Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rMi7OlqWc4Q6TkSq4gFaeBOdsJs.roa
File: rMi7OlqWc4Q6TkSq4gFaeBOdsJs.roa (raw, json)
Hash identifier: KGTm7IzBuO/wy7oASoE+UWv73SRbaunQn2fYTtrZr58=
Subject key identifier: AC:C8:BB:3A:5A:96:73:84:3A:4E:44:AA:E2:01:5A:78:13:9D:B0:9B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01973A4D5C385DBB2D94DD056F538E45CD88
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rMi7OlqWc4Q6TkSq4gFaeBOdsJs.roa
Signing time: Wed 04 Jun 2025 09:37:17 +0000
ROA not before: Wed 04 Jun 2025 09:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
103.138.78.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 00:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:4d:5c:38:5d:bb:2d:94:dd:05:6f:53:8e:45:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 4 09:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc8bb3a5a9673843a4e44aae2015a78139db09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:d0:82:cf:3b:c4:cd:86:0b:16:02:ad:f8:
92:04:bd:dc:71:cb:45:47:3b:b2:6d:f1:bc:69:75:
dc:b3:5b:ae:4d:15:f6:91:e3:71:cb:0b:21:d3:56:
57:34:8b:50:a8:4e:06:e7:30:27:cd:70:f5:ff:d8:
b4:a9:12:32:33:1d:f9:d3:90:04:ec:1a:c1:2a:d9:
af:8c:5a:0c:a3:91:37:9b:80:15:b8:fb:06:57:28:
91:44:1e:6a:63:c0:1b:77:f2:17:b5:35:63:9d:29:
66:e2:86:8b:1f:d9:58:c7:a1:0f:54:8f:f6:7c:7b:
a9:74:ef:7d:b1:7a:ef:18:36:61:23:50:53:b4:17:
5b:e5:f6:6c:72:5a:8b:da:5b:89:24:76:c6:67:a4:
20:5f:be:f3:7c:80:38:db:66:85:ef:89:23:83:df:
f1:e4:d4:da:73:8c:64:1f:89:58:dd:21:de:24:92:
b2:63:07:35:1a:5f:ca:71:04:98:75:34:d3:86:98:
c0:56:8d:71:f0:2e:4f:86:63:55:7e:63:53:20:75:
0f:03:da:7a:9b:51:49:d5:91:a4:d5:c4:d5:f2:13:
74:4e:aa:49:5a:55:48:d5:95:25:ca:85:e4:47:30:
48:ac:ab:1f:58:2f:5a:2a:f3:60:4d:af:4b:f7:16:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:BB:3A:5A:96:73:84:3A:4E:44:AA:E2:01:5A:78:13:9D:B0:9B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rMi7OlqWc4Q6TkSq4gFaeBOdsJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
66.56.87.0/24
103.61.196.0/24
103.138.78.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0-203.188.180.255
203.188.184.0/21
212.32.51.0/24
212.32.70.0/23
212.32.73.0/24
212.32.76.0/22
212.56.55.0/24
213.254.163.0/24
213.254.172.0/23
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
35:53:74:3d:b1:c7:41:fd:8f:e7:be:19:c0:b4:33:1d:44:13:
bc:a9:fe:05:7f:9f:0a:b1:7f:cf:cf:53:10:92:25:12:4d:9b:
0f:1f:2e:55:96:23:e8:f2:68:58:ec:87:04:71:54:7d:ff:80:
33:ea:51:99:63:3e:a2:de:eb:8b:3f:c2:71:47:42:b8:f1:99:
3d:05:45:4d:da:73:82:b1:b1:ed:ba:53:3f:cf:bb:89:1f:81:
f4:d2:1c:ed:f8:14:77:8c:e1:bf:d7:09:e3:22:e1:ce:c0:a7:
98:eb:cb:5b:e2:81:6c:f7:29:9f:b4:60:91:0a:71:b5:5d:3b:
8b:26:55:5b:f8:97:79:23:1c:a6:d6:02:dc:e3:7f:cd:04:71:
c4:cf:83:7f:b2:52:eb:ed:1e:da:6a:05:d4:ad:9b:45:01:db:
ec:dc:ef:a6:f6:8d:71:7e:42:c6:a2:27:d3:67:8f:dc:36:dd:
7a:52:02:08:9c:ca:8b:50:ec:72:95:01:f1:a9:c8:a4:9b:0b:
49:f8:21:52:6b:31:64:8d:e0:96:81:d9:18:d4:1a:61:99:9e:
ad:2f:34:62:da:a8:0a:45:d7:49:66:a6:73:b8:1d:2e:a7:cb:
fc:1e:46:6c:e3:05:7b:0b:c7:97:37:8f:8e:10:70:4d:bc:74:
86:04:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:10 2025 by rpki-client