Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aN_bBKKG4La-eXAHVD0dEiXPWtM.roa
File: aN_bBKKG4La-eXAHVD0dEiXPWtM.roa (raw, json)
Hash identifier: pcuT99KSaFOIX8ExV/UClx6EvFsh9ju6etofAyicSg4=
Subject key identifier: 68:DF:DB:04:A2:86:E0:B6:BE:79:70:07:54:3D:1D:12:25:CF:5A:D3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01976760AB0571431B094BBE51B227E8ABBA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aN_bBKKG4La-eXAHVD0dEiXPWtM.roa
Signing time: Fri 13 Jun 2025 03:41:17 +0000
ROA not before: Fri 13 Jun 2025 03:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/22 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.120.13.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.144.102.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sun 15 Jun 2025 01:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:60:ab:05:71:43:1b:09:4b:be:51:b2:27:e8:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 13 03:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68dfdb04a286e0b6be797007543d1d1225cf5ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:f6:7f:5e:b3:c1:7a:cc:c2:1d:10:67:d6:
d9:cc:ad:15:67:b8:00:8c:e2:6a:0c:b9:e6:9f:55:
be:c5:6c:92:cb:55:27:de:9a:5e:c5:82:77:ec:92:
d3:41:dc:99:2f:e8:02:d2:09:73:d8:08:25:46:92:
68:de:3e:19:74:b1:be:96:b0:97:0f:35:c1:e2:cf:
70:c4:f7:21:c2:31:85:c0:c1:63:9c:82:88:3a:7a:
9d:92:fc:22:c7:1b:21:0b:9a:ee:18:89:af:3e:84:
b0:18:db:ac:be:b8:80:00:bc:7e:3a:05:74:f5:40:
f3:99:e8:7d:8f:09:de:84:fd:d6:21:00:56:71:24:
c3:15:ab:a2:d8:34:b6:74:ec:48:c5:a4:cd:30:a3:
f8:66:5d:35:df:24:c4:60:38:5a:59:5e:fe:ad:fc:
b9:35:59:08:3b:c6:9b:db:60:14:ed:9f:f5:f5:64:
4e:aa:ef:67:ac:1b:b8:a0:2d:9d:5c:28:8e:17:3f:
bc:64:2b:f7:a6:20:a1:bd:27:3e:02:c6:92:a7:df:
53:70:ca:f8:c2:2d:57:8e:d0:c6:b4:07:73:99:7f:
b4:2a:0c:f2:1a:5e:eb:ab:c0:f1:8f:2b:1b:c1:ad:
48:ce:90:f6:c1:3d:70:49:4e:f6:4e:af:5e:1c:07:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:DB:04:A2:86:E0:B6:BE:79:70:07:54:3D:1D:12:25:CF:5A:D3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aN_bBKKG4La-eXAHVD0dEiXPWtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.20.0/22
185.120.13.0/24
185.144.100.0/24
185.144.102.0/24
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.100.0/22
194.124.64.0/22
195.85.68.0-195.85.70.255
Signature Algorithm: sha256WithRSAEncryption
54:83:4a:84:b4:f5:78:75:1e:7f:15:8a:0a:1d:00:51:e8:3f:
52:a7:d2:01:2f:89:90:76:5d:cd:6a:8d:02:7f:cd:ee:38:23:
9e:93:d4:39:dd:a6:05:c8:7e:8b:ba:2c:b2:df:51:82:fd:eb:
db:a7:d4:60:cf:2d:78:e6:76:ac:69:f2:7c:da:de:9b:01:4f:
93:6e:75:b0:40:e4:e6:5f:51:73:6c:20:b8:5d:20:76:99:37:
0f:43:06:45:61:ee:06:cb:fd:4c:15:e3:c4:1d:2c:03:51:52:
a5:68:83:df:d5:39:cc:62:04:c0:53:7c:2d:a9:1a:8f:c7:be:
fc:68:4d:ad:61:4b:fc:c1:f6:73:62:62:3a:77:b7:ee:b9:f2:
9f:72:0d:b0:19:1c:21:fe:63:89:00:47:e5:98:20:ce:a3:0b:
d2:1e:4e:ff:69:82:48:d3:f6:47:94:9a:7c:ad:16:59:bd:1b:
a3:42:a5:71:8f:17:5b:d1:00:2e:ce:4e:7c:c3:1d:ba:28:a0:
3f:7d:bb:21:8b:fb:04:af:85:a1:5c:86:7f:3a:31:8e:b9:2d:
b0:16:2c:15:dd:51:0e:5d:69:6d:c5:79:c5:3f:7d:f8:ea:b3:
2f:ed:0e:c2:06:87:9b:9c:0d:4c:53:30:a0:e7:ff:0b:72:66:
50:ae:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:39:45 2025 by rpki-client