Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8u6NkjncH-ob03P3fXyIdjI9hQ.roa
File: q8u6NkjncH-ob03P3fXyIdjI9hQ.roa (raw, json)
Hash identifier: YL/UdX+UiRFCR8jMgckhU346pulLZaY/JeAiBsMb4BE=
Subject key identifier: AB:CB:BA:36:48:E7:70:7F:A8:6F:4D:CF:DD:F5:F2:21:D8:C8:F6:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196AF586FB42E289F2361CD2624CBBFAC84
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8u6NkjncH-ob03P3fXyIdjI9hQ.roa
Signing time: Thu 08 May 2025 10:02:10 +0000
ROA not before: Thu 08 May 2025 10:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.31.192.0/22 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 06:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:58:6f:b4:2e:28:9f:23:61:cd:26:24:cb:bf:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 8 10:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abcbba3648e7707fa86f4dcfddf5f221d8c8f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:f5:ff:34:5d:2b:58:d7:a8:ed:97:9c:23:
2b:b9:37:b4:51:75:b6:bc:b3:ac:5b:5f:54:d5:65:
08:4e:e0:21:77:f1:41:62:2d:bf:37:f6:a1:0a:62:
dd:cf:1c:3c:72:20:7a:2a:53:14:c1:b0:45:7f:74:
42:db:41:38:4c:92:8e:66:bd:b2:72:b2:54:20:88:
98:48:c7:ff:68:56:04:99:5e:34:e9:34:69:cb:2b:
c5:8d:66:27:bf:5a:6e:b8:9a:47:ae:79:3f:1b:95:
b0:05:93:cf:18:16:92:22:ac:30:74:49:51:9e:a1:
c6:99:3d:f2:8f:48:f3:3c:5c:a3:85:0b:0e:09:be:
4a:a3:33:2b:0a:cf:0b:e0:34:40:ad:2a:84:7c:f5:
f5:cd:14:8d:9c:49:49:76:1b:0f:a6:73:fc:28:5d:
08:b8:a9:70:6e:83:1c:6b:4a:ca:b6:94:71:6d:03:
af:86:03:0c:f6:7c:63:28:6d:f7:86:3b:d5:00:fe:
98:a1:07:e6:a3:05:a7:62:8e:f0:ae:42:53:77:57:
cd:5c:c2:f2:38:4b:95:a0:4b:45:a5:ed:f7:13:3d:
f7:9c:d0:a3:41:ca:db:00:b1:0a:9d:a0:c7:45:91:
22:0f:0c:7b:4e:ea:c6:d6:24:04:fb:42:34:04:13:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:BA:36:48:E7:70:7F:A8:6F:4D:CF:DD:F5:F2:21:D8:C8:F6:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8u6NkjncH-ob03P3fXyIdjI9hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.31.192.0/22
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/23
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
193.222.98.0/24
194.55.186.0/24
194.169.172.0/24
194.169.175.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:e8:f5:58:a7:f7:2a:74:10:ef:13:11:dc:ef:71:1b:84:
d4:bd:a4:17:ba:04:dd:66:f9:73:21:8e:8b:be:1b:e1:92:f5:
bc:4b:5b:88:6e:30:52:5b:38:53:16:20:a0:de:a3:bc:6c:99:
2f:39:f9:06:c9:6b:f7:9a:c3:71:14:53:c4:10:6d:c7:59:50:
71:d7:12:c8:e5:eb:9d:c2:96:d4:35:88:bb:cb:2f:3e:1e:f8:
ee:a3:8d:fc:cc:8a:d1:fe:c7:57:45:2c:ac:17:97:f2:72:b9:
c8:0a:f6:55:e8:36:44:0b:ff:d8:67:1f:c1:b8:90:60:5c:55:
e9:a1:67:25:d6:4a:01:21:e2:5a:82:9a:6c:10:a7:9e:df:57:
b4:ef:c6:48:93:19:1a:33:ab:90:ae:0b:74:16:c5:60:28:a0:
41:b9:e3:17:91:60:9e:c3:1f:cd:8c:14:7a:60:f8:e7:1d:3a:
ff:83:ef:ad:0a:bc:cf:44:ec:e4:d8:3d:29:26:06:45:2c:0c:
05:dc:e7:f1:21:37:cc:cd:f3:80:17:4f:d8:cc:4a:0a:4a:84:
77:77:8e:62:29:bb:01:45:a8:fc:62:19:c7:d6:8f:03:fe:66:
72:72:d6:a7:1e:58:c3:11:e0:1b:11:ad:c2:73:9f:d4:1c:96:
65:e8:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:32:01 2025 by rpki-client