Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/B_2QiuMq-Soqs_PZrblx8ZP5lAs.roa
File: B_2QiuMq-Soqs_PZrblx8ZP5lAs.roa (raw, json)
Hash identifier: ufhjrLaBXTACiJPzmRX55ASP7ZEZEZVf2ma+5jy2bMM=
Subject key identifier: 07:FD:90:8A:E3:2A:F9:2A:2A:B3:F3:D9:AD:B9:71:F1:93:F9:94:0B
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019837B7B630AAF92051B4665473BD55C0E1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/B_2QiuMq-Soqs_PZrblx8ZP5lAs.roa
Signing time: Wed 23 Jul 2025 14:37:23 +0000
ROA not before: Wed 23 Jul 2025 14:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Jul 2025 17:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:b7:b6:30:aa:f9:20:51:b4:66:54:73:bd:55:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jul 23 14:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fd908ae32af92a2ab3f3d9adb971f193f9940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:5d:3a:15:e4:86:ae:a6:20:ac:12:02:a2:
50:22:88:67:60:54:a1:ee:8d:95:d0:a6:a5:74:03:
6a:2b:e7:06:29:00:b9:0a:7f:bf:55:bf:2b:5e:91:
6f:07:9e:6a:0a:dd:ca:18:8f:28:84:3b:52:7c:36:
f2:27:ce:d6:f2:80:b4:57:21:52:7d:78:4a:4f:33:
0d:cb:d9:8b:6b:94:8a:9c:d5:b5:fc:1b:b2:ea:d8:
ce:df:4f:38:33:39:24:7f:d6:58:19:1f:09:20:38:
f7:dd:b5:de:09:8c:9c:81:8e:8d:a7:67:92:a1:15:
3f:12:f8:3f:3a:02:7e:e4:e5:83:aa:d2:74:bb:f1:
46:04:62:52:8a:7e:20:ba:43:82:63:bf:56:1a:b6:
63:45:3f:97:d6:46:d4:b6:01:81:07:06:37:7b:e9:
99:95:61:05:30:3f:87:71:9d:28:b5:3c:69:83:e1:
18:df:20:21:09:b5:7f:dd:c9:1e:6d:79:48:b8:13:
94:ef:ed:21:89:69:63:54:42:69:88:77:e8:c6:f2:
d7:87:d6:d5:14:4f:a6:0c:1a:33:54:27:89:87:5e:
68:ef:63:4d:90:9b:51:e6:b2:a4:6c:7e:2b:71:1f:
87:6f:29:ac:d2:8c:e0:50:fb:0d:26:d4:1f:72:ec:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:90:8A:E3:2A:F9:2A:2A:B3:F3:D9:AD:B9:71:F1:93:F9:94:0B
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/B_2QiuMq-Soqs_PZrblx8ZP5lAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:8d:b4:5c:0d:27:2e:b4:8a:5d:31:56:30:f8:e1:5e:2c:cb:
bd:24:49:89:6f:d4:c1:29:e7:09:ea:6b:ab:6f:ec:a1:ba:12:
6e:36:d7:c6:82:f5:13:7a:46:8e:c0:79:27:53:c2:bc:cc:4a:
11:fd:f4:cd:69:03:9a:9a:ef:74:b3:d4:bc:60:c9:d0:12:18:
33:5a:29:ca:c9:92:eb:c0:56:b1:d4:db:95:4a:dc:ac:d0:e5:
85:15:4a:0c:ae:a4:f0:19:4c:64:40:9d:81:fd:e0:ea:fb:a5:
90:6d:50:52:8e:ca:53:2e:5a:2d:eb:37:9e:05:79:6d:83:97:
2b:d1:6d:94:d2:ca:99:7a:b2:f9:b8:0d:ca:4e:20:ed:13:5e:
c8:15:18:31:8a:80:2e:dc:f2:58:c6:77:b8:32:04:e2:fd:c8:
4b:f8:0c:8f:7d:7a:c0:c4:75:c3:a0:0a:1a:a4:6e:dc:4e:43:
e5:08:9e:7b:12:0d:0b:b0:2e:01:fa:45:7b:b0:fd:9d:32:1a:
d5:cb:e9:0f:a1:6c:03:98:78:92:c8:4c:76:2b:df:e0:e4:30:
dc:0c:37:e9:49:63:5a:58:df:b6:16:a9:ca:2f:d0:d2:63:62:
d0:d5:03:8b:0c:44:a3:6b:82:c4:3e:27:5c:6f:da:7a:74:33:
a1:27:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:03:19 2025 by rpki-client