Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/E1aX5DVtbcbWCavzsXRfFSw355M.roa
File: E1aX5DVtbcbWCavzsXRfFSw355M.roa (raw, json)
Hash identifier: tQT/UJWKDEA+TEL613B96CM/ye7bHeeEBqdnlvosefw=
Subject key identifier: 13:56:97:E4:35:6D:6D:C6:D6:09:AB:F3:B1:74:5F:15:2C:37:E7:93
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01981CC541477529F52FE8BC6E1D5DF222D4
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/E1aX5DVtbcbWCavzsXRfFSw355M.roa
Signing time: Fri 18 Jul 2025 09:02:25 +0000
ROA not before: Fri 18 Jul 2025 09:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.64.0/24 maxlen: 24
84.22.65.0/24 maxlen: 24
84.22.66.0/24 maxlen: 24
84.22.67.0/24 maxlen: 24
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.70.0/24 maxlen: 24
84.22.71.0/24 maxlen: 24
84.22.72.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.74.0/24 maxlen: 24
84.22.75.0/24 maxlen: 24
84.22.76.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.79.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.81.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
213.180.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 09:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:c5:41:47:75:29:f5:2f:e8:bc:6e:1d:5d:f2:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jul 18 09:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135697e4356d6dc6d609abf3b1745f152c37e793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:fe:24:5f:0c:fb:a2:c2:64:53:09:33:03:
d6:2c:49:dc:4c:3f:06:52:cd:51:98:bf:93:a7:e2:
f2:32:52:ea:69:15:68:40:9f:be:5c:54:7c:78:d8:
bf:77:e3:80:2f:8f:10:da:54:f2:ec:c0:53:54:61:
e3:3f:40:0c:82:1a:65:b6:b4:ef:9d:41:2a:12:8d:
74:b8:7c:b2:9c:64:5d:ff:8c:89:54:bf:62:ab:e2:
3b:03:cd:c5:d0:45:5f:26:ee:77:33:39:3a:c1:81:
b6:8c:ae:fa:74:d6:95:54:57:09:f6:a5:ba:92:47:
ae:6e:6c:4b:b7:bd:74:98:ce:2f:e3:a8:c3:82:f7:
93:ba:40:14:60:99:f2:89:96:25:1d:d1:fe:fa:55:
30:ee:07:85:f1:3a:27:ac:d2:3a:18:09:92:16:16:
b7:95:bf:70:8f:90:fa:7b:8d:e8:bf:9f:7c:7b:bf:
e3:d8:bb:c3:ff:d4:e9:ce:db:56:91:c8:02:f2:ab:
7c:19:ab:91:da:a3:09:bd:58:7e:16:71:bf:19:6f:
2d:d8:24:db:23:f0:e7:d1:a9:30:8d:ae:1f:57:40:
3d:d7:35:50:db:e5:94:b9:de:7d:d1:16:da:00:65:
0f:9e:e6:63:ac:51:01:0d:81:33:6e:2b:f6:2f:a9:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:97:E4:35:6D:6D:C6:D6:09:AB:F3:B1:74:5F:15:2C:37:E7:93
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/E1aX5DVtbcbWCavzsXRfFSw355M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:5a:b4:8f:28:d3:59:59:fa:1a:16:9b:06:1b:11:f8:74:e1:
63:9c:f8:76:f3:a4:32:8f:77:e9:25:23:57:65:a3:8a:73:c2:
57:a1:10:f2:e2:33:62:0c:be:15:ef:1a:cb:02:89:c6:83:65:
51:da:d0:53:af:ad:71:42:3a:30:36:00:12:b6:e5:5e:80:32:
51:0b:0f:e7:27:58:70:4f:66:8d:c6:d4:6c:0e:aa:f7:e9:53:
9f:9d:ec:ed:52:c7:80:54:f9:fa:16:75:11:29:4f:10:ce:ce:
1a:14:2c:e6:d2:c4:8a:72:59:64:41:11:cd:6a:0c:3e:14:0f:
95:45:d1:36:1f:a3:c6:e3:1a:7e:90:63:a6:cd:87:3f:cc:f2:
91:35:01:62:9e:24:9b:d3:a7:f8:4d:12:6b:7c:10:68:1c:09:
a2:2a:fa:ae:78:2f:93:76:04:8e:26:04:70:76:44:16:48:25:
ec:9c:61:5b:16:8b:e0:2a:f3:01:ab:b9:cb:23:36:d1:b8:dd:
96:00:fa:10:70:d9:0d:94:1b:20:c2:a5:41:7c:b4:bc:bd:af:
25:bd:5a:e2:08:c3:74:a0:7b:e0:04:84:f0:2c:c9:90:96:2e:
87:f9:f0:20:82:56:d8:df:dd:99:4d:fa:05:fb:41:05:a6:f7:
34:8d:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:36 2025 by rpki-client