Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G29gnCeCyN1ClAOHuREO9xGAw74.roa
File: G29gnCeCyN1ClAOHuREO9xGAw74.roa (raw, json)
Hash identifier: RzQHC2pQcu/rAtwPpH9pyIRFYoaxuRxPcD8JpY+WROE=
Subject key identifier: 1B:6F:60:9C:27:82:C8:DD:42:94:03:87:B9:11:0E:F7:11:80:C3:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196855212D499BC86670A69D565695B2E61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G29gnCeCyN1ClAOHuREO9xGAw74.roa
Signing time: Wed 30 Apr 2025 06:11:10 +0000
ROA not before: Wed 30 Apr 2025 06:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 11:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:52:12:d4:99:bc:86:67:0a:69:d5:65:69:5b:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 30 06:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b6f609c2782c8dd42940387b9110ef71180c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:0c:b5:d5:26:b9:a9:81:0c:31:f1:33:3a:
16:cd:b0:a5:96:a4:6d:52:00:f3:3d:14:29:7a:d1:
88:9b:ee:12:d4:ba:dc:55:53:c5:cb:f7:2b:16:db:
8a:38:f3:22:56:b4:05:a2:38:7f:7a:c1:6b:8d:16:
07:d3:35:59:fc:5e:a5:31:f3:7a:84:bd:ff:c1:f7:
2d:b9:2b:0a:58:b5:45:75:79:bb:f0:bb:90:5d:39:
db:83:b2:ca:5f:c7:2e:35:1e:42:ab:0c:92:f8:18:
ea:07:9e:de:6e:5f:9c:58:63:08:36:97:e1:3f:c7:
3b:76:e8:c6:69:37:74:02:6f:df:3c:61:07:4c:54:
65:6a:23:1f:ac:11:6c:67:b9:de:2a:31:36:c0:18:
1e:29:3c:c7:5f:47:c5:cd:69:4c:ab:c5:84:5a:25:
45:a6:e1:45:21:d2:d2:34:5f:a3:e9:60:b4:e9:6a:
4d:b3:52:c3:dd:f6:57:39:71:68:fa:9b:e1:9f:db:
9a:ca:cf:22:ef:0e:d9:3f:93:e9:06:78:c6:c7:3a:
66:18:2f:25:6c:39:57:85:3e:2a:21:6f:a2:bf:27:
22:fb:85:d5:e6:ad:2b:d0:03:7e:33:a7:d6:b8:96:
23:e2:22:b7:43:b6:de:c5:9e:04:ad:a7:c7:ca:f8:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:60:9C:27:82:C8:DD:42:94:03:87:B9:11:0E:F7:11:80:C3:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G29gnCeCyN1ClAOHuREO9xGAw74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8a:24:de:e2:c0:bb:f3:bf:30:44:c9:c9:de:d5:82:1a:a9:
c3:77:57:46:01:e8:cc:8f:30:1f:56:b7:7b:9f:40:d5:a5:06:
e7:42:8a:02:eb:db:a3:69:3d:96:56:c4:f8:4b:44:14:f2:9f:
93:85:2c:f7:f1:07:24:a6:66:b8:fa:bb:71:34:8a:fc:5c:f3:
e5:f3:01:e7:9f:fc:be:e7:10:76:85:db:a9:fe:48:96:72:36:
20:4b:9b:ee:34:06:97:ed:b3:2b:0d:78:b1:24:7e:a3:93:03:
