Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7xTnEWw5gK2kvwdTPLSWK6JySyk.roa
File: 7xTnEWw5gK2kvwdTPLSWK6JySyk.roa (raw, json)
Hash identifier: 8CH1p1ReB1mGVFzcVAVkak7c5UvigCT7D+s9zVRRNPc=
Subject key identifier: EF:14:E7:11:6C:39:80:AD:A4:BF:07:53:3C:B4:96:2B:A2:72:4B:29
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01977C77889D42D1142187F6DC874B38E507
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7xTnEWw5gK2kvwdTPLSWK6JySyk.roa
Signing time: Tue 17 Jun 2025 05:58:17 +0000
ROA not before: Tue 17 Jun 2025 05:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.130.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 05:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:77:88:9d:42:d1:14:21:87:f6:dc:87:4b:38:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 17 05:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef14e7116c3980ada4bf07533cb4962ba2724b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:f6:03:a0:bf:8f:1b:91:65:f6:c4:a0:c1:
d1:37:44:f2:b7:d6:d6:c7:07:fa:7b:b8:00:23:2e:
62:87:33:7d:43:04:90:38:36:62:ae:9a:8e:f3:ee:
30:33:74:9e:dc:c1:4e:4e:88:43:ff:1d:95:c0:ec:
ac:81:99:f1:b6:81:59:9a:6b:43:10:b7:cf:5d:c4:
75:f3:42:a3:4d:6a:86:1c:03:1d:e9:f7:ff:a3:e1:
ba:34:47:74:d3:77:b8:d6:c0:05:42:4a:dd:72:74:
0c:c3:3c:55:bf:a5:b8:76:e1:eb:1d:60:17:b5:53:
23:ec:9a:4d:bd:5b:85:88:fb:cc:61:cb:12:6f:f1:
60:6e:15:f9:18:f8:63:7b:5a:a7:6a:80:0d:05:d3:
12:51:92:0c:43:6a:51:7e:df:c1:57:79:8d:9a:7c:
0c:2e:d5:94:38:d7:a1:f0:ff:80:b5:82:ce:69:6f:
60:ec:02:7d:54:36:d0:b1:55:84:f4:77:d1:20:82:
50:72:ef:40:91:73:f7:bc:4e:00:de:a7:c5:74:8f:
1f:da:b7:5e:3c:eb:18:48:00:a1:76:45:5e:f9:89:
f4:46:07:95:3a:1a:ac:40:7f:33:14:c7:fa:48:63:
51:97:81:9c:54:b1:eb:87:36:e7:bf:2b:76:fb:fd:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:E7:11:6C:39:80:AD:A4:BF:07:53:3C:B4:96:2B:A2:72:4B:29
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7xTnEWw5gK2kvwdTPLSWK6JySyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/22
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.216.255
93.152.218.0/24
93.152.220.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
93.152.233.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f7:55:b3:29:a0:e5:e3:a8:37:2d:a7:54:e8:15:73:ab:09:
a0:be:81:7d:f9:aa:09:3d:bc:f9:a1:32:d2:d6:77:09:b8:4f:
28:5a:ba:92:2a:84:bd:dd:c6:95:76:37:25:b6:8e:37:65:6f:
ca:32:e8:d8:bf:32:ff:19:6d:e9:25:db:21:3d:63:52:83:1d:
1a:72:1d:af:3b:a7:63:fb:18:73:d8:cd:0f:c2:1b:1e:0b:7a:
cf:27:1a:d1:f6:56:02:bd:e2:5b:d0:63:42:98:f9:0c:9a:e8:
52:b1:27:12:44:ee:a9:ba:ca:ec:0e:8c:b8:36:f4:17:94:74:
c7:b9:e1:7a:dd:0a:e5:7b:ab:de:1e:b2:36:4d:b1:36:bf:86:
13:0f:48:4d:b6:58:23:7a:8b:11:4d:4d:2f:df:30:56:a0:e0:
d6:9b:68:19:fe:18:47:e1:26:fb:d2:80:aa:6e:1b:3c:37:be:
6d:ea:47:53:41:19:2a:80:c9:be:f2:d2:f8:3f:8b:90:1d:fc:
92:5d:c6:e1:d6:4f:ed:32:dc:8f:80:71:d5:4f:65:28:c5:90:
56:3f:36:50:99:08:d4:05:c1:1f:c3:f0:75:05:c7:30:b7:29:
e6:8b:06:4c:2b:31:c0:1e:d6:3b:71:55:ba:65:76:be:96:fb:
61:3a:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:31 2025 by rpki-client