Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/iIt87fcGUBjCPAhB-RBIkiPz7EM.roa
File: iIt87fcGUBjCPAhB-RBIkiPz7EM.roa (raw, json)
Hash identifier: YPnMuwCxYK2kIOeBj2+lJ+uM0AxwCjeQsFIxwDlYt2M=
Subject key identifier: 88:8B:7C:ED:F7:06:50:18:C2:3C:08:41:F9:10:48:92:23:F3:EC:43
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019837B7B7BBBA5D2C339086BB77F1264E94
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/iIt87fcGUBjCPAhB-RBIkiPz7EM.roa
Signing time: Wed 23 Jul 2025 14:37:23 +0000
ROA not before: Wed 23 Jul 2025 14:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Jul 2025 17:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:b7:b7:bb:ba:5d:2c:33:90:86:bb:77:f1:26:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jul 23 14:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888b7cedf7065018c23c0841f910489223f3ec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:5a:c1:13:aa:61:17:d8:9b:20:8a:bf:c5:
35:e8:fd:ea:fe:1e:92:ea:9c:32:7d:cf:c7:ad:b3:
d8:f7:97:d9:22:e3:56:2d:8d:82:bd:94:f1:83:26:
5d:6d:e2:71:21:24:2f:ba:15:e1:ee:c6:a9:24:e9:
1c:03:c6:f5:0e:9d:b4:bd:d3:4e:76:a4:4b:b2:d6:
0e:01:c3:28:ab:e4:8f:42:db:a7:ac:e3:65:77:84:
c6:41:a9:88:5d:74:ee:e0:0c:0d:f6:8f:da:8b:a0:
bf:10:5c:80:ba:7b:0d:a1:fc:ec:e5:06:90:96:b7:
94:63:12:38:95:72:06:90:b8:85:56:cd:bb:3e:b5:
f8:f0:7c:97:65:cc:f8:04:fb:2f:f8:41:9e:da:2f:
38:f3:19:b6:a6:8d:22:ea:b4:9b:a4:67:4d:65:73:
98:bf:e8:e8:42:b0:59:a2:c4:3e:51:af:8e:b3:ed:
f3:c6:93:98:16:18:08:d2:ba:d1:d2:f5:55:ad:9e:
e9:11:10:d2:e0:db:b4:c3:11:f9:dd:ad:af:79:ed:
1b:1a:1a:72:f9:c1:02:22:4a:1b:39:a7:fa:ce:9f:
e6:a5:15:f3:fa:36:d2:c3:9a:9d:ac:9b:71:af:16:
6c:b2:38:ee:36:82:d4:de:2a:8c:2d:a1:dc:b9:81:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:7C:ED:F7:06:50:18:C2:3C:08:41:F9:10:48:92:23:F3:EC:43
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/iIt87fcGUBjCPAhB-RBIkiPz7EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:6f:c0:59:fd:b7:53:84:ea:dc:d2:2f:50:8d:d8:26:8e:62:
f0:47:57:07:79:a8:8b:7c:92:1e:87:08:3a:f3:a1:a4:47:1c:
2f:15:b6:50:b6:90:c7:f2:ca:cb:ad:89:13:ee:7a:d6:e3:62:
77:65:d2:5a:53:b1:19:0d:9a:c6:ff:a4:db:5f:91:bc:c9:2a:
df:a9:ea:f3:36:eb:4a:0a:61:aa:f7:11:77:2d:6b:ef:28:61:
d7:df:f3:52:83:ed:b6:a4:7d:31:79:3a:4f:e1:29:0d:f6:87:
20:e0:ca:61:c4:8d:c7:c0:a2:5e:18:5b:96:60:98:fd:6f:a7:
aa:98:e6:fe:06:95:9f:ca:65:cd:77:ea:50:32:32:e0:de:5a:
f1:6e:05:52:15:66:37:86:5b:8a:c7:3f:06:fd:50:c5:02:82:
fa:84:04:4d:21:dc:85:24:37:c0:07:91:52:f7:ac:e3:f0:6e:
c5:df:61:a1:78:51:d3:97:0f:b6:fe:21:db:c9:17:2b:29:5c:
36:73:1e:d0:d8:41:70:a4:00:47:a8:6d:1a:8a:b1:d8:cd:2f:
8f:e0:99:d4:31:a2:b3:56:1c:86:e6:5f:b0:15:dd:37:1a:75:
7b:cd:dc:d7:a6:12:a6:89:af:fc:3d:d5:0a:75:9e:20:05:ef:
29:c4:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:51:53 2025 by rpki-client