Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/8WGRZkNEYFMu-kcidCtbE6vw1Zk.roa
File: 8WGRZkNEYFMu-kcidCtbE6vw1Zk.roa (raw, json)
Hash identifier: n1Lhy9XEPKEe+j669dQmLRH6LE6uXI6LSgOV96sUj88=
Subject key identifier: F1:61:91:66:43:44:60:53:2E:FA:47:22:74:2B:5B:13:AB:F0:D5:99
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019685B6C70BCD61E791A6AA940712CFE9DE
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/8WGRZkNEYFMu-kcidCtbE6vw1Zk.roa
Signing time: Wed 30 Apr 2025 08:01:10 +0000
ROA not before: Wed 30 Apr 2025 08:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204666
IP address blocks: 37.221.240.0/20 maxlen: 24
45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
45.153.195.0/24 maxlen: 24
85.255.88.0/22 maxlen: 24
185.19.0.0/22 maxlen: 24
185.52.172.0/23 maxlen: 24
185.64.220.0/22 maxlen: 24
185.74.60.0/23 maxlen: 24
185.97.24.0/22 maxlen: 24
185.97.24.0/24 maxlen: 24
185.97.25.0/24 maxlen: 24
185.97.26.0/24 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.101.0/24 maxlen: 24
185.188.103.0/24 maxlen: 24
195.12.39.0/24 maxlen: 24
213.108.162.0/23 maxlen: 24
213.108.162.0/24 maxlen: 24
2a03:d840::/32 maxlen: 32
2a04:c740::/29 maxlen: 29
2a04:f940::/29 maxlen: 29
2a0a:10c0::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 02 Jun 2025 12:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:c7:0b:cd:61:e7:91:a6:aa:94:07:12:cf:e9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Apr 30 08:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1619166434460532efa4722742b5b13abf0d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:4b:56:ac:f9:79:56:95:35:9f:96:cc:b9:
49:72:f5:8f:50:2e:88:aa:00:44:72:8f:9c:26:24:
1c:99:e0:43:05:48:c6:7d:f1:e4:33:27:75:69:1d:
1d:eb:4b:f8:d3:e3:a0:e7:48:ab:21:df:ec:4c:f3:
37:e0:e6:ca:75:4d:19:6f:50:85:a1:90:24:52:3a:
c2:b2:dc:cb:a3:dc:4e:e0:50:6a:f0:a9:ac:16:d5:
8b:91:bd:f4:54:cc:7a:0f:e1:32:73:d4:8e:cb:c9:
96:0f:08:f5:ca:25:1e:ca:9a:d9:bc:0a:25:96:45:
7e:82:3b:31:7c:fe:cc:6d:70:d4:ff:1d:09:8c:c9:
93:e7:af:e5:9e:b8:b6:80:7a:23:69:2e:00:b7:99:
3a:b4:af:a2:a7:c8:a5:ac:e7:e0:54:46:bd:bd:d7:
99:3f:0a:af:dd:95:b7:7b:27:db:37:91:74:8d:17:
fe:0c:35:af:2b:e6:f1:5e:1a:28:0d:d1:06:96:64:
5e:5c:e8:ad:ea:7f:16:fd:71:67:ba:40:bd:5c:47:
b2:8b:bb:93:ec:4c:c0:48:e9:69:09:0e:97:8c:12:
80:c1:11:46:6f:66:81:e5:b5:c1:1b:9a:7b:f1:d9:
0b:dd:a5:84:58:39:eb:6b:ac:06:bc:74:05:32:d7:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:91:66:43:44:60:53:2E:FA:47:22:74:2B:5B:13:AB:F0:D5:99
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/8WGRZkNEYFMu-kcidCtbE6vw1Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.52.172.0/23
185.64.220.0/22
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
195.12.39.0/24
213.108.162.0/23
IPv6:
2a03:d840::/32
2a04:c740::/29
2a04:f940::/29
2a0a:10c0::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
97:16:75:41:86:bd:44:5b:e2:ff:71:50:19:6c:cf:9d:0b:ad:
b0:6c:f7:88:e0:d7:af:ff:a6:bb:0a:da:3f:84:b6:39:41:6d:
1c:30:47:79:34:98:cf:ad:5d:e1:8f:9a:3c:01:53:11:9f:cb:
aa:f0:d8:4f:2d:83:a1:c6:d9:ab:48:a6:7c:62:08:19:ff:80:
c2:d7:76:00:97:7a:0a:6d:c5:bc:d3:39:8f:63:a4:3a:d9:4d:
e6:de:09:a2:27:ef:7f:a3:68:f9:d0:ac:2f:c9:80:61:35:48:
67:62:4c:ef:5b:7f:19:49:a1:8d:52:ab:b7:b9:ee:3f:60:8e:
62:17:25:48:38:5a:d9:36:80:37:c3:aa:49:d9:e2:d5:85:68:
b7:a7:06:a1:ec:c5:58:cf:b0:46:e4:91:84:7b:e8:c6:1e:8f:
16:d2:9c:e8:d5:16:7b:8f:e3:fb:5f:d1:ed:37:26:b2:ec:f7:
c9:2a:33:f0:e6:06:64:96:46:10:ee:67:d5:1d:ba:a5:41:e7:
fc:d3:92:60:5c:92:aa:3c:5d:63:ac:27:f7:64:ab:5d:fe:ea:
82:5a:0c:fc:e5:d2:9a:21:29:ce:da:41:78:07:0c:5b:40:4d:
65:db:01:6e:69:f5:65:c8:d6:72:82:e3:b2:36:5d:bd:54:9f:
48:3a:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:58:17 2025 by rpki-client