Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/KpUU2YgJEOuisPiEPVPNEVR-CtU.roa
File: KpUU2YgJEOuisPiEPVPNEVR-CtU.roa (raw, json)
Hash identifier: ZP8otPJlpb8p4oND6G6OVfRjhe8OKG74XzSugqT7u/M=
Subject key identifier: 2A:95:14:D9:88:09:10:EB:A2:B0:F8:84:3D:53:CD:11:54:7E:0A:D5
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019685BFEEB0DFB6F7E08F21FBFE772747C1
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/KpUU2YgJEOuisPiEPVPNEVR-CtU.roa
Signing time: Wed 30 Apr 2025 08:11:10 +0000
ROA not before: Wed 30 Apr 2025 08:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.16.0/24 maxlen: 24
62.104.20.0/23 maxlen: 24
62.104.20.0/24 maxlen: 24
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.95.0/24 maxlen: 24
62.104.96.0/21 maxlen: 22
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
89.58.120.0/21 maxlen: 21
194.97.0.0/18 maxlen: 18
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.101.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.103.0/24 maxlen: 24
194.97.118.0/24 maxlen: 24
194.97.119.0/24 maxlen: 24
194.97.120.0/23 maxlen: 23
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
195.4.0.0/17 maxlen: 17
195.4.16.0/22 maxlen: 22
195.4.16.0/24 maxlen: 24
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.176.0/21 maxlen: 24
195.4.176.0/24 maxlen: 24
195.4.178.0/23 maxlen: 23
195.4.216.0/21 maxlen: 21
195.4.224.0/19 maxlen: 19
2001:748::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 May 2025 13:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:bf:ee:b0:df:b6:f7:e0:8f:21:fb:fe:77:27:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Apr 30 08:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9514d9880910eba2b0f8843d53cd11547e0ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:9e:50:c7:7f:09:22:f1:de:57:91:b9:3c:
d2:41:93:3d:fb:bd:cd:09:bf:6f:3c:c9:f6:f5:30:
71:02:d3:41:5c:c8:2b:ac:5a:8f:2e:29:1e:18:5d:
34:6b:15:5a:da:fc:29:0a:46:28:64:8e:f5:38:1c:
fc:ec:be:73:6b:3e:4e:be:96:c4:35:a8:13:b5:2e:
75:42:27:79:6c:1a:03:72:67:d2:fa:ed:57:6a:bc:
5b:b5:21:65:0a:08:2f:3d:90:24:62:9a:ff:42:12:
96:31:0d:a7:64:8a:c3:3f:56:a7:03:bc:88:3f:0f:
ae:f3:6f:f7:48:56:ff:ac:67:f9:47:ed:87:f5:86:
f6:f9:69:73:97:09:e9:9c:04:e8:9f:7e:7b:3e:82:
98:b2:67:6a:e9:73:9c:16:9a:b2:38:d6:e2:d7:a6:
65:19:71:9a:1b:03:89:d9:f8:1e:65:b9:72:ec:ce:
85:67:0a:bf:ea:9f:39:c1:97:a6:2e:a6:a0:1c:a6:
bb:cf:26:e6:ae:86:20:78:27:bb:f6:d0:bd:b8:b2:
50:25:5c:2c:fd:2e:22:a7:7c:f0:fd:80:51:4c:d9:
0c:6e:7e:6b:f6:2a:71:56:3a:cc:d8:09:ea:1d:95:
01:b7:8d:53:40:af:7e:05:6f:e6:84:54:cc:dd:2b:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:14:D9:88:09:10:EB:A2:B0:F8:84:3D:53:CD:11:54:7E:0A:D5