6d:e3:9e:db:a3:6d:bb:91:aa:ba:b3:6d:7c:2f:c3:a8:cf:29:
0b:b6:91:6d:1b:36:e9:00:41:e7:2e:e4:1b:50:c8:04:71:0b:
9f:5d:4e:2c:3c:6e:dd:f3:c6:df:39:53:ba:69:3e:2e:a5:a6:
46:4b:98:14:80:52:c9:58:12:ce:8d:d9:38:b1:4a:38:ed:d9:
be:d6:a6:83:73:46:ba:0b:2c:cf:9b:89:8f:7b:13:88:11:04:
7c:99:7f:10:c5:dc:69:4c:77:fb:19:0f:0c:d6:21:d8:93:cc:
59:11:23:ff:cb:a9:a2:65:4a:21:d6:8e:cc:25:34:fc:89:4a:
b5:f5:4d:32:72:42:fc:fb:38:22:a3:63:05:68:30:fe:1f:72:
47:7c:70:81
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISAZaFUhLUmbyGZwpp1WVpWy5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDMwMDYxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZmNjA5YzI3ODJjOGRkNDI5NDAzODdiOTExMGVmNzExODBjM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGUMtdUmuamBDDHxMzoWzbCllqRt
UgDzPRQpetGIm+4S1LrcVVPFy/crFtuKOPMiVrQFojh/esFrjRYH0zVZ/F6lMfN6
hL3/wfctuSsKWLVFdXm78LuQXTnbg7LKX8cuNR5CqwyS+BjqB57ebl+cWGMINpfh
P8c7dujGaTd0Am/fPGEHTFRlaiMfrBFsZ7neKjE2wBgeKTzHX0fFzWlMq8WEWiVF
puFFIdLSNF+j6WC06WpNs1LD3fZXOXFo+pvhn9uays8i7w7ZP5PpBnjGxzpmGC8l
bDlXhT4qIW+ivyci+4XV5q0r0AN+M6fWuJYj4iK3Q7bexZ4ErafHyvjiOQIDAQAB
o4IDUzCCA08wHQYDVR0OBBYEFBtvYJwngsjdQpQDh7kRDvcRgMO+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRzI5Z25DZUN5TjFDbEFPSHVSRU85eEdBdzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZwYIKwYBBQUHAQcBAf8EggFWMIIBUjCCAU4EAgABMIIB
RgMEAAI7/QMEAgX8hAMEAB8N0wMEAC0JnQMEAC0M/QMEAC1C5AMEAC1C5wMEAC1R
JwMEAC1YQAMEAC1Z9wMEAC1aWQMEAC2LagMEAS2NngMEAC2XWgMEAE9uMgMEAFGh
7gMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4WQMEAFd4pgMEAFd5FgMEAFd5JgMEAFd5
LQMEAFd5VwMEAVd5fAMEAFd5ogMEAFd5pQMEAFtcRgMEAVx3xAMEAFz5MgMEAF17
LQMEAF17LwMEAF17VQMEAF17bQMEAF17dQMEAF17dwMEAF5nfQMEAl6aoAMEA16c
QAMEAF6caQMEAF6cpwMEAF6c6AMEAF6c7wMEAI1iAQMEAI1iBjAMAwQAqxZJAwQC
qxZIAwQAstfjAwQCudhUAwQAwRnYAwQAwSMSAwQAwje6AwQAwqmvMA0GCSqGSIb3
DQEBCwUAA4IBAQAViiTe4sC7878wRMnJ3tWCGqnDd1dGAejMjzAfVrd7n0DVpQbn
QooC69ujaT2WVsT4S0QU8p+ThSz38Qckpma4+rtxNIr8XPPl8wHnn/y+5xB2hdup
/kiWcjYgS5vuNAaX7bMrDXixJH6jkwNt457bo227kaq6s218L8OozykLtpFtGzbp
AEHnLuQbUMgEcQufXU4sPG7d88bfOVO6aT4upaZGS5gUgFLJWBLOjdk4sUo47dm+
1qaDc0a6CyzPm4mPexOIEQR8mX8QxdxpTHf7GQ8M1iHYk8xZESP/y6miZUoh1o7M
JTT8iUq19U0yckL8+zgio2MFaDD+H3JHfHCB
-----END CERTIFICATE-----
Generated at Tue May 13 17:35:55 2025 by rpki-client