Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KJX9xAmQfEoMT055YhdVWH1w4vA.roa
File: KJX9xAmQfEoMT055YhdVWH1w4vA.roa (raw, json)
Hash identifier: lDadvXer7p8QCxsInXuzwLIjvjtshvnmTZAkVvxAE9E=
Subject key identifier: 28:95:FD:C4:09:90:7C:4A:0C:4F:4E:79:62:17:55:58:7D:70:E2:F0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0195C5AD643D96D5DA75A2C4CF37102C1F2C
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KJX9xAmQfEoMT055YhdVWH1w4vA.roa
Signing time: Mon 24 Mar 2025 01:03:49 +0000
ROA not before: Mon 24 Mar 2025 01:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:1c4d::/48 maxlen: 48
2a06:98c0:1c4e::/48 maxlen: 48
2a06:98c0:1c4f::/48 maxlen: 48
2a06:98c0:1c50::/48 maxlen: 48
2a06:98c0:1c51::/48 maxlen: 48
2a06:98c0:1c52::/48 maxlen: 48
2a06:98c0:1c53::/48 maxlen: 48
2a06:98c0:1c54::/48 maxlen: 48
2a06:98c0:1c55::/48 maxlen: 48
2a06:98c0:1c56::/48 maxlen: 48
2a06:98c0:1c57::/48 maxlen: 48
2a06:98c0:1c58::/48 maxlen: 48
2a06:98c0:1c5a::/48 maxlen: 48
2a06:98c0:1c5b::/48 maxlen: 48
2a06:98c0:1c5c::/48 maxlen: 48
2a06:98c0:1c5d::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:49::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Apr 2025 22:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c5:ad:64:3d:96:d5:da:75:a2:c4:cf:37:10:2c:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Mar 24 01:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2895fdc409907c4a0c4f4e79621755587d70e2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:31:dc:d6:77:7d:ab:3a:ab:da:1d:9b:d3:
0a:88:1d:c4:fe:6c:3f:2d:82:7d:0b:80:40:9f:d9:
ae:da:25:43:95:5a:98:a3:50:42:51:45:bb:84:73:
43:3e:d1:41:dc:c9:49:8c:ae:ff:a4:2b:69:71:ef:
85:d4:23:b5:3f:8b:a1:1c:be:9e:ab:98:d7:a4:5c:
f7:b9:06:c9:ca:17:49:94:7d:a1:b5:63:ea:9e:03:
40:6c:ab:72:8d:7a:38:8c:2a:ae:2a:ee:e7:55:f7:
b9:cf:c6:79:1e:69:f6:99:ca:56:23:c6:bb:74:d1:
06:00:d3:27:9e:b3:07:f1:d4:d1:5a:eb:d1:46:84:
d2:ec:a0:dc:a1:50:64:e1:f8:79:13:b5:32:eb:83:
47:20:96:6a:92:b6:f1:97:e2:cf:9f:89:81:5e:28:
42:2d:97:c2:80:eb:a6:40:de:d0:b8:77:00:35:ad:
a1:2a:82:6d:8a:3e:58:7b:c8:e0:90:b9:c4:59:54:
68:0f:59:2c:ea:28:23:86:71:34:95:9c:7c:ec:ae:
d0:2d:ec:6c:f5:71:ae:35:7b:6c:a9:b4:67:8a:cb:
04:be:50:c3:6a:6e:f6:bb:83:e2:d0:3e:04:f8:cd:
1a:e8:3e:7e:ea:3b:ec:1b:95:6b:b5:22:a6:c3:3c:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:FD:C4:09:90:7C:4A:0C:4F:4E:79:62:17:55:58:7D:70:E2:F0
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/KJX9xAmQfEoMT055YhdVWH1w4vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c58:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c5a::-2a06:98c0:1c5d:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/47
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
04:3d:c5:0c:23:40:60:64:03:00:d4:66:2f:57:b6:8e:55:32:
96:79:13:ea:aa:10:f9:61:b0:14:71:67:f3:54:b0:4a:e2:c8:
7c:97:c9:ef:81:95:3b:8b:e2:69:fd:61:09:51:9e:18:42:32:
e1:2b:84:c8:8e:29:d7:46:7c:88:80:fb:c9:cb:e2:03:ba:a6:
04:9e:b1:13:ab:7a:ec:3b:ed:da:42:9f:ba:59:f1:6e:87:6a:
c1:80:0b:a6:88:14:5c:8d:cf:af:db:55:8e:97:e8:ed:f9:de:
50:4d:ee:8b:29:72:d6:21:9d:5b:4b:d5:74:36:a6:50:d4:ee:
d0:84:29:9b:78:b3:53:ec:d5:28:e0:da:ba:01:2d:4c:27:7b:
ad:48:62:51:d6:65:65:b7:54:46:44:9d:5e:9a:9a:3e:f3:22:
a5:6a:db:07:3e:f3:d1:a9:51:b5:3e:15:8c:df:8c:ee:e0:cf:
2d:e4:ef:ce:63:cc:40:c4:f0:61:1d:41:23:7b:d4:09:b3:a5:
97:a3:15:b1:e5:d2:ce:30:8f:24:bf:3d:35:60:aa:41:fc:05:
e9:b0:6a:1a:97:60:a2:08:af:bb:43:f8:1e:c9:9e:61:08:9c:
ae:69:c9:98:4c:da:ca:e2:e5:ef:8c:f7:51:80:ed:59:ac:bd:
a6:76:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:15 2025 by rpki-client