Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ju5k77wshUF9ru2joUm7_9OcdAI.roa
File: Ju5k77wshUF9ru2joUm7_9OcdAI.roa (raw, json)
Hash identifier: Sjv4ZkWgOUm8i0lrb0xJ5RABgYyx5leppV9RkPIRDBQ=
Subject key identifier: 26:EE:64:EF:BC:2C:85:41:7D:AE:ED:A3:A1:49:BB:FF:D3:9C:74:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196A9C6F64839108AD111DBE2DEBF4D5EA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ju5k77wshUF9ru2joUm7_9OcdAI.roa
Signing time: Wed 07 May 2025 08:05:10 +0000
ROA not before: Wed 07 May 2025 08:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.31.192.0/22 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
176.125.254.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c6:f6:48:39:10:8a:d1:11:db:e2:de:bf:4d:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 08:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ee64efbc2c85417daeeda3a149bbffd39c7402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:15:b5:30:93:3f:ff:62:67:09:4a:1e:a5:
3c:87:48:3d:ef:4d:24:1e:df:e4:3a:32:a5:01:8a:
51:83:b3:ca:6f:b2:80:c9:03:ad:b4:2a:b6:3c:51:
03:04:6b:aa:b2:19:74:17:fe:6a:e7:04:f6:22:fa:
1c:f5:68:f8:6a:57:ab:d4:1c:2d:2f:07:ce:05:87:
a1:a2:8c:84:75:fb:45:8e:d3:ef:4d:2f:50:e9:53:
06:f1:78:6d:8f:dc:4d:e1:b1:07:76:eb:94:25:ab:
a0:15:d7:89:70:f0:e4:f0:5e:58:da:9f:c1:e9:f4:
57:ea:0d:8a:05:f1:9b:7b:66:45:ff:1e:fb:55:e1:
92:e5:e7:c8:40:0e:47:c1:79:b7:58:4b:6a:26:e6:
9b:30:d0:80:11:48:a5:28:2e:2e:45:33:56:90:49:
f2:87:d3:ed:e7:e7:b0:40:b5:eb:13:5e:ab:8c:c4:
4d:91:99:39:71:29:f9:da:ca:f5:f0:05:d1:77:a9:
39:a9:82:06:11:3f:87:34:e9:f3:94:3e:7c:24:6a:
ce:ab:46:c5:98:01:1d:1e:49:44:70:87:a2:70:40:
ca:5d:51:1d:57:a1:11:ac:d6:03:d3:92:6d:ce:2f:
5b:d7:c4:58:f2:d9:11:9a:33:ca:ad:ee:31:b6:83:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:64:EF:BC:2C:85:41:7D:AE:ED:A3:A1:49:BB:FF:D3:9C:74:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ju5k77wshUF9ru2joUm7_9OcdAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.31.192.0/22
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/23
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
176.125.254.0/24
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
193.222.98.0/24
194.55.186.0/24
194.169.175.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f7:26:12:fe:62:c3:27:e7:c6:90:ab:48:9e:03:ad:5a:ea:
80:0b:12:3d:84:7f:e7:16:2b:52:f2:4d:e2:0a:dc:95:1d:c4:
ed:78:a4:36:f4:40:80:dc:9c:64:6c:26:b9:1c:dd:bf:c4:de:
