Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/fYXYVIM-_r6V6xCpF8o58aeO4D8.roa
File: fYXYVIM-_r6V6xCpF8o58aeO4D8.roa (raw, json)
Hash identifier: RcOKE0FQAYRuevMwEDSL+XDJ8d7uMfeV3Bizp5WK4LI=
Subject key identifier: 7D:85:D8:54:83:3E:FE:BE:95:EB:10:A9:17:CA:39:F1:A7:8E:E0:3F
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0197351BC62C96A752A01E41CC3D42BCC59C
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/fYXYVIM-_r6V6xCpF8o58aeO4D8.roa
Signing time: Tue 03 Jun 2025 09:25:02 +0000
ROA not before: Tue 03 Jun 2025 09:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 31.7.16.0/20 maxlen: 20
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
62.148.192.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
77.109.192.0/18 maxlen: 18
80.81.160.0/19 maxlen: 19
80.88.176.0/20 maxlen: 20
80.186.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
81.197.0.0/16 maxlen: 16
81.209.0.0/17 maxlen: 17
82.103.192.0/18 maxlen: 18
82.118.192.0/19 maxlen: 19
82.141.64.0/18 maxlen: 18
82.215.192.0/18 maxlen: 18
83.245.128.0/17 maxlen: 17
84.230.0.0/15 maxlen: 15
85.76.0.0/14 maxlen: 14
85.156.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
88.112.0.0/14 maxlen: 14
91.152.0.0/13 maxlen: 13
94.22.0.0/16 maxlen: 16
109.163.248.0/21 maxlen: 21
109.232.80.0/21 maxlen: 21
139.97.0.0/16 maxlen: 16
178.251.56.0/21 maxlen: 21
192.77.120.0/22 maxlen: 22
192.102.36.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.42.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.35.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.163.32.0/19 maxlen: 19
192.163.64.0/18 maxlen: 18
192.163.128.0/19 maxlen: 19
192.175.45.0/24 maxlen: 24
193.64.0.0/15 maxlen: 15
193.65.129.0/24 maxlen: 24
193.66.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
193.184.0.0/15 maxlen: 15
193.199.0.0/16 maxlen: 16
193.229.0.0/16 maxlen: 16
194.86.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
194.136.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
194.188.0.0/16 maxlen: 16
194.211.0.0/16 maxlen: 16
194.240.0.0/15 maxlen: 15
195.16.192.0/19 maxlen: 19
195.74.0.0/19 maxlen: 19
195.170.128.0/19 maxlen: 19
195.197.0.0/16 maxlen: 16
195.218.64.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
195.238.192.0/19 maxlen: 19
195.255.0.0/16 maxlen: 16
212.38.224.0/19 maxlen: 19
212.50.192.0/19 maxlen: 19
212.54.0.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
212.226.0.0/16 maxlen: 16
212.246.0.0/16 maxlen: 16
213.130.224.0/19 maxlen: 19
213.161.32.0/19 maxlen: 19
213.169.0.0/19 maxlen: 19
213.192.128.0/18 maxlen: 18
213.250.64.0/18 maxlen: 18
217.24.96.0/20 maxlen: 20
217.25.96.0/20 maxlen: 20
217.77.192.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
2001:670::/29 maxlen: 32
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 32
2001:1658::/29 maxlen: 32
2a00:1dd0::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Jun 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:1b:c6:2c:96:a7:52:a0:1e:41:cc:3d:42:bc:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jun 3 09:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d85d854833efebe95eb10a917ca39f1a78ee03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:0c:0e:dc:45:2c:57:13:80:9a:85:75:56:
f6:24:77:1e:54:08:58:91:a7:da:b8:ef:7d:28:e2:
2c:d5:3d:90:d5:83:41:8f:27:01:cc:e3:81:f6:a0:
ca:ba:d1:96:06:6e:57:c3:4e:d8:44:86:25:40:6e:
86:f5:33:e6:36:87:4c:11:30:36:54:23:2a:4f:10:
5b:04:91:61:53:30:75:4a:f3:38:4e:e4:27:af:fb:
48:0e:f9:ae:29:4e:05:0d:5a:27:f0:fa:72:9d:79:
76:71:ee:02:72:35:08:7e:8f:88:99:62:ea:e4:7f:
6a:aa:18:73:40:80:a0:06:46:ad:15:45:f8:b8:e6:
2b:2d:3b:7c:65:0a:ec:74:c1:99:1d:9e:30:21:83:
09:8f:db:b7:a7:df:0f:6f:78:47:af:f9:23:74:8f:
10:c3:a5:40:4b:3f:18:b6:d3:fb:bc:3a:67:ef:a5:
cd:50:13:d7:75:3b:1f:a0:a0:14:d7:c3:ab:6a:5a:
8b:28:f2:0f:ef:33:c2:a0:44:b2:da:79:07:74:f6:
0b:f7:f0:e1:70:ef:2d:d2:70:6f:db:83:1e:e6:25:
5b:65:8b:49:be:9e:93:28:9d:26:ac:61:e6:05:a9:
b1:6f:68:da:3f:e0:8a:d5:c2:ec:e3:ff:be:ad:a3:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:D8:54:83:3E:FE:BE:95:EB:10:A9:17:CA:39:F1:A7:8E:E0:3F
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/fYXYVIM-_r6V6xCpF8o58aeO4D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.163.248.0/21
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
192.175.45.0/24
193.64.0.0-193.66.255.255
193.94.0.0/16
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:670::/29
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:51:80:db:9a:8c:d7:a2:fd:eb:ce:45:8e:a1:44:98:8a:14:
97:76:4f:6e:2a:7d:26:62:a8:e7:09:99:ff:49:8d:8c:9b:73:
c5:2a:fd:2b:0a:3a:bc:05:11:c1:08:0e:27:4f:ef:de:4a:26:
e0:66:a7:93:d6:12:19:42:06:a6:fa:5b:c6:74:61:60:28:4e:
57:d6:3b:28:a6:2f:4e:c7:79:44:8c:04:f3:5a:81:37:eb:0d:
ed:7c:bd:f9:ec:d0:b8:c8:40:85:4e:f8:85:db:91:0c:5a:5a:
1b:0f:33:89:be:18:a1:b7:2f:1f:66:a5:cc:ef:67:7e:cb:9c:
5d:43:f0:3b:1f:44:4c:7a:6e:1e:4c:6b:8b:33:04:9e:10:9b:
ab:09:70:c5:cd:24:5b:f2:c2:30:72:c1:39:ab:70:f1:10:05:
d4:c6:51:4c:c1:61:02:21:34:39:d3:1d:cd:1b:22:9f:18:8d:
17:0d:5c:d4:9d:46:fa:a0:c0:95:bf:c9:74:aa:4f:60:80:da:
0f:b5:24:22:a2:e0:1c:d4:24:72:f1:5e:ea:46:59:95:0f:4c:
27:57:bf:7b:73:3c:ff:95:b9:e8:c7:98:d1:b0:03:ba:be:f3:
37:11:82:a4:20:ce:0a:9e:ac:76:19:49:b7:75:77:31:b7:d2:
68:7c:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:02 2025 by rpki-client