Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UkdY8wh-rN4KwK9EphEU2vImtes.roa
File: UkdY8wh-rN4KwK9EphEU2vImtes.roa (raw, json)
Hash identifier: szq160S6EtHQj7NSF/pmQipqedVK9D8mwM7rNFQvAiI=
Subject key identifier: 52:47:58:F3:08:7E:AC:DE:0A:C0:AF:44:A6:11:14:DA:F2:26:B5:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197B2CA8C4920D997BEC5F9A002DF4004B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UkdY8wh-rN4KwK9EphEU2vImtes.roa
Signing time: Fri 27 Jun 2025 19:08:27 +0000
ROA not before: Fri 27 Jun 2025 19:08:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.20.0/23 maxlen: 23
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
91.92.240.0/22 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 07:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:ca:8c:49:20:d9:97:be:c5:f9:a0:02:df:40:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 27 19:08:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=524758f3087eacde0ac0af44a61114daf226b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:3b:5e:79:ec:ac:63:e3:64:80:31:83:65:
a5:7c:45:d1:c2:68:1c:cc:96:44:82:76:8d:10:aa:
17:23:b0:2c:78:36:62:8c:d9:63:62:1d:52:a4:e6:
81:61:a5:9f:07:ea:f1:9d:f3:05:e2:9b:e2:f1:11:
a9:38:bf:c2:c8:61:09:07:e7:15:19:ae:79:7c:c0:
39:91:e0:12:77:41:77:20:e4:2d:fa:31:3d:71:75:
91:00:36:59:b2:bf:af:00:1f:c9:7b:20:3d:3a:b3:
89:ad:80:eb:78:17:53:ee:02:af:5a:10:fb:aa:4b:
dd:ec:e0:88:41:51:e5:1a:e4:a5:31:30:dd:37:88:
90:97:39:ed:27:ad:a0:9b:f3:7a:e7:97:15:09:29:
c6:1e:fe:91:40:8e:0b:d2:57:0c:85:1a:98:ee:55:
fe:2b:fc:53:6c:94:59:af:e0:18:a6:13:f8:4c:8e:
ed:c8:4b:ec:8d:c5:90:81:48:9b:3b:0d:86:8c:c2:
f5:e0:1a:53:ac:b6:2b:9c:9f:58:3a:97:ed:48:ae:
3e:57:2a:ff:0e:a7:93:4e:a8:54:85:58:d5:91:a0:
b0:75:5c:a4:00:ed:da:58:78:0b:be:0a:7b:35:86:
10:27:bf:2b:01:26:0d:24:fa:5e:85:a6:74:69:b6:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:47:58:F3:08:7E:AC:DE:0A:C0:AF:44:A6:11:14:DA:F2:26:B5:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UkdY8wh-rN4KwK9EphEU2vImtes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.8.93.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/24
87.120.166.0/24
87.121.20.0-87.121.22.255
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.165.0/24
91.92.70.0/24
91.92.240.0/22
92.119.196.0/23
92.249.50.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.162.0/23
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
193.222.98.0/24
194.55.186.0/24
194.169.175.0/24
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:51:ac:f5:b7:80:f3:60:40:e0:b0:2a:71:a2:24:bb:c4:4f:
