Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-RJpaYjjGhteokQ6cRw5SNttaI.roa
File: L-RJpaYjjGhteokQ6cRw5SNttaI.roa (raw, json)
Hash identifier: 3wvXX7Sd2Qc+zDB5iGCxz4onn6qxJAwFmKhtKQXVJcY=
Subject key identifier: 2F:E4:49:A5:A6:23:8C:68:6D:7A:89:10:E9:C4:70:E5:23:6D:B5:A2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197C77770B1610E5F1A4392B80AB4CFA0D8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-RJpaYjjGhteokQ6cRw5SNttaI.roa
Signing time: Tue 01 Jul 2025 19:29:43 +0000
ROA not before: Tue 01 Jul 2025 19:29:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 15:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:77:70:b1:61:0e:5f:1a:43:92:b8:0a:b4:cf:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 19:29:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe449a5a6238c686d7a8910e9c470e5236db5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:b1:fa:23:6e:ae:66:03:e7:21:85:8e:47:
99:03:eb:19:b3:89:c2:03:1c:18:1b:87:18:35:65:
e7:a6:00:5d:50:72:97:e4:7f:82:47:a8:e0:d6:02:
a7:8c:2a:64:d4:cf:45:46:9d:a4:1f:36:47:8d:0f:
42:73:60:d3:4f:28:a7:ef:fc:35:65:a6:d6:75:30:
10:89:ef:86:02:63:11:d4:6c:28:45:81:ae:67:80:
9b:2a:25:e3:4b:3c:65:b0:ff:db:7b:7d:45:ef:7a:
a5:20:1a:d0:cb:5c:f8:41:74:de:34:28:42:1d:ce:
72:11:ff:40:58:44:cc:78:fb:b6:90:6d:ce:3d:f0:
6a:55:ce:6d:ab:27:53:0c:9c:7e:22:c5:9a:c6:56:
24:83:46:6f:fd:46:96:b8:e6:f5:a4:4d:39:d0:76:
bf:10:a2:83:d6:55:dc:d1:44:dd:7c:56:75:6a:da:
14:1d:0d:11:88:bb:c3:9d:cc:d7:d9:24:05:a5:63:
28:cb:d3:a4:a3:1a:73:cc:5a:24:f0:f4:fb:23:b5:
1f:52:2d:c3:b0:cf:41:07:8a:4b:00:a9:ee:a1:a7:
d2:2d:0c:6f:d1:e6:d4:0a:67:04:d3:32:8d:ca:7a:
5b:24:b9:97:1c:8c:05:fd:c2:4a:dd:17:57:65:85:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:49:A5:A6:23:8C:68:6D:7A:89:10:E9:C4:70:E5:23:6D:B5:A2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-RJpaYjjGhteokQ6cRw5SNttaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.249.0/24
Signature Algorithm: sha256WithRSAEncryption
91:49:2d:24:eb:98:43:ce:5c:63:d4:cb:a6:37:90:c8:34:81:
35:a1:44:f3:a5:4d:34:04:fc:1b:49:cc:a3:20:ab:87:61:67:
97:16:b4:8b:57:d1:80:8a:6f:1d:96:2a:03:41:0f:c5:90:f7:
c6:19:ab:53:6c:1d:27:33:64:75:4b:9c:85:cd:f5:77:a1:59:
4f:67:86:7e:0d:2c:ae:32:89:d5:87:5b:f3:ac:a7:07:95:6e:
32:a9:58:ea:ce:80:36:af:f8:65:39:9c:8c:b2:c8:65:0f:a5:
7a:b4:ba:c2:a3:b3:70:63:fb:5f:3b:19:1d:68:0c:4a:21:81:
f3:41:f0:b6:2e:bf:e2:58:9c:4b:9e:6e:a2:6f:01:1a:a9:78:
3a:89:71:d9:fe:55:9d:91:81:3b:1f:fa:d7:7b:bc:65:74:9d:
32:ed:0b:20:4b:02:04:d2:de:98:14:ff:73:88:52:43:65:e9:
6d:5f:82:24:ae:40:b8:87:3d:fe:24:5d:86:d8:5d:c7:99:81:
a8:54:a8:c0:35:18:16:c6:90:b4:b7:5f:dc:fa:d0:51:64:13:
37:0b:c2:81:15:0b:2d:19:dd:9d:57:0d:2b:72:b1:a9:6d:21:
b8:e0:71:35:f2:80:70:41:ff:57:ba:b7:05:07:ff:29:64:93:
fd:ad:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:26 2025 by rpki-client