Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jkZQqxZAeObKoy7UQ9sOSqmr5B0.roa
File: jkZQqxZAeObKoy7UQ9sOSqmr5B0.roa (raw, json)
Hash identifier: MfL9vVWATQ8ZCCpjWb6ZkZbmnjYw4jEoYkuDGX7N8kg=
Subject key identifier: 8E:46:50:AB:16:40:78:E6:CA:A3:2E:D4:43:DB:0E:4A:A9:AB:E4:1D
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019683E69BE5FB001DE77C6BD2BF181FF867
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jkZQqxZAeObKoy7UQ9sOSqmr5B0.roa
Signing time: Tue 29 Apr 2025 23:34:10 +0000
ROA not before: Tue 29 Apr 2025 23:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 5.183.88.0/22 maxlen: 22
113.30.192.0/21 maxlen: 21
185.5.144.0/24 maxlen: 24
185.5.147.0/24 maxlen: 24
185.140.173.0/24 maxlen: 24
193.111.40.0/24 maxlen: 24
194.26.202.0/24 maxlen: 24
195.64.115.0/24 maxlen: 24
195.64.119.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.124.0/24 maxlen: 24
195.64.125.0/24 maxlen: 24
195.96.134.0/24 maxlen: 24
216.247.232.0/22 maxlen: 22
2a10:d505::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Apr 2025 00:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:e6:9b:e5:fb:00:1d:e7:7c:6b:d2:bf:18:1f:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Apr 29 23:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e4650ab164078e6caa32ed443db0e4aa9abe41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:02:14:7d:81:a6:d4:4c:d2:30:4f:33:65:
5a:11:06:a9:87:e8:1d:e9:eb:48:c3:76:96:0c:fc:
04:53:85:be:49:17:41:f1:0d:38:49:69:6e:5e:10:
ce:05:3a:1f:74:75:dd:2f:da:4c:7e:c9:f2:60:71:
77:37:28:5e:1b:82:e4:de:da:1e:b5:87:6e:d9:fd:
9a:af:0d:7d:6d:79:f3:44:12:9f:1e:93:0d:a8:e1:
69:e3:20:9f:d7:f3:e2:ee:69:fd:04:53:22:c8:be:
fc:d1:54:30:02:48:5d:56:f1:4c:34:bd:41:6f:c3:
66:af:87:8d:6b:39:ba:5b:1f:e7:5d:0e:b6:c5:6c:
6d:d7:cc:26:6f:52:7f:ed:1c:17:3f:af:f3:aa:c8:
d9:10:51:8a:55:68:d2:3b:f7:ea:51:fc:83:51:1a:
e0:fd:97:2f:a3:f4:86:73:1c:90:a6:7a:02:6a:bb:
df:2c:43:59:c9:34:08:a7:a3:8a:85:08:c5:8a:5e:
de:6e:c1:c3:e0:d5:0b:b7:5c:73:0f:d8:3a:fc:4e:
0e:f0:90:d3:e1:d5:73:23:0a:34:73:d4:21:b7:42:
4e:02:72:02:e8:9d:18:c2:4f:f8:9d:9e:ef:cf:af:
ff:b7:09:e7:b0:df:67:cd:cc:30:d4:1b:3c:8e:ae:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:50:AB:16:40:78:E6:CA:A3:2E:D4:43:DB:0E:4A:A9:AB:E4:1D
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/jkZQqxZAeObKoy7UQ9sOSqmr5B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
113.30.192.0/21
185.5.144.0/24
185.5.147.0/24
185.140.173.0/24