a7:4f:69:58:64:b9:f6:cb:14:19:14:66:d2:65:04:9f:ef:8b:
f4:a5:be:b0:14:f7:b6:bb:21:d4:f7:0e:c7:7f:d2:5d:4c:14:
63:fa:63:90:09:84:5a:ce:42:f3:6a:cc:a9:48:b0:80:95:9b:
dc:0a:5b:19:e8:a1:19:c1:34:18:3c:40:28:ce:30:62:eb:dc:
f2:65:11:31:ff:bc:44:2c:08:06:9d:95:44:c8:a9:29:50:6a:
89:50:d1:71:c6:e3:b3:77:ad:49:61:a6:8a:2e:3b:e8:ec:84:
29:83:34:5f:2d:01:fb:c8:b9:99:a1:22:d5:47:00:45:a6:33:
2f:71:25:7b:2f:46:b7:e8:eb:a2:cb:d6:b5:f3:9f:94:f0:3f:
22:5e:b0:fa:ff:9d:51:40:94:7d:48:cf:2a:e0:77:37:8b:cc:
0a:4d:5c:ed:bb:98:35:d3:9a:46:3b:0c:05:56:d9:9b:67:29:
f5:3e:d1:45:c3:57:29:0d:7d:7f:7b:3a:78:d4:5a:35:4b:79:
03:8e:c0:d0:19:3f:95:ae:2b:c5:77:05:1b:89:b5:74:41:a1:
c0:5c:c2:95:91:fc:30:50:76:d4:28:b8:e0:53:4c:ba:33:0b:
95:20:cc:8f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZeyyoxJINmXvsX5oALfQAS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNjI3MTkwODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQ3NThmMzA4N2VhY2RlMGFjMGFmNDRhNjExMTRkYWYyMjZiNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZE7XnnsrGPjZIAxg2WlfEXRwmgc
zJZEgnaNEKoXI7AseDZijNljYh1SpOaBYaWfB+rxnfMF4pvi8RGpOL/CyGEJB+cV
Ga55fMA5keASd0F3IOQt+jE9cXWRADZZsr+vAB/JeyA9OrOJrYDreBdT7gKvWhD7
qkvd7OCIQVHlGuSlMTDdN4iQlzntJ62gm/N655cVCSnGHv6RQI4L0lcMhRqY7lX+
K/xTbJRZr+AYphP4TI7tyEvsjcWQgUibOw2GjML14BpTrLYrnJ9YOpftSK4+Vyr/
DqeTTqhUhVjVkaCwdVykAO3aWHgLvgp7NYYQJ78rASYNJPpehaZ0abaUcQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFFJHWPMIfqzeCsCvRKYRFNryJrXrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVWtkWTh3aC1yTjRLd0s5RXBoRVUydkltdGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB
SAMEAAI7/QMEAgX8hAMEAB8N0wMEAC0IXQMEAC0JnQMEAC0M/QMEAC1C5AMEAC1C
5wMEAC1RJwMEAC1YQAMEAC1Z9wMEAC1aWQMEAC2LagMEAS2NngMEAC2XWgMEAFGh
7gMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4WQMEAFd4fgMEAFd4pjAMAwQCV3kUAwQA
V3kWAwQAV3kmAwQAV3ktAwQAV3lXAwQAV3mlAwQAW1xGAwQCW1zwAwQBXHfEAwQA
XPkyAwQAXXsvAwQAXXtVAwQAXXttAwQAXXt1AwQAXXt3AwQAXmd9AwQBXpqiAwQA
XpzoAwQAXpzvAwQAjWIBAwQAjWIGMAwDBACrFkkDBAKrFkgDBACy1+MDBAK52FQD
BADBGdgDBADBIxIDBADB3mADBADB3mIDBADCN7oDBADCqa8DBADDsm8wDQYJKoZI
hvcNAQELBQADggEBAF9RrPW3gPNgQOCwKnGiJLvET6dPaVhkufbLFBkUZtJlBJ/v
i/SlvrAU97a7IdT3Dsd/0l1MFGP6Y5AJhFrOQvNqzKlIsICVm9wKWxnooRnBNBg8
QCjOMGLr3PJlETH/vEQsCAadlUTIqSlQaolQ0XHG47N3rUlhpoouO+jshCmDNF8t
AfvIuZmhItVHAEWmMy9xJXsvRrfo66LL1rXzn5TwPyJesPr/nVFAlH1IzyrgdzeL
zApNXO27mDXTmkY7DAVW2ZtnKfU+0UXDVykNfX97OnjUWjVLeQOOwNAZP5WuK8V3
BRuJtXRBocBcwpWR/DBQdtQouOBTTLozC5UgzI8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:30:46 2025 by rpki-client