
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa
File: z5n7P_P-VsaJlXRYUQIOPasmiEg.roa (raw, json)
Hash identifier: aE4YE3VEUQItwRJA7QaxxE/zzpEVrkDD4qmofAvWPXA=
Subject key identifier: CF:99:FB:3F:F3:FE:56:C6:89:95:74:58:51:02:0E:3D:AB:26:88:48
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0198760533B7A8AB1F6C9EAB9B7151F6944E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa
Signing time: Mon 04 Aug 2025 16:58:28 +0000
ROA not before: Mon 04 Aug 2025 16:58:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.211.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 21:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:05:33:b7:a8:ab:1f:6c:9e:ab:9b:71:51:f6:94:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 4 16:58:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf99fb3ff3fe56c68995745851020e3dab268848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:03:7e:1e:1f:49:ec:e9:a9:e3:38:b4:b2:
ac:6a:6d:81:61:85:c7:9b:71:51:25:ce:80:9b:81:
2d:c4:64:95:dd:a0:d2:ee:53:0e:04:0c:e2:9f:c0:
46:49:b4:a6:66:eb:47:ff:4b:8b:0f:1c:0c:cf:de:
c2:a8:61:db:af:9d:74:dc:7c:4b:a7:74:ae:78:76:
68:68:3a:6a:d3:b7:1f:5f:ef:20:3f:96:2a:2b:bd:
a2:f4:8b:e8:8a:5b:07:05:22:a5:86:a2:bc:63:e5:
63:96:15:b0:4b:c7:74:1e:e8:31:d0:66:dc:47:07:
2d:de:ac:3a:ad:a1:df:5b:d5:69:09:3b:a2:1b:fa:
34:91:77:2e:6b:df:6d:cf:65:52:b7:66:8d:39:60:
ae:b0:31:1d:54:68:8a:03:3a:a3:b8:aa:59:b6:cb:
80:9d:c3:71:66:97:1b:29:c9:7d:69:4f:c9:1c:2a:
5c:2c:0e:3e:b5:f5:b6:d3:b3:0d:fa:97:34:e6:10:
1f:56:06:f3:c4:a9:c6:fd:92:be:ae:97:3c:bf:4c:
47:13:c4:22:6b:4e:b2:15:64:a9:f4:34:76:6c:65:
c6:f2:f4:5a:b3:4f:fe:09:a8:00:89:fa:64:9a:6a:
0c:6f:bc:ff:ff:2b:07:b0:a5:99:63:f6:d2:12:92:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:99:FB:3F:F3:FE:56:C6:89:95:74:58:51:02:0E:3D:AB:26:88:48
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
a7:fa:64:b1:4a:04:3a:b6:52:44:44:6c:ba:ec:d5:4b:bd:97:
90:45:a4:6c:95:60:60:6b:08:53:81:f7:cc:13:01:07:f9:aa:
5d:4d:2f:23:25:26:f9:3a:71:47:7b:5f:79:5c:88:cf:12:36:
34:4f:f7:d3:d7:c3:d0:67:7d:9a:45:77:86:38:34:e0:8f:94:
45:ac:b8:8c:f3:8d:2b:15:97:2d:55:74:d2:5f:36:be:63:7d:
19:29:68:f2:27:16:c7:d4:7e:5a:ab:6d:76:d9:20:cd:63:7f:
e7:cc:22:8c:f2:00:90:0f:72:bf:2a:fa:93:fc:c2:ab:92:0e:
b1:7d:91:84:83:2a:fa:83:43:6b:a9:dd:b5:db:44:25:e3:4a:
bf:15:98:ff:b6:02:30:70:1e:43:06:35:d3:e5:c8:b4:2b:33:
30:4d:15:4f:63:45:41:50:06:66:3f:e1:c3:65:d7:2f:98:a5:
c2:5d:9c:40:51:89:4f:3a:01:28:2b:df:d9:aa:70:14:3a:86:
d1:ea:c7:5a:99:cb:80:22:29:8d:b0:9d:73:9e:4c:16:a5:bb:
fd:6e:52:ff:11:9b:3c:56:4b:21:df:13:c0:04:29:64:a2:64:
46:b8:98:82:60:52:2c:64:4a:8f:e5:fc:73:91:99:e5:37:ee:
f0:23:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:29:55 2025 by rpki-client