Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Ca0qX6qk_Mn371hk4sJDCRsFCmU.roa
File: Ca0qX6qk_Mn371hk4sJDCRsFCmU.roa (raw, json)
Hash identifier: yMJArKkcIsxZI+BdH+7u1Gl9KGzqAxoslBURhfSUtt8=
Subject key identifier: 09:AD:2A:5F:AA:A4:FC:C9:F7:EF:58:64:E2:C2:43:09:1B:05:0A:65
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0197AB2CB18951A469C25CE4FBDF3EF889D1
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Ca0qX6qk_Mn371hk4sJDCRsFCmU.roa
Signing time: Thu 26 Jun 2025 07:38:42 +0000
ROA not before: Thu 26 Jun 2025 07:38:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
37.123.112.0/24 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 22
46.23.76.0/22 maxlen: 24
77.92.64.0/21 maxlen: 21
77.92.72.0/22 maxlen: 22
77.92.76.0/23 maxlen: 23
77.92.78.0/23 maxlen: 23
77.92.80.0/20 maxlen: 20
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 24
88.202.176.0/23 maxlen: 23
88.202.177.0/24 maxlen: 24
88.202.178.0/24 maxlen: 24
88.202.179.0/24 maxlen: 24
88.202.180.0/22 maxlen: 22
88.202.184.0/24 maxlen: 24
88.202.185.0/24 maxlen: 24
88.202.186.0/23 maxlen: 23
88.202.188.0/22 maxlen: 22
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 21
109.123.64.0/18 maxlen: 24
176.67.160.0/21 maxlen: 21
176.67.169.0/24 maxlen: 24
176.67.171.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
185.7.224.0/22 maxlen: 24
2a02:2498::/47 maxlen: 47
2a02:2498:4::/48 maxlen: 48
2a02:2498:5::/48 maxlen: 48
2a02:2498:16::/48 maxlen: 48
2a02:2498:1000::/36 maxlen: 36
2a02:2498:257b::/48 maxlen: 48
2a02:2498:53aa::/48 maxlen: 48
2a02:2498:6d7b::/48 maxlen: 48
2a02:2498:9000::/36 maxlen: 36
2a02:2498:9001::/48 maxlen: 48
2a02:2498:a000::/36 maxlen: 36
2a02:2498:b000::/36 maxlen: 36
2a02:2498:e000::/36 maxlen: 36
2a02:2498:e004::/48 maxlen: 48
2a02:2498:f000::/48 maxlen: 48
2a02:2498:f001::/48 maxlen: 48
2a02:2498:f002::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Jun 2025 15:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:2c:b1:89:51:a4:69:c2:5c:e4:fb:df:3e:f8:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jun 26 07:38:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ad2a5faaa4fcc9f7ef5864e2c243091b050a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:66:75:fd:be:6c:cb:2e:97:37:e4:69:c9:
17:4a:40:91:97:ff:14:ec:cb:fd:65:43:4b:5b:40:
a0:18:87:04:ba:56:a0:9a:01:82:74:d8:7c:59:63:
e9:95:68:ec:53:0d:1b:2d:52:95:59:51:22:32:df:
b5:12:92:b2:d6:0b:02:7e:c9:d6:61:c7:64:6c:4b:
f8:52:36:96:fd:fe:eb:92:50:88:f2:c1:98:ca:76:
80:a2:d3:6e:fb:18:b1:4e:49:28:b5:8e:75:ef:30:
d3:98:48:dc:4c:21:55:48:ca:ba:89:e7:4b:4d:3b:
8b:36:16:61:23:1b:5c:00:03:b9:30:a3:c6:2f:b0:
20:24:88:e0:bd:6c:23:7b:5c:af:b6:42:77:fc:78:
b9:55:24:be:d7:b2:92:46:0e:db:70:74:f2:fc:7f:
f9:0c:19:f3:00:83:a1:5e:55:81:91:25:0c:1e:a3:
98:56:49:8d:63:98:2b:56:6b:7d:91:0f:d9:9b:8c:
6d:c6:6e:86:a6:ed:f8:d4:6d:54:f8:47:3e:52:2a:
e9:a6:ea:82:55:f6:6f:db:69:cb:42:07:11:bf:85:
84:00:27:87:09:90:75:06:37:04:7f:21:d3:21:a3:
78:b4:d7:c6:37:67:36:46:01:18:4c:a1:d5:fa:c5:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:2A:5F:AA:A4:FC:C9:F7:EF:58:64:E2:C2:43:09:1B:05:0A:65
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Ca0qX6qk_Mn371hk4sJDCRsFCmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/21
176.67.169.0/24
176.67.171.0-176.67.175.255
185.7.224.0/22
IPv6:
2a02:2498::/47
2a02:2498:4::/47
2a02:2498:16::/48
2a02:2498:1000::/36
2a02:2498:257b::/48
2a02:2498:53aa::/48
2a02:2498:6d7b::/48
2a02:2498:9000::-2a02:2498:bfff:ffff:ffff:ffff:ffff:ffff
2a02:2498:e000::-2a02:2498:f002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:21:48:8b:56:0a:2d:4f:cf:67:33:49:05:f6:57:6d:a1:98:
69:4f:b6:3a:d7:fb:d7:14:6f:cf:bd:e1:73:bd:e2:ee:01:d3:
df:4a:87:92:37:db:77:ca:13:c0:1f:da:87:69:4d:99:c3:53:
ab:67:56:c4:0d:5b:74:ba:4c:e8:13:e5:89:97:2a:7e:28:08:
19:06:a2:d9:36:fa:df:26:b7:a9:97:8f:da:c0:81:28:b6:89:
a9:a6:49:90:2a:47:0e:cd:01:d8:d4:d1:05:3a:b6:00:da:60:
16:35:83:ac:bc:d5:d6:9d:aa:92:1c:8f:d5:e3:69:1e:ca:17:
60:8f:bd:42:45:24:1f:62:bd:c3:1c:b6:06:61:d0:8b:2a:81:
2d:f6:4e:f1:a5:40:d1:2d:c2:c4:55:a9:dd:7b:52:b3:d6:62:
c8:1d:bb:4b:7e:34:8a:54:7f:de:39:b4:5a:de:6f:7a:14:1c:
dc:14:e8:b1:bc:5c:b8:7d:92:22:45:32:21:80:30:1d:03:fc:
fb:9e:26:b7:b4:35:67:56:de:49:ef:1a:51:1d:57:4e:ae:7d:
f8:16:df:70:dc:a8:d2:c6:ef:ec:12:97:d6:6a:86:b7:55:2f:
4b:e4:a5:53:aa:55:d7:68:2a:49:42:ec:da:6b:de:14:41:55:
32:14:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:02:14 2025 by rpki-client