Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5qzS3YvG-APO9z1zX7Na_wX_wk.roa
File: q5qzS3YvG-APO9z1zX7Na_wX_wk.roa (raw, json)
Hash identifier: xZP/Dy6dG4d9j3kuFVGTyKDgKUxB+NDVqZDZgOy9M6I=
Subject key identifier: AB:9A:B3:4B:76:2F:1B:E0:0F:3B:DC:F5:CD:7E:CD:6B:FC:17:FF:09
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019859053119D2E166AF775799ED6A3073D5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5qzS3YvG-APO9z1zX7Na_wX_wk.roa
Signing time: Wed 30 Jul 2025 01:49:29 +0000
ROA not before: Wed 30 Jul 2025 01:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
89.106.25.0/24 maxlen: 24
89.106.26.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 19:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:05:31:19:d2:e1:66:af:77:57:99:ed:6a:30:73:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 30 01:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9ab34b762f1be00f3bdcf5cd7ecd6bfc17ff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:2e:7b:8d:d6:f6:a6:d5:16:8e:14:1d:28:
cd:de:95:a2:d5:fc:5c:24:e4:c2:84:1a:63:15:06:
6b:4e:5f:72:ee:b7:b3:35:43:ad:5d:38:38:77:71:
e3:03:b5:ab:eb:27:40:19:71:e1:41:45:e1:87:8e:
4b:cc:67:9e:36:dc:14:97:33:e2:6d:14:c5:f5:e2:
8d:be:88:9c:31:a1:ec:10:f3:1f:dd:e4:de:ed:63:
a6:94:33:a2:c9:ca:56:9b:80:90:0e:83:6a:26:69:
5c:f4:04:7e:18:4f:5b:94:c4:c5:21:38:c1:63:20:
83:0e:32:bc:46:66:9e:cd:69:14:d5:50:df:1f:8b:
a1:ce:fc:11:dc:c8:5d:85:6a:bd:48:eb:ee:39:6b:
3c:e1:2e:67:79:92:49:eb:ea:9f:62:7e:55:f5:38:
cd:29:b1:ab:df:a8:0e:41:da:5c:09:27:08:a1:0e:
0e:f7:ac:67:dd:cd:69:5f:e0:86:11:01:f4:ab:8e:
01:94:0e:04:19:ee:3d:83:0c:36:bb:ef:75:2c:0d:
7e:51:7e:37:9e:ba:4f:ea:6b:c5:b3:83:7b:21:94:
31:48:ea:38:61:7e:be:7b:8f:67:3e:03:c6:cc:ed:
98:83:cd:b7:01:64:3a:2c:f2:f8:6e:18:a0:65:88:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:B3:4B:76:2F:1B:E0:0F:3B:DC:F5:CD:7E:CD:6B:FC:17:FF:09
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q5qzS3YvG-APO9z1zX7Na_wX_wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.23.255
89.106.25.0-89.106.26.255
94.229.212.0/24
94.229.222.0/24
103.47.59.0/24
194.36.33.0-194.36.34.255
Signature Algorithm: sha256WithRSAEncryption
41:5b:f9:29:97:eb:7d:85:52:70:3a:81:de:cb:b4:fc:8c:8c:
02:b1:7d:d3:ff:8f:0a:a3:74:6d:dc:77:71:8c:cb:8c:48:86:
a5:7e:7d:c7:ef:e9:f5:30:83:1f:53:2c:6c:e6:2e:82:e3:e5:
48:f3:d1:dd:85:71:aa:02:2d:89:1b:ee:2c:35:6c:9d:0f:90:
d5:16:d1:ce:84:1a:a1:df:0c:33:30:1c:43:55:9c:40:e0:d8:
68:b6:1a:04:92:5d:e6:da:0f:46:cb:f1:ef:d1:5a:e6:c8:bf:
43:2d:88:70:d3:e0:86:00:11:4a:31:5c:b6:da:19:d4:05:f6:
78:23:19:ae:7e:9b:fa:1d:4b:18:25:f0:96:89:89:6e:43:0d:
92:67:da:5d:f9:23:b7:7f:bb:a3:08:82:69:e1:8f:cd:86:ec:
e1:0e:40:13:e1:e0:91:d2:53:ef:b2:e7:f1:d1:51:95:87:5a:
e0:b6:8b:5b:55:68:1c:ce:fc:43:52:5a:19:9a:da:9b:3f:88:
99:e9:90:34:38:a8:8e:ed:52:0a:b4:ed:97:3e:ca:f1:53:f8:
ff:b7:67:28:06:e1:85:a2:e7:34:b7:91:5e:eb:81:bc:11:01:
cd:59:04:7a:0a:60:cc:13:f4:6a:5d:6d:f8:80:b1:34:ba:14:
39:21:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:01 2025 by rpki-client