Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/abq6FcoZd95EHP_F80_aV60tnjg.roa
File: abq6FcoZd95EHP_F80_aV60tnjg.roa (raw, json)
Hash identifier: UPxs31ncxSa6rMVclKuCSPs2JyGQoVOfPeIrKwDDXbE=
Subject key identifier: 69:BA:BA:15:CA:19:77:DE:44:1C:FF:C5:F3:4F:DA:57:AD:2D:9E:38
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019812C75F6F4F3E66FE7FB42AA3C42B29B0
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/abq6FcoZd95EHP_F80_aV60tnjg.roa
Signing time: Wed 16 Jul 2025 10:28:32 +0000
ROA not before: Wed 16 Jul 2025 10:28:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.0.0/24 maxlen: 24
138.124.1.0/24 maxlen: 24
138.124.5.0/24 maxlen: 24
138.124.6.0/24 maxlen: 24
138.124.7.0/24 maxlen: 24
138.124.8.0/24 maxlen: 24
138.124.9.0/24 maxlen: 24
138.124.11.0/24 maxlen: 24
138.124.12.0/24 maxlen: 24
138.124.17.0/24 maxlen: 24
138.124.28.0/24 maxlen: 24
138.124.32.0/24 maxlen: 24
138.124.33.0/24 maxlen: 24
138.124.36.0/24 maxlen: 24
138.124.37.0/24 maxlen: 24
138.124.38.0/24 maxlen: 24
138.124.39.0/24 maxlen: 24
138.124.40.0/24 maxlen: 24
138.124.41.0/24 maxlen: 24
138.124.42.0/24 maxlen: 24
138.124.43.0/24 maxlen: 24
138.124.44.0/24 maxlen: 24
138.124.45.0/24 maxlen: 24
138.124.46.0/24 maxlen: 24
138.124.47.0/24 maxlen: 24
138.124.48.0/24 maxlen: 24
138.124.56.0/24 maxlen: 24
138.124.57.0/24 maxlen: 24
138.124.62.0/24 maxlen: 24
138.124.63.0/24 maxlen: 24
138.124.64.0/24 maxlen: 24
138.124.65.0/24 maxlen: 24
138.124.66.0/24 maxlen: 24
138.124.67.0/24 maxlen: 24
138.124.68.0/24 maxlen: 24
138.124.69.0/24 maxlen: 24
138.124.70.0/24 maxlen: 24
138.124.71.0/24 maxlen: 24
138.124.72.0/24 maxlen: 24
138.124.82.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.84.0/24 maxlen: 24
138.124.85.0/24 maxlen: 24
138.124.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 12:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:c7:5f:6f:4f:3e:66:fe:7f:b4:2a:a3:c4:2b:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 16 10:28:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69baba15ca1977de441cffc5f34fda57ad2d9e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:b6:e7:5e:e6:88:89:1b:03:e5:1c:68:5b:
b1:c5:29:de:24:a1:7c:68:67:93:bc:f2:bf:e0:51:
b0:62:72:92:0b:b7:83:7d:b5:c9:ab:c8:28:1e:30:
ad:de:e0:3b:2b:cc:3b:bc:e1:96:74:3e:db:5e:5a:
0f:ba:45:31:9e:ee:4e:4f:f5:7d:1c:5f:f6:8b:08:
fe:09:07:24:a0:eb:e7:d2:35:d5:c2:e8:c4:59:d5:
0a:c2:31:f0:51:7d:18:cb:1e:94:d6:7b:2c:ec:41:
5a:53:0c:15:36:b5:b4:f5:d2:4a:28:b6:d4:4e:aa:
fb:46:19:a3:49:c5:d6:4d:93:49:70:b4:87:a5:04:
e6:6c:44:19:71:39:45:96:cf:25:53:e0:de:2d:4a:
a7:45:a9:02:da:2d:da:c0:0f:47:dc:b5:be:ae:c1:
bc:d8:dd:ba:aa:27:90:bf:ab:1c:69:3f:a8:0e:52:
4d:a4:a0:96:26:81:b7:00:a4:5b:e8:1f:b9:f3:1c:
26:39:41:f6:cc:84:fa:90:aa:26:c9:f7:2b:50:3a:
ca:92:3c:81:2e:c8:02:bc:85:81:3e:ba:55:4b:6a:
