Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/xksI3hwVu3JTOWQga9z4zwcLg6k.roa
File: xksI3hwVu3JTOWQga9z4zwcLg6k.roa (raw, json)
Hash identifier: 9P76MB9A93dnKMoql0tSQGr7uS42GEbrfb5NjYKJZEU=
Subject key identifier: C6:4B:08:DE:1C:15:BB:72:53:39:64:20:6B:DC:F8:CF:07:0B:83:A9
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0197C0473A9FA58E579C1DF6FE41D34188AA
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/xksI3hwVu3JTOWQga9z4zwcLg6k.roa
Signing time: Mon 30 Jun 2025 09:59:42 +0000
ROA not before: Mon 30 Jun 2025 09:59:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.64.0/24 maxlen: 24
84.22.65.0/24 maxlen: 24
84.22.66.0/24 maxlen: 24
84.22.67.0/24 maxlen: 24
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.70.0/24 maxlen: 24
84.22.71.0/24 maxlen: 24
84.22.72.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.74.0/24 maxlen: 24
84.22.75.0/24 maxlen: 24
84.22.76.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.79.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.81.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
213.180.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Jul 2025 09:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:47:3a:9f:a5:8e:57:9c:1d:f6:fe:41:d3:41:88:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jun 30 09:59:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c64b08de1c15bb72533964206bdcf8cf070b83a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:6b:68:5a:39:e7:70:53:74:0c:9f:0d:95:
3f:d4:16:f8:61:64:f2:6c:73:e0:d2:6d:95:de:87:
7e:30:4f:4b:25:f6:cb:63:34:e8:d4:90:d7:fc:8b:
62:8b:c4:73:ee:df:00:b9:47:02:8e:dd:b2:a5:fe:
08:d3:90:c9:db:4b:9f:6d:6a:f0:d5:19:58:38:be:
79:20:7f:99:b0:c6:4b:bd:36:a0:d3:0a:90:12:1d:
a7:3b:b1:80:3b:c4:ed:d4:20:ef:48:6c:6a:0f:21:
fd:53:70:e1:01:b9:d9:53:33:c0:af:2a:d0:e4:69:
c0:ec:3d:51:14:5b:04:3c:f6:a7:72:eb:72:2d:a3:
0f:f8:c0:72:a2:55:f7:b6:15:98:12:35:d9:5b:e5:
f5:2b:72:b2:b9:14:de:b6:7d:57:a0:ad:8b:c0:a0:
3a:62:49:8c:cc:87:2f:39:67:32:4a:1d:d9:ae:06:
9a:a1:92:c0:59:4a:de:2a:a9:c0:e3:a4:86:e3:77:
ed:8c:27:1b:29:50:55:f4:aa:30:77:10:36:51:d8:
a6:3f:b5:9d:78:28:85:08:66:d5:d3:81:14:53:23:
5a:a1:71:40:c4:74:83:c4:49:15:d6:b1:6d:26:a0:
70:e1:76:ab:e1:6c:e7:ab:0b:7b:e5:fa:9e:f6:4c:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:08:DE:1C:15:BB:72:53:39:64:20:6B:DC:F8:CF:07:0B:83:A9
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/xksI3hwVu3JTOWQga9z4zwcLg6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
78:47:14:cb:2b:a4:cf:20:fc:fc:30:6e:52:96:2b:f3:65:52:
55:19:4a:77:61:6f:ff:30:32:6a:eb:00:4c:bc:35:e3:38:54:
d1:21:aa:8e:f6:e6:39:b9:e6:3a:46:3c:1a:2f:70:27:76:3a:
05:96:d2:a5:cd:1f:d8:2c:b2:b4:30:fb:1d:57:68:7c:39:77:
29:ef:e8:a6:c7:86:90:64:db:56:87:9f:a2:bb:2b:ef:da:ab:
31:b0:d9:13:39:57:84:ef:60:8f:00:03:4d:d3:d3:5f:9d:0f:
14:97:af:a0:74:c2:f8:7a:69:4f:2d:5a:f9:50:52:db:86:00:
42:ff:0c:4a:af:d8:d5:90:a5:6a:3d:56:cb:71:d9:43:c3:3b:
69:df:71:1e:b8:79:9d:9a:ad:0b:b9:01:a5:6c:dc:b2:cd:94:
cf:7e:17:75:67:cf:44:31:48:f0:bf:05:7c:d3:16:a1:d2:56:
14:3f:84:54:32:88:2e:71:c9:73:39:99:ef:5e:cb:8a:5a:39:
f3:08:69:d6:5e:b6:ba:88:86:aa:bb:46:6a:a5:5c:ce:db:8f:
93:f7:a4:ec:a8:8c:3d:af:bd:57:02:de:13:1b:d2:db:1e:57:
14:51:00:64:b7:8f:45:38:6a:18:9d:05:20:5c:f6:44:41:23:
4e:2f:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:07 2025 by rpki-client