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/KpUU2YgJEOuisPiEPVPNEVR-CtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.58.120.0/21
194.97.0.0/18
194.97.96.0/19
194.97.160.0/19
195.4.0.0/17
195.4.176.0/21
195.4.216.0-195.4.255.255
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
63:b8:96:21:7e:bc:14:70:04:d6:c5:20:9b:1c:82:2b:f0:37:
79:be:76:1f:70:25:a5:25:0b:17:30:a4:5a:0a:0c:11:0b:57:
14:a5:be:63:b0:ed:d7:27:27:1d:c4:30:50:18:37:74:6f:8c:
58:bd:04:7b:96:29:36:94:91:ee:96:4d:e4:f0:cf:5d:06:83:
e8:fc:29:80:c0:dd:2a:05:f5:0d:2b:be:fd:f7:6f:4d:c7:23:
4f:09:1b:3a:9c:80:e6:43:dc:f5:21:29:1c:ce:05:ce:61:94:
f2:2d:ff:8f:31:57:07:bb:bf:4b:b2:fc:37:74:63:30:ec:25:
22:c6:6a:41:24:6f:2b:97:a8:cc:b6:d1:cd:bf:58:58:7c:f5:
fb:d4:ab:03:d9:1a:7d:e5:61:60:d4:60:de:71:30:bb:68:73:
df:f2:6f:46:61:35:0f:0e:c5:b3:da:9e:25:61:70:09:0c:94:
0e:fb:93:7c:47:87:51:c5:ea:86:87:9a:65:10:21:d7:e0:24:
d0:a5:04:0a:9c:86:d6:76:aa:e2:d1:0f:94:d5:5e:a8:8a:7a:
8e:f5:35:7c:aa:8e:a2:60:b9:13:b7:19:bd:83:0c:09:43:87:
d8:c8:31:f9:10:29:ed:68:70:5d:b1:7d:17:02:6c:b8:8f:a1:
71:28:a4:1f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZaFv+6w37b34I8h+/53J0fBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4
OWU5NWIwHhcNMjUwNDMwMDgxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTk1MTRkOTg4MDkxMGViYTJiMGY4ODQzZDUzY2QxMTU0N2UwYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwKeUMd/CSLx3leRuTzSQZM9+73N
Cb9vPMn29TBxAtNBXMgrrFqPLikeGF00axVa2vwpCkYoZI71OBz87L5zaz5OvpbE
NagTtS51Qid5bBoDcmfS+u1XarxbtSFlCggvPZAkYpr/QhKWMQ2nZIrDP1anA7yI
Pw+u82/3SFb/rGf5R+2H9Yb2+WlzlwnpnATon357PoKYsmdq6XOcFpqyONbi16Zl
GXGaGwOJ2fgeZbly7M6FZwq/6p85wZemLqagHKa7zybmroYgeCe79tC9uLJQJVws
/S4ip3zw/YBRTNkMbn5r9ipxVjrM2AnqHZUBt41TQK9+BW/mhFTM3Su1bQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFCqVFNmICRDrorD4hD1TzRFUfgrVMB8GA1UdIwQY
MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt
NDAyMTI2NWMzOWIwLzEvS3BVVTJZZ0pFT3Vpc1BpRVBWUE5FVlItQ3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw
LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwMAPmgDBANZ
OngDBAbCYQADBAXCYWADBAXCYaADBAfDBAADBAPDBLAwCwMEA8ME2AMDAMMEMA0E
AgACMAcDBQAgAQdIMA0GCSqGSIb3DQEBCwUAA4IBAQBjuJYhfrwUcATWxSCbHIIr
8Dd5vnYfcCWlJQsXMKRaCgwRC1cUpb5jsO3XJycdxDBQGDd0b4xYvQR7lik2lJHu
lk3k8M9dBoPo/CmAwN0qBfUNK779929NxyNPCRs6nIDmQ9z1ISkczgXOYZTyLf+P
MVcHu79Lsvw3dGMw7CUixmpBJG8rl6jMttHNv1hYfPX71KsD2Rp95WFg1GDecTC7
aHPf8m9GYTUPDsWz2p4lYXAJDJQO+5N8R4dRxeqGh5plECHX4CTQpQQKnIbWdqri
0Q+U1V6oinqO9TV8qo6iYLkTtxm9gwwJQ4fYyDH5ECntaHBdsX0XAmy4j6FxKKQf
-----END CERTIFICATE-----
Generated at Wed May 7 20:31:39 2025 by rpki-client