Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_hESWbKEdep4Pm2TMtXzKP33Z1E.roa
File: _hESWbKEdep4Pm2TMtXzKP33Z1E.roa (raw, json)
Hash identifier: wmHkF+gbjk53vItroSyujiMd9M1y8SW9v92Vh9XW9wo=
Subject key identifier: FE:11:12:59:B2:84:75:EA:78:3E:6D:93:32:D5:F3:28:FD:F7:67:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196820E32218858775573C0E24822DDCADC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_hESWbKEdep4Pm2TMtXzKP33Z1E.roa
Signing time: Tue 29 Apr 2025 14:58:10 +0000
ROA not before: Tue 29 Apr 2025 14:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.229.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 30 Apr 2025 10:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:0e:32:21:88:58:77:55:73:c0:e2:48:22:dd:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 29 14:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe111259b28475ea783e6d9332d5f328fdf76751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:3d:a9:a5:b6:fe:23:13:57:a7:c4:79:60:
9f:99:af:a1:33:14:e5:56:45:e1:33:8e:73:1e:0f:
ce:00:38:b8:81:83:40:09:0a:28:05:79:89:41:14:
8c:5a:3c:fb:bf:0d:b3:e2:66:96:87:3b:de:be:68:
87:2d:87:a9:ea:b2:ab:3a:f5:c9:a6:84:23:5e:91:
74:64:2d:2e:e5:94:b7:ab:14:c4:bc:ca:fc:c0:38:
ec:bb:4d:7a:5b:55:09:1e:7f:2f:9d:e3:ad:ee:ec:
00:47:15:f0:42:80:73:f9:f8:42:5b:d5:cc:a0:f0:
01:a0:c9:82:f6:15:f7:c6:4b:33:bc:6f:33:a9:67:
73:95:92:72:cb:ef:38:18:9b:57:3d:23:4d:4a:45:
06:a6:ee:b2:25:f2:af:c0:66:ab:60:6a:91:63:c5:
de:61:7c:3c:9f:5a:da:db:31:f8:76:30:f4:7e:7c:
2e:7c:fd:63:ba:43:32:b6:78:b9:29:00:fa:71:06:
db:bb:b3:e3:d3:17:c3:d7:e8:9d:2b:a7:9e:05:e6:
2b:92:5a:27:b1:20:13:ba:cc:b9:19:39:bd:e9:1b:
56:34:b8:e9:d9:94:7c:90:37:94:e2:fa:30:36:62:
54:37:15:47:82:9e:30:e3:c8:51:74:95:a5:f2:d7:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:12:59:B2:84:75:EA:78:3E:6D:93:32:D5:F3:28:FD:F7:67:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_hESWbKEdep4Pm2TMtXzKP33Z1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
193.124.7.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.119.0/24
194.87.126.0/24
194.87.169.0/24
194.87.179.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.241.0/24
212.193.8.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:2f:73:6f:c1:96:7d:c3:eb:70:55:a8:0a:d6:f3:d2:c7:68:
16:3b:03:82:68:39:31:0f:64:c7:2a:41:96:2a:b2:94:7f:c1:
4b:2f:c4:73:96:fd:a5:64:7f:bf:c6:58:b9:31:98:17:96:2e:
35:27:52:95:f0:51:1c:a0:1b:11:8d:ea:06:ee:57:33:73:1a:
47:39:7a:57:ab:09:83:c5:c3:f7:65:e8:7e:41:59:ce:25:63:
cd:e7:89:10:93:9f:47:be:20:04:cf:1f:d2:c9:3f:88:23:b1:
02:17:0b:57:c0:bf:71:23:7e:99:9d:bc:15:b8:69:4c:6f:78:
e6:46:ff:30:5e:ab:2a:71:d9:25:a1:1f:39:5d:81:1a:9d:40:
9e:43:c8:d1:4f:10:60:ce:5c:d7:1b:57:98:e4:8b:51:14:b4:
4f:ac:42:a7:33:d6:68:55:f3:aa:c6:50:df:6e:0e:38:9e:f4:
ae:a1:43:21:99:cf:27:74:55:f1:05:e4:9b:96:c1:c9:c2:f4:
03:98:1e:df:68:41:fa:9a:c3:b2:b8:54:31:1c:ca:9e:16:52:
c1:54:a1:1f:4c:8a:4d:53:eb:ab:40:64:aa:77:89:a2:8b:04:
2d:fa:e1:42:90:ec:8d:ed:d3:fb:5f:f4:e7:8e:49:9c:b5:97:
ae:db:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:29 2025 by rpki-client