193.111.40.0/24
194.26.202.0/24
195.64.115.0/24
195.64.119.0/24
195.64.122.0/24
195.64.124.0/23
195.96.134.0/24
216.247.232.0/22
IPv6:
2a10:d505::/32
Signature Algorithm: sha256WithRSAEncryption
28:f7:1b:66:ce:46:c4:43:dd:3a:13:ff:3c:98:59:b8:a4:ed:
4c:b6:68:f3:de:1a:cf:2d:65:89:5c:e4:1a:38:8c:13:30:3a:
f3:50:de:8c:9f:bf:3d:15:68:c9:7c:2a:96:da:33:97:b6:84:
81:c4:6b:18:f8:7a:41:56:68:12:3b:a9:f9:6a:53:de:69:02:
9c:6e:a8:cb:76:a8:fe:4a:00:f0:a2:c3:7a:54:9a:75:c5:2b:
55:69:0b:68:1b:c9:f5:2f:8f:ba:11:35:84:ea:d2:d2:45:cf:
83:35:2b:fd:6a:96:45:8a:87:5d:01:73:6f:54:22:9a:a0:e2:
67:a3:82:ca:d0:64:24:d7:f3:13:bd:7f:7e:ac:a0:4e:67:20:
5f:a2:c1:4e:0d:b1:d2:30:88:b6:0a:ad:06:93:c6:ac:c1:62:
ba:5f:b5:99:79:24:bd:b0:07:55:f7:38:a2:76:c6:21:1e:88:
11:39:b3:d3:56:67:5a:3c:95:ca:db:c2:09:8c:5d:03:b5:88:
36:b9:dc:9f:0c:f9:58:22:80:50:a0:5d:ad:88:c3:53:26:ae:
94:34:25:c1:bd:f7:9d:00:e7:a0:82:b6:61:d4:2c:0c:04:29:
48:cd:35:5a:f3:59:7a:7e:c0:31:1b:ec:c3:07:ae:38:9a:79:
52:2b:88:69
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZaD5pvl+wAd53xr0r8YH/hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjUwNDI5MjMzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTQ2NTBhYjE2NDA3OGU2Y2FhMzJlZDQ0M2RiMGU0YWE5YWJlNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FACFH2BptRM0jBPM2VaEQaph+gd
6etIw3aWDPwEU4W+SRdB8Q04SWluXhDOBTofdHXdL9pMfsnyYHF3NyheG4Lk3toe
tYdu2f2arw19bXnzRBKfHpMNqOFp4yCf1/Pi7mn9BFMiyL780VQwAkhdVvFMNL1B
b8Nmr4eNazm6Wx/nXQ62xWxt18wmb1J/7RwXP6/zqsjZEFGKVWjSO/fqUfyDURrg
/Zcvo/SGcxyQpnoCarvfLENZyTQIp6OKhQjFil7ebsHD4NULt1xzD9g6/E4O8JDT
4dVzIwo0c9Qht0JOAnIC6J0Ywk/4nZ7vz6//twnnsN9nzcww1Bs8jq7IdQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFI5GUKsWQHjmyqMu1EPbDkqpq+QdMB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvamtaUXF4WkFlT2JLb3k3VVE5c09TcW1yNUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCBbdYAwQD
cR7AAwQAuQWQAwQAuQWTAwQAuYytAwQAwW8oAwQAwhrKAwQAw0BzAwQAw0B3AwQA
w0B6AwQBw0B8AwQAw2CGAwQC2PfoMA0EAgACMAcDBQAqENUFMA0GCSqGSIb3DQEB
CwUAA4IBAQAo9xtmzkbEQ906E/88mFm4pO1Mtmjz3hrPLWWJXOQaOIwTMDrzUN6M
n789FWjJfCqW2jOXtoSBxGsY+HpBVmgSO6n5alPeaQKcbqjLdqj+SgDwosN6VJp1
xStVaQtoG8n1L4+6ETWE6tLSRc+DNSv9apZFioddAXNvVCKaoOJno4LK0GQk1/MT
vX9+rKBOZyBfosFODbHSMIi2Cq0Gk8aswWK6X7WZeSS9sAdV9ziidsYhHogRObPT
VmdaPJXK28IJjF0DtYg2udyfDPlYIoBQoF2tiMNTJq6UNCXBvfedAOeggrZh1CwM
BClIzTVa81l6fsAxG+zDB644mnlSK4hp
-----END CERTIFICATE-----
Generated at Mon May 12 13:42:19 2025 by rpki-client