Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nPvwp-y1w5oY2rZ0AAFxWpC9q-s.roa
File: nPvwp-y1w5oY2rZ0AAFxWpC9q-s.roa (raw, json)
Hash identifier: /HZ0BM8DtbB/n2iiKOo2m7VVCtvbm8GqKh6oltl+c7Y=
Subject key identifier: 9C:FB:F0:A7:EC:B5:C3:9A:18:DA:B6:74:00:01:71:5A:90:BD:AB:EB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196F2A8D2BDA7B486F189DCAB45A7F946E7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nPvwp-y1w5oY2rZ0AAFxWpC9q-s.roa
Signing time: Wed 21 May 2025 11:44:32 +0000
ROA not before: Wed 21 May 2025 11:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.225.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.158.0/24 maxlen: 24
193.124.159.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.3.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
195.133.200.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 21 May 2025 14:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:a8:d2:bd:a7:b4:86:f1:89:dc:ab:45:a7:f9:46:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 21 11:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cfbf0a7ecb5c39a18dab6740001715a90bdabeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:ff:99:a8:8c:57:4d:1a:15:27:a3:32:70:
cc:82:10:ea:0d:01:d7:3d:d1:eb:60:8e:98:1c:cf:
bc:00:49:b6:10:90:3b:99:a4:b6:31:fa:52:a3:cf:
23:4e:d0:38:92:d0:e2:39:a3:c7:ce:6d:7c:31:8a:
59:2f:ff:42:f0:16:bb:06:a9:ac:67:81:54:c2:04:
33:89:fd:ce:f9:44:ca:9f:b2:84:38:49:91:aa:5a:
d6:0d:ae:96:a6:62:f1:eb:4e:b5:d0:a2:b1:e7:db:
03:7f:ba:92:b9:1d:d5:07:c9:1c:68:05:8a:1b:fb:
49:95:22:64:f6:97:25:6c:35:8b:cd:a4:80:76:dc:
26:82:8b:94:64:49:18:57:51:74:9b:e3:37:2c:73:
a6:b5:07:2d:3f:55:35:cf:1a:bf:63:01:4a:92:85:
d3:53:1c:7d:46:77:e9:77:2c:88:7b:c4:47:ec:7d:
70:92:a2:44:90:f8:d1:f8:6f:b9:1b:4f:6b:d9:c1:
07:27:cc:c4:80:01:ef:09:7b:b5:04:25:83:c0:2e:
67:d7:8f:b9:60:83:21:68:cc:b2:33:00:16:1e:26:
aa:d5:d3:33:49:c1:24:72:c7:83:a2:31:97:45:77:
70:7a:69:a0:c4:de:c7:8f:77:9f:6e:91:91:a8:6a:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:F0:A7:EC:B5:C3:9A:18:DA:B6:74:00:01:71:5A:90:BD:AB:EB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nPvwp-y1w5oY2rZ0AAFxWpC9q-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
193.124.7.0/24
193.124.158.0/23
194.58.155.0/24
194.87.53.0/24
194.87.119.0/24
194.87.169.0/24
194.87.179.0/24
195.133.3.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
195.133.200.0/24
212.192.241.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
95:c6:f6:4d:dd:dd:f7:19:3b:9e:a4:31:39:dd:10:4f:83:4c:
ac:54:8d:3b:ca:df:9d:30:64:a5:a8:09:ef:a1:9d:4c:b0:44:
ba:be:5a:a0:e3:f6:d6:29:fc:ad:1b:27:46:f4:9e:de:c0:54:
33:b6:2a:5f:ce:03:36:95:7d:08:47:5f:66:60:d1:6e:d2:42:
ed:86:48:fb:ac:bb:a5:ee:0c:0e:e6:10:d9:4f:23:bd:8a:7b:
1a:04:d4:ac:89:e9:30:b3:1b:9f:6b:1f:70:aa:e5:ed:fd:2d:
d7:ee:59:cf:4a:1f:55:1b:a1:34:0d:59:5c:9c:7e:41:04:e0:
22:78:c9:92:67:c1:3c:71:d8:28:e2:47:e5:7b:4f:98:1e:df:
be:2d:a8:fa:0a:fb:db:08:be:c6:23:5d:85:c8:39:d9:4a:3a:
da:d6:02:64:3d:d2:80:9c:de:ad:38:fb:a7:97:4e:60:af:66:
6a:2f:29:a8:9b:04:36:7a:d2:f4:25:bb:29:17:09:68:97:5e:
ec:ef:f6:a9:aa:60:81:ee:e4:b8:e0:86:2d:20:60:8d:8d:e1:
d9:3b:84:72:e5:5c:4f:24:31:4c:cd:fc:2a:15:5f:77:fc:92:
a1:c1:8f:b1:0e:9a:07:ef:6f:24:d0:76:0c:e4:2c:67:6d:d3:
9f:94:80:63
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZbyqNK9p7SG8Yncq0Wn+UbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNTIxMTE0NDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2ZiZjBhN2VjYjVjMzlhMThkYWI2NzQwMDAxNzE1YTkwYmRhYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjn/maiMV00aFSejMnDMghDqDQHX
PdHrYI6YHM+8AEm2EJA7maS2MfpSo88jTtA4ktDiOaPHzm18MYpZL/9C8Ba7Bqms
Z4FUwgQzif3O+UTKn7KEOEmRqlrWDa6WpmLx60610KKx59sDf7qSuR3VB8kcaAWK
G/tJlSJk9pclbDWLzaSAdtwmgouUZEkYV1F0m+M3LHOmtQctP1U1zxq/YwFKkoXT
Uxx9RnfpdyyIe8RH7H1wkqJEkPjR+G+5G09r2cEHJ8zEgAHvCXu1BCWDwC5n14+5
YIMhaMyyMwAWHiaq1dMzScEkcseDojGXRXdwemmgxN7Hj3efbpGRqGp4eQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFJz78KfstcOaGNq2dAABcVqQvavrMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvblB2d3AteTF3NW9ZMnJaMEFBRnhXcEM5cS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijByBAIAATBsAwQAPkzh
AwQAwXwHAwQBwXyeAwQAwjqbAwQAwlc1AwQAwld3AwQAwlepAwQAwlezAwQAw4UD
AwQBw4UYAwQAw4UdAwQBw4UoAwQBw4UyAwQBw4VcAwQAw4XIAwQA1MDxAwQA1MEA
AwQB1MEaMBQEAgACMA4DBQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEA
lcb2Td3d9xk7nqQxOd0QT4NMrFSNO8rfnTBkpagJ76GdTLBEur5aoOP21in8rRsn
RvSe3sBUM7YqX84DNpV9CEdfZmDRbtJC7YZI+6y7pe4MDuYQ2U8jvYp7GgTUrInp
MLMbn2sfcKrl7f0t1+5Zz0ofVRuhNA1ZXJx+QQTgInjJkmfBPHHYKOJH5XtPmB7f
vi2o+gr72wi+xiNdhcg52Uo62tYCZD3SgJzerTj7p5dOYK9mai8pqJsENnrS9CW7
KRcJaJde7O/2qapgge7kuOCGLSBgjY3h2TuEcuVcTyQxTM38KhVfd/ySocGPsQ6a
B+9vJNB2DOQsZ23Tn5SAYw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:19:18 2025 by rpki-client