Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3QKFZLRa3t5JdZhrxBgzHJojTlU.roa
File: 3QKFZLRa3t5JdZhrxBgzHJojTlU.roa (raw, json)
Hash identifier: YtmYrkvK5GxaObhbX/oXL0uYRcvarVE+MZTX//PXvlo=
Subject key identifier: DD:02:85:64:B4:5A:DE:DE:49:75:98:6B:C4:18:33:1C:9A:23:4E:55
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0193890423E1D6B77536C7ABC6C7952ED9CC
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3QKFZLRa3t5JdZhrxBgzHJojTlU.roa
Signing time: Mon 02 Dec 2024 20:16:09 +0000
ROA not before: Mon 02 Dec 2024 20:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Dec 2024 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:04:23:e1:d6:b7:75:36:c7:ab:c6:c7:95:2e:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Dec 2 20:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd028564b45adede4975986bc418331c9a234e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:70:ce:97:38:4a:07:73:4f:df:c6:05:f7:
66:44:10:d5:69:e0:64:1c:9e:4a:b1:95:a2:d9:2e:
30:c8:53:5e:83:32:c6:40:35:df:b3:ef:75:fc:b0:
19:2d:52:33:47:7a:c8:67:89:e0:73:36:44:fe:77:
ca:3b:a3:03:65:1b:0d:16:70:11:ad:40:64:12:9a:
69:60:d7:aa:b3:53:10:e7:8f:e9:c3:54:ee:6c:6a:
9a:c7:43:2e:17:eb:66:72:f8:09:87:c8:c3:61:36:
d6:9a:9e:be:d3:d9:68:12:e1:43:fc:bc:f0:d2:87:
94:33:93:03:e3:6e:8e:21:a1:b2:00:d4:e9:a4:6e:
b7:04:a8:3e:2e:9f:1d:d2:5a:a8:7e:52:92:14:81:
20:56:2a:44:d7:7e:5e:3a:75:ec:b6:53:26:c4:f3:
19:43:b4:93:4d:e1:76:f0:38:ab:01:ee:6a:a5:1e:
91:d7:d8:b5:a6:a9:7f:e9:24:af:ec:4d:9a:1a:9f:
f2:fc:cf:a5:7d:68:fa:3c:00:b3:11:25:9a:20:01:
fc:58:4b:cd:b0:fd:a5:a9:1a:35:f0:74:24:c9:cb:
2c:c6:66:ac:9b:4d:af:8e:e0:93:60:de:40:5d:3e:
ed:70:8a:70:e6:05:01:ff:87:a0:78:1d:3c:ba:6d:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:85:64:B4:5A:DE:DE:49:75:98:6B:C4:18:33:1C:9A:23:4E:55
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/3QKFZLRa3t5JdZhrxBgzHJojTlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c4f:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/47
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
53:53:16:91:93:ac:01:36:59:8a:3e:56:e6:90:e6:67:28:7a:
e8:2b:ec:a4:85:21:a7:c1:50:56:26:dd:e7:a5:d9:f5:5a:2b:
82:5e:41:d1:90:c2:c8:b6:d9:c1:b0:c2:c7:e4:58:eb:c0:81:
45:c9:c8:0e:e5:c1:12:4c:19:3a:46:a3:b3:a3:b3:49:3d:c0:
f2:64:b2:40:e4:1c:6b:6d:f0:50:42:80:0b:7a:2f:4f:e4:89:
6f:cd:fe:4e:aa:13:aa:f9:51:6f:28:e9:af:6d:9f:62:3b:18:
54:47:73:9c:14:74:09:f6:cb:7f:ac:96:01:e0:98:d2:ec:c6:
d1:ac:84:85:89:e7:48:0d:d0:f5:37:78:8a:0c:81:95:42:56:
0d:79:b0:a3:4a:d8:37:12:26:94:c5:76:20:71:75:4c:41:bb:
fe:bf:59:f0:3b:d8:fd:9b:f3:33:bb:38:89:d7:40:8f:b1:ba:
ac:72:7f:4e:a9:ed:01:98:80:3e:8a:db:67:fe:49:7f:c2:cd:
3a:24:bf:3c:d1:24:b8:31:36:ce:45:a9:9d:60:18:3d:89:1f:
50:81:98:33:1a:a9:84:6a:33:1a:0c:e3:82:f9:06:63:a4:ca:
42:e1:6b:df:73:9d:ce:f5:1b:de:15:d9:88:5c:dc:9e:5c:10:
c3:ac:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:53:33 2025 by rpki-client