Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/tjxGZjSRRNJCy7d1buuePIm2ZFU.roa
File: tjxGZjSRRNJCy7d1buuePIm2ZFU.roa (raw, json)
Hash identifier: La4uHnRnKP6uH7ccHknYSIMOc5nwhMdyV1B1e3AA8b0=
Subject key identifier: B6:3C:46:66:34:91:44:D2:42:CB:B7:75:6E:EB:9E:3C:89:B6:64:55
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0195CD63452F9F99C9C70B5992AA86D6DAFD
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/tjxGZjSRRNJCy7d1buuePIm2ZFU.roa
Signing time: Tue 25 Mar 2025 12:59:49 +0000
ROA not before: Tue 25 Mar 2025 12:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1547
IP address blocks: 31.31.0.0/19 maxlen: 19
31.31.0.0/20 maxlen: 20
31.31.16.0/20 maxlen: 20
37.26.128.0/20 maxlen: 20
62.221.64.0/18 maxlen: 18
62.221.64.0/19 maxlen: 19
62.221.96.0/19 maxlen: 19
77.235.96.0/19 maxlen: 19
77.235.96.0/20 maxlen: 20
77.235.112.0/20 maxlen: 20
80.94.240.0/20 maxlen: 20
80.94.240.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.243.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.246.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.254.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
95.153.64.0/18 maxlen: 18
95.153.64.0/19 maxlen: 19
95.153.96.0/19 maxlen: 19
185.10.20.0/22 maxlen: 32
217.19.208.0/20 maxlen: 20
217.19.208.0/24 maxlen: 32
217.19.209.0/24 maxlen: 32
217.19.210.0/24 maxlen: 32
217.19.211.0/24 maxlen: 32
217.19.212.0/24 maxlen: 32
217.19.213.0/24 maxlen: 32
217.19.214.0/24 maxlen: 32
217.19.215.0/24 maxlen: 32
217.19.216.0/24 maxlen: 32
217.19.217.0/24 maxlen: 32
217.19.218.0/24 maxlen: 32
217.19.219.0/24 maxlen: 32
217.19.220.0/24 maxlen: 32
217.19.221.0/24 maxlen: 32
217.19.222.0/24 maxlen: 32
217.19.223.0/24 maxlen: 32
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Mar 2025 08:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:63:45:2f:9f:99:c9:c7:0b:59:92:aa:86:d6:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Mar 25 12:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b63c4666349144d242cbb7756eeb9e3c89b66455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:1a:3c:9c:48:16:e8:34:60:44:d4:3c:45:
53:7f:86:4a:4d:e8:76:3a:fa:34:7d:b8:95:94:ef:
6e:f1:f4:9a:e5:26:ae:5f:14:6f:68:07:8f:75:fa:
25:cb:4a:c8:f2:d3:85:3c:61:f2:46:63:87:8e:7c:
4a:b9:3b:bd:ea:a6:3b:14:e9:88:9e:3a:4e:ab:50:
d4:c8:67:aa:86:8e:df:22:87:61:c0:e2:36:a3:af:
4b:a1:17:e9:b8:9e:d6:b5:74:1f:09:88:fa:fe:76:
18:9c:1a:06:23:9d:4a:e6:2c:73:39:05:f5:98:c6:
ed:64:70:d6:76:14:84:9d:dc:0c:d6:c0:ca:12:cc:
5a:a1:2c:46:6f:3c:06:2e:61:01:7a:3f:8e:98:01:
81:ea:60:2f:f0:ff:11:78:d1:13:43:46:74:1c:26:
f2:28:17:75:14:38:b9:49:0d:84:d1:7e:4a:24:20:
a9:04:a8:20:30:d1:2b:8a:50:bf:2b:d5:ff:cc:52:
d7:88:bd:b8:d7:f3:08:cf:68:b8:68:05:1c:47:d8:
dc:ca:26:3f:67:2c:6b:fa:20:e4:21:1d:b2:1e:2d:
82:b4:53:30:db:2d:f8:b2:9a:9d:ba:09:db:bf:c1:
14:57:80:05:aa:2f:32:90:96:0b:72:68:a4:c4:13:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:46:66:34:91:44:D2:42:CB:B7:75:6E:EB:9E:3C:89:B6:64:55
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/tjxGZjSRRNJCy7d1buuePIm2ZFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
84:97:12:4f:31:ce:58:87:f1:aa:42:4b:22:5e:02:b6:f7:42:
3a:dd:00:1b:85:d1:c4:36:c8:0c:9b:30:da:fb:4e:7b:33:58:
5d:e1:2d:35:a2:eb:48:67:f4:5f:be:e2:f2:f1:97:e1:a3:a8:
08:39:91:b6:d9:95:f4:ba:03:00:fa:b4:24:03:89:f4:72:31:
32:23:50:15:0f:30:cd:2c:67:5d:c0:cb:ae:65:71:46:dd:5f:
6d:a4:2e:6e:6d:26:72:41:f2:8e:3b:71:55:49:69:02:5e:dd:
a1:47:27:46:e1:bc:89:f5:84:9c:fb:f8:f7:8f:8b:f1:64:85:
21:e9:6f:77:ae:a8:55:36:8c:77:1c:a6:cf:71:61:af:c7:e9:
33:39:b5:db:44:f3:9d:1a:17:b9:95:f5:54:12:69:b6:e4:c7:
3b:e4:48:1c:9a:5c:23:41:d7:92:8f:31:98:71:9f:bf:f9:8e:
2e:5c:67:e9:a6:c4:98:94:30:4e:4d:ba:0a:77:1b:1c:60:0d:
d6:10:6f:4a:be:c3:74:fa:88:bd:26:90:9d:0d:df:82:b5:ce:
52:f2:86:52:44:4b:9a:60:c5:0c:32:53:4d:00:89:39:48:8f:
68:55:29:02:e1:3d:42:59:d6:5a:7e:bd:12:6b:ee:9f:d5:71:
cf:4c:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:18 2025 by rpki-client