Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/K6wuJTENJxQyozNP8KULHg6vWZU.roa
File: K6wuJTENJxQyozNP8KULHg6vWZU.roa (raw, json)
Hash identifier: H2UaKjXnlRqKY8Jne2BX7Rro4YB6+m4ci/oYR62K/+g=
Subject key identifier: 2B:AC:2E:25:31:0D:27:14:32:A3:33:4F:F0:A5:0B:1E:0E:AF:59:95
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01955F135F109215B9F55917AC4981EC3DFB
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/K6wuJTENJxQyozNP8KULHg6vWZU.roa
Signing time: Tue 04 Mar 2025 02:54:19 +0000
ROA not before: Tue 04 Mar 2025 02:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.143.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.230.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.234.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
185.27.230.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:13:5f:10:92:15:b9:f5:59:17:ac:49:81:ec:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 4 02:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bac2e25310d271432a3334ff0a50b1e0eaf5995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:d8:23:3b:b2:4b:7c:21:9a:25:06:07:81:
44:b2:59:0f:6e:3e:d8:a3:1a:08:44:d0:d7:b6:6c:
3e:f9:f2:63:9c:25:f7:0e:71:84:d5:f2:0c:26:76:
e0:ab:11:7a:cf:5c:aa:cf:74:7f:c1:36:7b:58:e3:
5a:c1:94:0a:6f:0f:70:85:dc:26:a5:af:ad:51:69:
26:02:a9:2e:73:5e:4a:08:91:10:f0:46:d9:65:03:
f0:5e:7a:40:92:10:b2:69:46:b0:26:72:9c:1a:e1:
af:45:39:f8:4b:1e:99:56:2a:6e:ee:cf:84:a7:af:
68:2d:c1:7d:0b:fd:38:25:62:0e:1e:03:39:c9:07:
8d:6b:83:a2:5a:ed:74:f3:30:28:82:4a:78:b7:10:
ac:f2:58:de:6a:36:cd:e1:ff:dd:fb:72:80:3d:5c:
dc:8c:81:53:c8:a8:6a:45:b5:bd:08:5f:97:38:74:
13:e8:5d:33:fb:97:ec:ff:d1:55:5b:f1:85:24:8b:
b9:20:65:85:cb:d8:7d:24:0d:f6:5c:4a:40:9d:1d:
fc:86:2a:ab:89:99:c1:90:61:59:7d:0c:46:f6:be:
58:35:6f:db:bc:7f:2a:e7:cb:dc:52:36:e2:6e:1c:
78:27:07:d3:90:77:a2:04:b5:91:1f:9e:b5:b0:16:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:2E:25:31:0D:27:14:32:A3:33:4F:F0:A5:0B:1E:0E:AF:59:95
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/K6wuJTENJxQyozNP8KULHg6vWZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.60.0/22
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.246.0/24
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.119.0/24
163.171.126.0/24
163.171.143.0/24
163.171.153.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/23
163.171.230.0/23
163.171.234.0/24
163.171.249.0/24
163.171.252.0/24
185.27.230.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
94:3d:73:2a:d1:78:9a:25:f9:a3:37:b5:a6:56:c5:6d:17:d5:
c3:4f:f8:d8:44:b5:10:d0:d5:84:50:ee:c8:f8:1b:49:84:46:
5e:fb:4c:01:4a:06:ac:31:b2:9e:23:48:c2:f4:7f:44:76:ae:
74:22:c1:10:e6:b9:2e:83:d0:68:a1:15:1e:3c:97:8e:ba:86:
b1:26:da:3f:ee:d4:25:4d:c8:ba:0b:7e:38:7a:1d:f1:b2:7b:
e8:92:30:53:81:c1:2e:58:b5:84:6f:7d:ff:1b:08:a1:a0:4f:
1a:44:d3:fb:18:4c:d2:3d:f3:b7:a6:1d:d4:89:aa:58:2b:53:
cb:b7:da:59:ed:90:61:ae:c0:2c:68:f0:e3:d2:00:fd:2c:71:
30:54:bc:2e:64:5e:a7:cc:2e:e2:a4:a1:37:68:d9:bb:41:ea:
de:22:97:d6:c1:a2:a0:d4:19:d8:5b:56:a9:80:98:3d:2b:1c:
2a:95:ec:35:d8:ac:de:b3:7e:f6:e7:3f:90:e9:74:68:06:66:
a1:41:d9:4a:9a:29:03:c7:bc:6a:30:3a:7a:9b:8d:cb:61:fc:
79:9c:86:69:8e:24:1b:0c:4c:64:b6:b5:d8:25:be:1b:db:9c:
5b:0e:cd:7a:f1:92:91:c6:02:9c:7e:a2:5f:40:81:7a:6f:f0:
1a:d0:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:28 2025 by rpki-client