Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J3hNtXVcFLizQNIeR47wEOSjYhc.roa
File: J3hNtXVcFLizQNIeR47wEOSjYhc.roa (raw, json)
Hash identifier: y+H3qhAMOkKlb4dGIrOQrgYG2JrVufFX0Qdip4RDBuA=
Subject key identifier: 27:78:4D:B5:75:5C:14:B8:B3:40:D2:1E:47:8E:F0:10:E4:A3:62:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01961CAB53643C57F6C53C9FB1E232607383
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J3hNtXVcFLizQNIeR47wEOSjYhc.roa
Signing time: Wed 09 Apr 2025 22:28:32 +0000
ROA not before: Wed 09 Apr 2025 22:28:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 193.124.35.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.66.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 12:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1c:ab:53:64:3c:57:f6:c5:3c:9f:b1:e2:32:60:73:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 9 22:28:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27784db5755c14b8b340d21e478ef010e4a36217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:18:ac:88:e2:34:fc:ef:ab:44:5a:11:55:
06:99:bd:0c:98:58:41:2d:72:f8:61:5f:3c:e1:a1:
6b:9f:7a:64:c6:12:73:c9:0b:02:1f:94:69:e8:5f:
0a:34:f7:65:21:bd:94:0d:c6:5d:d5:48:52:c6:73:
9e:ba:5e:e2:37:05:b6:b0:8e:36:04:17:bd:c8:63:
4d:4e:b2:ea:6b:fb:e3:c2:c2:f2:2f:f8:78:55:09:
7a:0a:2c:e8:72:b8:88:ef:6c:58:8d:b2:0d:2c:a1:
36:6f:54:35:26:05:27:be:77:6e:e5:84:e4:29:b6:
e0:fb:c5:89:0a:9c:eb:55:ff:2d:a8:5d:8b:7a:b6:
fe:b3:e5:63:79:5f:bd:41:cb:b3:11:07:24:20:3f:
78:79:d3:dc:45:c5:dd:a2:11:3b:50:c9:b7:00:06:
88:35:47:dc:4b:b2:4c:87:6c:55:cc:35:a6:ae:fe:
73:71:9a:1a:b4:6b:f3:a4:76:9a:db:f4:38:27:ca:
7f:01:04:9a:4f:b6:bf:ab:38:be:7e:a3:31:c6:84:
95:e9:ef:d6:55:0c:60:3d:32:ac:0d:f2:22:9e:78:
2d:4e:a6:ea:ef:b5:bc:2a:50:04:7d:ab:79:c3:4a:
21:6f:47:71:c6:9c:2c:a9:4b:e3:23:40:66:8e:32:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:4D:B5:75:5C:14:B8:B3:40:D2:1E:47:8E:F0:10:E4:A3:62:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J3hNtXVcFLizQNIeR47wEOSjYhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.35.0/24
194.58.57.0/24
194.87.26.0/24
194.87.44.0/24
194.87.49.0/24
194.87.83.0/24
194.87.115.0/24
194.87.130.0/24
194.87.134.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.220.0-194.87.222.255
194.87.243.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.133.14.0/23
195.133.20.0/23
195.133.24.0/24
195.133.40.0/23
195.133.63.0/24
195.133.66.0/24
195.133.76.0/23
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2a:73:e4:65:4a:c3:b5:c2:f7:35:8b:69:dc:f8:aa:87:87:
b9:98:a9:86:b1:1a:da:f4:38:ef:d7:99:d3:c6:fd:2e:35:36:
88:36:2b:44:40:d1:87:6c:25:60:c6:47:58:58:20:de:9f:46:
53:5b:2a:0f:ba:c4:e0:c2:38:09:fa:91:22:af:7b:09:34:75:
11:46:aa:ba:ed:a7:8d:c5:67:19:c0:89:87:73:a4:95:d3:38:
ff:3d:3e:3f:1b:82:73:f8:54:34:eb:e2:7f:85:b2:88:e0:72:
a9:a2:98:b4:ef:d9:d6:17:cd:db:48:b1:ad:62:68:d2:7b:cb:
e7:f6:4a:19:c8:12:96:fa:3c:76:65:c0:19:f4:9c:9a:45:7c:
89:ac:9e:a0:4b:58:b6:a4:a3:dc:dd:7f:40:85:41:1f:9b:48:
0d:c3:24:48:19:89:21:e3:9e:df:dd:7d:08:08:bf:cb:01:ff:
82:eb:06:26:ba:fc:c3:6a:51:7f:65:2b:21:f8:7d:ee:14:53:
af:ae:f6:ca:bc:aa:22:44:ea:05:bb:06:82:a3:97:ab:bc:10:
34:73:c9:d4:4d:66:cb:55:46:87:8e:a5:59:64:a2:42:95:d6:
e1:68:c4:9c:55:23:62:09:99:21:42:1d:63:e0:35:45:1f:62:
23:58:83:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:07:30 2025 by rpki-client