:14:47:e0:af:2c:58:9b:67:e5:c2:ff:64:ad:03:e5:2f:d9:
87:d9:5e:ad:38:b7:6d:a1:bc:0b:6e:69:58:56:73:fb:8b:ab:
80:1b:6f:a7:ee:43:30:bf:be:f3:c9:d3:f6:30:da:a8:09:b8:
72:24:b4:bb:09:09:11:49:e8:67:20:5e:93:60:9b:46:8a:b3:
09:96:f6:97:d7:4d:03:e6:8b:ac:5f:f7:9d:72:fa:8b:4e:2d:
83:bb:09:e8:e9:68:7a:ee:94:ea:cc:af:ea:78:f4:ad:fc:24:
6f:30:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:12 2025 by rpki-client