e0:b4:e8:9e:3f:c7:ac:b0:8c:33:f6:b1:87:9d:d9:
47:f6:75:7c:d6:04:89:84:d6:66:05:d2:6e:55:33:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:BA:15:CA:19:77:DE:44:1C:FF:C5:F3:4F:DA:57:AD:2D:9E:38
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/abq6FcoZd95EHP_F80_aV60tnjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/23
138.124.5.0-138.124.9.255
138.124.11.0-138.124.12.255
138.124.17.0/24
138.124.28.0/24
138.124.32.0/23
138.124.36.0-138.124.48.255
138.124.56.0/23
138.124.62.0-138.124.72.255
138.124.82.0-138.124.85.255
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4d:9b:e4:2d:ff:96:e8:d2:d8:0c:fa:0e:61:d2:e5:3a:1e:
ea:b9:60:91:43:46:20:2b:81:13:9a:a3:e6:b2:a3:5e:4e:7c:
55:45:7f:e5:45:05:2e:5a:22:e3:8b:ee:a4:d7:84:8d:e6:98:
b5:08:79:aa:a5:2c:06:51:82:e5:9e:13:34:5c:28:ee:44:5e:
0f:46:92:cd:d0:43:f6:e8:bf:4a:dc:fb:52:98:74:cf:47:ef:
69:15:90:c9:c0:ba:9c:7f:c0:b2:5c:c3:5c:ea:10:d2:a5:7b:
51:78:b0:f2:9e:ee:75:8b:4e:5f:d5:17:9c:e8:53:f6:1a:65:
d0:9c:01:5c:33:5d:55:55:92:a1:d9:5a:8a:5f:33:4d:d1:6e:
d4:aa:d8:71:68:39:0e:e6:da:8a:ff:16:89:a4:f9:cc:57:15:
b8:e5:f1:4e:3d:dd:fd:1b:19:9c:cb:24:7d:28:2a:2e:d6:2f:
39:17:c7:4e:a3:4d:05:fd:36:51:9f:40:7f:84:7c:e8:fe:8a:
f1:2d:f3:63:62:5e:28:c0:88:44:29:de:88:8b:0a:92:54:25:
a9:bf:4c:93:f9:8f:d5:21:f6:93:7b:27:64:3c:5e:39:c4:96:
23:c3:91:fb:0d:b5:3b:37:9e:3b:9f:ba:92:db:0c:7d:14:c4:
99:3f:8c:65
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZgSx19vTz5m/n+0KqPEKymwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjUwNzE2MTAyODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWJhYmExNWNhMTk3N2RlNDQxY2ZmYzVmMzRmZGE1N2FkMmQ5ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJu2517miIkbA+UcaFuxxSneJKF8
aGeTvPK/4FGwYnKSC7eDfbXJq8goHjCt3uA7K8w7vOGWdD7bXloPukUxnu5OT/V9
HF/2iwj+CQckoOvn0jXVwujEWdUKwjHwUX0Yyx6U1nss7EFaUwwVNrW09dJKKLbU
Tqr7RhmjScXWTZNJcLSHpQTmbEQZcTlFls8lU+DeLUqnRakC2i3awA9H3LW+rsG8
2N26qieQv6scaT+oDlJNpKCWJoG3AKRb6B+58xwmOUH2zIT6kKomyfcrUDrKkjyB
LsgCvIWBPrpVS2rgtOieP8essIwz9rGHndlH9nV81gSJhNZmBdJuVTPPbwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFGm6uhXKGXfeRBz/xfNP2letLZ44MB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvYWJxNkZjb1pkOTVFSFBfRjgwX2FWNjB0bmpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAYp8ADAM
AwQAinwFAwQBinwIMAwDBACKfAsDBACKfAwDBACKfBEDBACKfBwDBAGKfCAwDAME
Aop8JAMEAIp8MAMEAYp8ODAMAwQBinw+AwQAinxIMAwDBAGKfFIDBAGKfFQDBACK
fH4wDQYJKoZIhvcNAQELBQADggEBABVNm+Qt/5bo0tgM+g5h0uU6Huq5YJFDRiAr
gROao+ayo15OfFVFf+VFBS5aIuOL7qTXhI3mmLUIeaqlLAZRguWeEzRcKO5EXg9G
ks3QQ/bov0rc+1KYdM9H72kVkMnAupx/wLJcw1zqENKle1F4sPKe7nWLTl/VF5zo
U/YaZdCcAVwzXVVVkqHZWopfM03RbtSq2HFoOQ7m2or/Fomk+cxXFbjl8U493f0b
GZzLJH0oKi7WLzkXx06jTQX9NlGfQH+EfOj+ivEt82NiXijAiEQp3oiLCpJUJam/
TJP5j9Uh9pN7J2Q8XjnEliPDkfsNtTs3njufupLbDH0UxJk/jGU=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:28 2025 by rpki-client