Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/JFcxH9MoewjxhzJJ-p0-THYFT4M.roa
File: JFcxH9MoewjxhzJJ-p0-THYFT4M.roa (raw, json)
Hash identifier: 8p8Xdbxjs8STakR2Vg94nxPAWyj5jCGWSYV/O2dFAek=
Subject key identifier: 24:57:31:1F:D3:28:7B:08:F1:87:32:49:FA:9D:3E:4C:76:05:4F:83
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01975FD0534B0021B98814290B1D3D15018D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/JFcxH9MoewjxhzJJ-p0-THYFT4M.roa
Signing time: Wed 11 Jun 2025 16:26:17 +0000
ROA not before: Wed 11 Jun 2025 16:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jun 2025 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:d0:53:4b:00:21:b9:88:14:29:0b:1d:3d:15:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jun 11 16:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2457311fd3287b08f1873249fa9d3e4c76054f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:d6:15:42:2d:16:ce:5d:af:f7:f1:8f:52:
8d:ec:8e:df:5d:34:39:fb:3a:3d:49:76:78:ae:b0:
36:f9:55:02:fe:cc:c9:20:ab:d4:f1:a8:f3:c4:cc:
bf:66:3d:19:fe:6c:a0:c5:63:bf:af:31:5a:0d:8e:
79:6a:a7:70:63:2e:e4:18:0c:cc:9b:99:31:53:06:
3d:49:6f:e1:7b:11:9e:29:d0:96:b0:00:85:24:96:
de:3f:ab:43:5a:59:ea:ce:c7:c2:c9:55:bb:8e:f3:
cb:ee:af:3b:8d:db:9c:3d:9d:84:6b:ac:42:91:b8:
d3:54:30:d3:4a:7a:ee:69:87:9f:15:00:42:e5:11:
5a:6d:eb:bc:4a:e6:3a:75:d6:ff:fe:be:ae:a1:f2:
24:9f:0c:52:32:75:3c:08:7d:29:2d:6b:b1:97:c7:
6d:72:14:e5:ae:16:54:21:4d:ff:94:f1:ad:76:9f:
8b:1b:79:55:ff:87:f7:a9:18:84:ed:80:15:ef:f6:
a0:88:43:cd:e5:95:ed:77:e8:8e:f0:56:b3:50:78:
5f:b8:c5:20:35:18:6a:22:bf:94:e4:e1:23:88:ec:
7b:28:d4:e9:0d:a7:01:81:a3:d6:82:e5:89:51:6a:
05:27:6e:97:c9:13:4f:d7:1f:7f:5a:8c:3d:2d:c3:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:31:1F:D3:28:7B:08:F1:87:32:49:FA:9D:3E:4C:76:05:4F:83
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/JFcxH9MoewjxhzJJ-p0-THYFT4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.192.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.243.255
217.154.248.0/24
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
0c:e9:57:b7:9a:fd:90:1b:83:47:be:30:68:17:5c:00:92:83:
f3:c9:e4:bf:f5:48:2e:83:14:97:cc:10:79:d4:ba:f1:38:38:
aa:7a:b1:c8:cc:6d:54:d8:db:29:e4:68:25:c5:fb:df:52:f9:
1b:bc:d6:d0:82:86:d9:a6:b4:98:ab:60:f5:46:30:e6:48:ae:
29:08:fb:5d:4a:43:89:04:83:2c:53:cf:77:fa:ff:f8:75:2f:
74:d8:9b:9b:ac:d3:f1:df:e9:04:dc:6f:55:08:f8:65:8f:0d:
95:12:a6:06:6e:ac:ce:f4:09:18:1c:4f:29:81:18:06:2b:31:
10:6a:e0:a1:8b:6d:27:1f:90:2b:7f:1d:56:9e:f5:00:7c:c5:
5c:54:5e:56:b8:4d:0a:8c:8a:a9:39:dd:5e:cb:bb:fa:09:bd:
51:02:ec:41:1d:d5:26:84:44:7a:6c:54:9d:40:c8:92:42:64:
e7:56:e2:71:5c:bc:bb:3e:b7:36:dd:de:ee:26:c6:05:9c:e4:
c2:5e:d8:03:a0:d6:ab:a1:63:42:9f:fc:3e:bb:ce:9e:b2:ed:
de:40:c9:bb:e0:ce:32:bc:93:85:52:fc:aa:d2:1a:84:fe:89:
84:34:5d:ca:ef:b5:18:95:00:63:f8:06:56:7b:95:26:a2:df:
2f:c3:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:10 2025 by rpki-client