Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p2xMLngiG0H3qMFprFeiYzpxsu0.roa
File: p2xMLngiG0H3qMFprFeiYzpxsu0.roa (raw, json)
Hash identifier: 9vM3ud939qtTUi52c5KeEBimaE2p2mTrs6bGm5fxB+Q=
Subject key identifier: A7:6C:4C:2E:78:22:1B:41:F7:A8:C1:69:AC:57:A2:63:3A:71:B2:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019914DF05809634E70798A0EF8A9778FD73
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p2xMLngiG0H3qMFprFeiYzpxsu0.roa
Signing time: Thu 04 Sep 2025 13:16:24 +0000
ROA not before: Thu 04 Sep 2025 13:16:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Sep 2025 11:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:df:05:80:96:34:e7:07:98:a0:ef:8a:97:78:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 4 13:16:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76c4c2e78221b41f7a8c169ac57a2633a71b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:68:6a:02:f8:ca:b5:b8:60:0a:08:a5:63:
e4:e7:11:7e:14:f0:49:57:60:cf:cc:c3:dd:0f:79:
3c:e6:12:f1:88:55:fb:c3:0e:e2:26:64:19:12:1e:
f8:3c:c4:56:95:ef:ba:f7:af:a7:03:e7:6b:6f:cd:
c0:fa:1a:c9:22:28:c6:df:cf:ca:ca:80:f2:44:06:
c1:1d:ad:59:4a:59:41:41:33:76:11:ae:00:09:74:
f2:7b:45:d9:1f:32:8e:ef:81:01:d5:54:99:10:b3:
7d:0e:9a:dc:46:74:50:ab:73:12:ac:9e:c8:23:cd:
50:e0:d7:e6:92:dd:6a:90:a5:87:6b:e2:5f:92:5a:
f4:f5:21:6d:8e:4f:6e:9a:ce:de:e6:0e:36:fd:f6:
65:38:f8:83:aa:1f:fc:71:78:9b:eb:e1:2e:bb:5b:
a9:2c:c4:14:22:30:c8:b3:16:b4:c2:78:ce:0e:ac:
18:6a:7f:99:bd:2c:49:de:59:c1:56:2c:b7:24:bf:
f3:e1:89:97:c4:00:ec:3d:13:05:f2:97:66:0c:31:
46:87:9e:1b:73:09:d5:52:28:16:76:12:c9:28:2b:
73:ac:d2:b8:f5:17:4e:33:f5:93:ab:12:0c:7f:be:
16:4f:10:ae:c3:6d:1c:6b:6c:3f:60:69:c1:30:63:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:4C:2E:78:22:1B:41:F7:A8:C1:69:AC:57:A2:63:3A:71:B2:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/p2xMLngiG0H3qMFprFeiYzpxsu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
103.56.84.0/24
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
21:7e:b9:af:6c:41:ac:55:f8:21:3d:4a:92:9b:73:2a:9d:52:
97:20:15:fc:38:8c:15:6e:f4:78:ef:98:95:22:c4:a7:bb:48:
a8:82:11:c3:14:5b:74:4f:7c:91:3b:ec:6a:86:82:62:07:96:
ad:7e:38:16:e3:5b:a0:60:4d:e0:17:95:83:91:54:56:f5:cb:
22:3b:63:68:b1:84:ff:49:21:63:6f:10:f7:cc:c3:2a:cf:bf:
f3:86:66:bc:74:ab:ea:5e:14:38:95:67:c2:10:36:73:2e:3c:
cd:27:66:66:02:98:be:71:0d:e7:6e:cb:18:a2:9b:03:da:51:
52:db:79:9f:aa:1c:4e:df:db:b3:09:6c:6d:fc:a2:ef:38:4c:
ef:15:35:51:3c:0e:b9:63:75:fc:80:79:aa:15:fd:de:c9:7f:
19:fe:5d:c9:b4:f3:0d:eb:6c:e9:b4:d0:f5:b2:30:93:e0:57:
09:eb:75:25:02:b5:f9:6b:6d:eb:ba:25:e9:34:09:77:81:db:
4c:11:dc:9a:6b:8b:ba:a8:1a:e0:8b:9d:75:c3:81:36:36:6d:
30:77:f1:00:e3:ab:2b:b9:88:03:af:b7:01:70:c0:ff:c4:f5:
04:5c:0b:27:64:c2:5f:b0:21:a3:2d:d2:32:e7:2e:9b:50:f0:
e2:56:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:43:42 2025 by rpki-client