Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/jZABbXqdB2c0-DSNq3-v_PdHJYY.roa
File: jZABbXqdB2c0-DSNq3-v_PdHJYY.roa (raw, json)
Hash identifier: xZ3tiQ0NfddlnHEvweHWXkHzwER79wY4o30sUJzlpAY=
Subject key identifier: 8D:90:01:6D:7A:9D:07:67:34:F8:34:8D:AB:7F:AF:FC:F7:47:25:86
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0197D5AA13BA3175FB0B4396A4E5AF15542C
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/jZABbXqdB2c0-DSNq3-v_PdHJYY.roa
Signing time: Fri 04 Jul 2025 13:39:42 +0000
ROA not before: Fri 04 Jul 2025 13:39:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41275
IP address blocks: 5.35.112.0/22 maxlen: 22
5.35.112.0/23 maxlen: 23
5.35.113.0/24 maxlen: 24
5.35.114.0/23 maxlen: 23
62.217.184.0/21 maxlen: 21
85.198.104.0/23 maxlen: 23
89.169.48.0/22 maxlen: 22
89.169.48.0/23 maxlen: 23
89.169.50.0/23 maxlen: 23
89.207.216.0/21 maxlen: 21
89.207.216.0/22 maxlen: 22
89.207.216.0/24 maxlen: 24
89.207.217.0/24 maxlen: 24
89.207.220.0/22 maxlen: 22
89.207.221.0/24 maxlen: 24
93.157.244.0/22 maxlen: 22
95.131.144.0/21 maxlen: 21
95.131.144.0/22 maxlen: 22
95.131.144.0/24 maxlen: 24
95.131.148.0/22 maxlen: 22
185.43.198.0/23 maxlen: 23
185.136.76.0/22 maxlen: 22
185.136.76.0/23 maxlen: 23
185.136.78.0/23 maxlen: 23
185.155.17.0/24 maxlen: 24
185.155.18.0/23 maxlen: 23
217.150.200.0/23 maxlen: 23
2a02:5fe0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 06 Jul 2025 10:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:aa:13:ba:31:75:fb:0b:43:96:a4:e5:af:15:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Jul 4 13:39:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d90016d7a9d076734f8348dab7faffcf7472586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:59:25:2c:06:68:f7:35:6e:91:41:d9:af:
8e:26:99:d4:82:ad:76:af:70:ba:3c:0c:01:23:ca:
14:69:52:b8:b5:47:d4:a5:7c:5f:3a:0a:19:88:f4:
e0:1d:89:aa:de:05:7e:8f:94:4e:0e:a4:e3:8e:78:
96:83:13:44:40:c5:a2:a2:66:39:5c:00:ee:51:65:
94:ec:5f:34:38:38:36:67:9e:6b:49:ed:95:dc:8e:
5d:d7:a8:ce:4d:96:ff:e9:bf:f0:e5:19:da:60:6c:
01:06:96:72:1c:34:76:eb:15:1a:7b:b1:d9:c4:98:
54:f2:70:10:9f:03:62:8b:4d:9a:16:e4:bb:3a:b1:
39:56:22:c3:b7:01:b9:de:55:fc:ad:81:59:ab:5a:
50:2b:19:4f:f9:15:85:ed:f8:62:f8:bd:9d:d6:d3:
95:67:85:1c:e9:ea:71:82:01:6a:80:ff:90:0d:9a:
ba:b8:06:69:c6:57:64:b9:ad:3e:3e:2b:ee:6e:a5:
b7:81:a1:42:6d:f7:0f:74:af:1f:b1:1d:c9:44:cf:
10:79:e7:3e:1b:36:f6:f8:e2:c2:ea:03:d1:0c:78:
66:57:98:eb:0f:2f:69:4c:4b:25:1e:d4:fc:48:eb:
ed:96:7c:e8:96:31:82:2c:0f:42:d5:14:d4:46:bd:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:01:6D:7A:9D:07:67:34:F8:34:8D:AB:7F:AF:FC:F7:47:25:86
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/jZABbXqdB2c0-DSNq3-v_PdHJYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.112.0/22
62.217.184.0/21
85.198.104.0/23
89.169.48.0/22
89.207.216.0/21
93.157.244.0/22
95.131.144.0/21
185.43.198.0/23
185.136.76.0/22
185.155.17.0-185.155.19.255
217.150.200.0/23
IPv6:
2a02:5fe0::/29
Signature Algorithm: sha256WithRSAEncryption
82:13:e8:bf:8d:00:65:89:50:e7:e1:16:7b:88:f6:2f:ac:c5:
85:48:4a:a8:1c:ad:22:d7:1c:a3:73:f3:3c:61:ca:87:34:43:
90:75:76:95:4e:38:4b:91:0b:e6:88:ff:bb:99:d9:f9:fa:91:
41:1b:4d:18:44:80:1a:91:7d:76:f0:e4:c8:f9:39:74:fe:f5:
c1:ca:af:16:3e:36:34:26:96:49:42:93:74:e9:bd:41:12:ea:
e3:cb:db:2a:f1:23:6d:45:4b:09:6f:6e:ab:f9:9a:3c:7a:16:
9a:02:a2:9d:a2:b6:3e:34:13:18:aa:c9:4e:1a:1c:db:e8:c5:
1a:12:29:36:b5:17:c3:f6:4c:6c:9e:17:b2:5b:d0:26:42:47:
47:a6:ef:e2:74:09:81:0c:42:e2:33:43:9b:0b:d7:9e:95:16:
58:6a:b6:06:09:25:30:61:ae:30:36:f0:eb:9a:1a:71:e2:26:
d5:01:88:6b:8f:25:71:52:c8:41:34:eb:fe:00:f1:d5:09:bc:
93:5c:75:65:14:42:a7:92:ac:61:fa:e2:bd:d3:0a:e2:02:ff:
a9:1a:24:cb:a3:1d:a0:de:51:47:e9:b4:f3:7e:18:36:32:b5:
08:6b:de:29:60:3f:e9:6b:98:ce:b1:0a:19:cc:95:ee:59:07:
6a:09:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:05:13 2025 by rpki-client