Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7pLEm-olyIHhZBl7XUX62vuS470.roa
File: 7pLEm-olyIHhZBl7XUX62vuS470.roa (raw, json)
Hash identifier: 0dGHyt5X1UF2zun49aJqeeWfPO0iD6mnMubCvd6mIaE=
Subject key identifier: EE:92:C4:9B:EA:25:C8:81:E1:64:19:7B:5D:45:FA:DA:FB:92:E3:BD
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019711AF5DFB8058EF90861B6120205828F7
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7pLEm-olyIHhZBl7XUX62vuS470.roa
Signing time: Tue 27 May 2025 12:19:54 +0000
ROA not before: Tue 27 May 2025 12:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:af:5d:fb:80:58:ef:90:86:1b:61:20:20:58:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 27 12:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee92c49bea25c881e164197b5d45fadafb92e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:33:ee:6d:18:d5:c0:c2:2c:15:7c:a0:3a:
ee:46:46:a2:f8:a0:dc:dd:38:67:46:6d:02:6f:22:
e9:87:76:78:e6:17:f1:91:6e:59:75:13:0d:62:3e:
a0:02:d8:ec:96:19:3d:f7:f9:0b:a0:4d:a0:16:66:
8f:9e:25:88:a4:21:82:4c:ed:9f:eb:1e:6a:19:a2:
32:f4:8c:02:ef:ed:24:3c:d7:a3:22:d3:ca:78:78:
c6:54:88:73:0b:34:a9:bd:4a:ac:e3:6c:89:8d:24:
c8:8e:9e:1c:e2:a1:c8:bb:22:a4:0a:f4:a0:6e:ee:
4a:db:4f:09:c3:8c:a2:68:09:68:dd:b4:bb:71:1b:
20:da:d1:53:ef:f1:16:1d:fb:73:ee:79:08:77:b9:
5d:1d:cd:8b:7a:ab:c5:da:b0:c6:87:5e:f7:e7:e9:
c6:ee:c4:4c:e5:42:b1:6c:d7:68:c0:40:72:82:80:
50:0b:24:35:29:16:fd:27:67:d1:59:74:46:a8:a8:
e0:f0:7e:2a:c8:ca:74:c9:eb:b5:a8:4a:ea:61:18:
80:e1:6f:ac:19:10:21:d3:87:bc:34:55:41:c7:64:
a8:86:c1:c6:03:83:2b:c4:93:8a:fc:c0:c0:73:ff:
8e:bb:32:d1:b0:97:bf:88:91:b1:31:79:28:70:10:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:C4:9B:EA:25:C8:81:E1:64:19:7B:5D:45:FA:DA:FB:92:E3:BD
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7pLEm-olyIHhZBl7XUX62vuS470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
82:ac:0f:33:be:60:26:40:b0:56:a4:28:c1:8e:a4:87:5a:0c:
0c:50:b0:59:74:e0:30:f4:83:6a:ec:ae:9e:50:01:39:f0:df:
35:5d:5f:b9:19:7a:7f:e0:c4:64:55:49:5e:c2:a9:52:7d:79:
61:5e:39:3c:a5:4b:96:3e:a5:82:62:a2:26:67:19:14:5a:9c:
1e:d1:9e:f0:82:2c:68:e4:89:c9:ce:a6:84:fc:c2:fa:c6:09:
f1:e2:71:ba:f7:de:ff:9d:b4:84:4d:64:89:94:97:15:04:2a:
f0:bf:fb:84:05:fc:08:cf:27:af:44:ae:74:72:43:f8:ed:03:
3b:5b:6b:ea:43:15:b2:5e:9f:40:85:ff:ad:98:af:71:7d:33:
a9:6a:62:4c:6e:7d:49:a6:4b:9d:26:65:0b:ac:64:95:bb:25:
db:cf:9d:79:57:d6:af:0a:80:b3:14:10:9a:d2:e3:33:4c:d2:
a4:46:75:16:72:ed:90:55:cc:34:b1:9c:2c:08:51:20:a0:79:
93:a9:2d:ed:c3:a3:26:69:2f:d1:91:f1:9a:51:cc:e0:12:ce:
48:ca:27:f7:5c:ad:5c:2f:cf:64:5b:1b:d5:79:03:a5:b5:7b:
6c:db:32:ba:ee:9b:6f:66:eb:5f:db:32:43:8e:ee:a3:3a:e7:
d7:c9:70:81
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZcRr137gFjvkIYbYSAgWCj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwNTI3MTIxOTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTkyYzQ5YmVhMjVjODgxZTE2NDE5N2I1ZDQ1ZmFkYWZiOTJlM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4z7m0Y1cDCLBV8oDruRkai+KDc
3ThnRm0CbyLph3Z45hfxkW5ZdRMNYj6gAtjslhk99/kLoE2gFmaPniWIpCGCTO2f
6x5qGaIy9IwC7+0kPNejItPKeHjGVIhzCzSpvUqs42yJjSTIjp4c4qHIuyKkCvSg
bu5K208Jw4yiaAlo3bS7cRsg2tFT7/EWHftz7nkId7ldHc2LeqvF2rDGh1735+nG
7sRM5UKxbNdowEBygoBQCyQ1KRb9J2fRWXRGqKjg8H4qyMp0yeu1qErqYRiA4W+s
GRAh04e8NFVBx2SohsHGA4MrxJOK/MDAc/+OuzLRsJe/iJGxMXkocBBeSQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFO6SxJvqJciB4WQZe11F+tr7kuO9MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvN3BMRW0tb2x5SUhoWkJsN1hVWDYydnVTNDcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBOBAIAATBIAwQAVcx9AwQA
VmpoAwQDWSIIAwQAWSWIAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQAXXKrAwQA
vNUSAwQBvNdIAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAIKsDzO+YCZAsFakKMGOpIdaDAxQsFl04DD0g2rsrp5QATnw3zVdX7kZen/g
xGRVSV7CqVJ9eWFeOTylS5Y+pYJioiZnGRRanB7RnvCCLGjkicnOpoT8wvrGCfHi
cbr33v+dtIRNZImUlxUEKvC/+4QF/AjPJ69ErnRyQ/jtAztba+pDFbJen0CF/62Y
r3F9M6lqYkxufUmmS50mZQusZJW7JdvPnXlX1q8KgLMUEJrS4zNM0qRGdRZy7ZBV
zDSxnCwIUSCgeZOpLe3DoyZpL9GR8ZpRzOASzkjKJ/dcrVwvz2RbG9V5A6W1e2zb
Mrrum29m61/bMkOO7qM659fJcIE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:03 2025 by rpki-client