45:fc:5b:af:1c:89:89:08:87:dc:db:3b:28:dc:59:c3:6f:e1:
81:ab:c0:d3:7d:52:b2:e0:0a:14:6d:a1:f4:77:af:e5:00:78:
29:43:ab:95:bb:02:f5:45:a3:66:e9:06:80:57:60:90:1f:f8:
8e:07:20:90:24:08:d2:bf:be:fd:93:85:20:aa:66:3e:ff:36:
9d:d1:17:19:57:f0:de:07:fe:2b:eb:a3:8d:a1:4a:1b:ba:64:
77:53:ab:6f:78:7c:5e:b0:91:28:0c:cd:01:d0:15:dd:bc:12:
6a:44:eb:86:e9:47:ee:bf:72:85:86:d4:e0:87:52:a5:6a:da:
cf:25:1b:36:be:10:b2:8e:ed:66:a7:41:e6:7a:00:9d:50:b2:
57:a0:23:e9:18:ac:d0:3f:b5:5d:61:bb:b5:22:4e:06:d3:11:
e1:46:92:70:ee:1b:c0:8d:d0:17:6e:e4:a1:0a:9a:0d:f7:bc:
03:9e:bd:1c:b6:4d:2c:5d:21:da:ad:a1:4f:16:87:32:ef:87:
b6:49:fe:a3
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAZapxvZIORCK0RHb4t6/TV6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNTA3MDgwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmVlNjRlZmJjMmM4NTQxN2RhZWVkYTNhMTQ5YmJmZmQzOWM3NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyoVtTCTP/9iZwlKHqU8h0g9700k
Ht/kOjKlAYpRg7PKb7KAyQOttCq2PFEDBGuqshl0F/5q5wT2Ivoc9Wj4aler1Bwt
LwfOBYehooyEdftFjtPvTS9Q6VMG8Xhtj9xN4bEHduuUJaugFdeJcPDk8F5Y2p/B
6fRX6g2KBfGbe2ZF/x77VeGS5efIQA5HwXm3WEtqJuabMNCAEUilKC4uRTNWkEny
h9Pt5+ewQLXrE16rjMRNkZk5cSn52sr18AXRd6k5qYIGET+HNOnzlD58JGrOq0bF
mAEdHklEcIeicEDKXVEdV6ERrNYD05Jtzi9b18RY8tkRmjPKre4xtoOr6wIDAQAB
o4IDcTCCA20wHQYDVR0OBBYEFCbuZO+8LIVBfa7to6FJu//TnHQCMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSnU1azc3d3NoVUY5cnUyam9VbTdfOU9jZEFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhQYIKwYBBQUHAQcBAf8EggF0MIIBcDCCAWwEAgABMIIB
ZAMEAAI7/QMEAgX8hAMEAB8N0wMEAC0JnQMEAC0M/QMEAC1C5AMEAC1C5wMEAC1R
JwMEAC1YQAMEAC1Z9wMEAC1aWQMEAC2LagMEAS2NngMEAC2XWgMEAE9uMgMEAlEf
wAMEAFGh7gMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4WQMEAVd4fgMEAFd4pgMEAFd5
FgMEAFd5JgMEAFd5LQMEAFd5VwMEAVd5fAMEAFd5pQMEAFtcRgMEAVx3xAMEAFz5
MgMEAF17LQMEAF17LwMEAF17VQMEAF17bQMEAF17dQMEAF17dwMEAF5nfQMEAl6a
oAMEA16cQAMEAF6caQMEAF6cpwMEAF6c6AMEAF6c7wMEAI1iAQMEAI1iBjAMAwQA
qxZJAwQCqxZIAwQAsH3+AwQAstfjAwQCudhUAwQAwRnYAwQAwSMSAwQAwd5gAwQA
wd5iAwQAwje6AwQAwqmvAwQA1HMpMA0GCSqGSIb3DQEBCwUAA4IBAQBg9yYS/mLD
J+fGkKtIngOtWuqACxI9hH/nFitS8k3iCtyVHcTteKQ29ECA3JxkbCa5HN2/xN5F
/FuvHImJCIfc2zso3FnDb+GBq8DTfVKy4AoUbaH0d6/lAHgpQ6uVuwL1RaNm6QaA
V2CQH/iOByCQJAjSv779k4UgqmY+/zad0RcZV/DeB/4r66ONoUobumR3U6tveHxe
sJEoDM0B0BXdvBJqROuG6Ufuv3KFhtTgh1KlatrPJRs2vhCyju1mp0HmegCdULJX
oCPpGKzQP7VdYbu1Ik4G0xHhRpJw7hvAjdAXbuShCpoN97wDnr0ctk0sXSHaraFP
Focy74e2Sf6j
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:53 2025 by rpki-client