Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/SYtg8HccJ_n2a0x5ujGoTBttM_8.roa
File: SYtg8HccJ_n2a0x5ujGoTBttM_8.roa (raw, json)
Hash identifier: VDA3cEBglbwkKOxgS7R6rQ9a0QOR+bmBBJOy6RklvKI=
Subject key identifier: 49:8B:60:F0:77:1C:27:F9:F6:6B:4C:79:BA:31:A8:4C:1B:6D:33:FF
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019718479A08567D1E7085DC4EA0D80F8592
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/SYtg8HccJ_n2a0x5ujGoTBttM_8.roa
Signing time: Wed 28 May 2025 19:03:55 +0000
ROA not before: Wed 28 May 2025 19:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.66.135.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
81.90.190.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.56.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:47:9a:08:56:7d:1e:70:85:dc:4e:a0:d8:0f:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 28 19:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=498b60f0771c27f9f66b4c79ba31a84c1b6d33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:7c:6a:35:d4:88:1e:82:71:cc:67:b8:8a:
66:50:df:cd:90:bb:bc:f0:a9:0d:12:c6:a6:52:b0:
93:47:47:7c:c8:e2:8f:92:40:10:1e:48:c1:d5:6e:
dc:45:28:00:60:07:14:ab:12:d6:0a:f2:72:6e:1a:
e9:b0:f9:e7:84:35:eb:81:1a:df:df:dc:7f:23:6f:
3f:62:a8:ef:27:40:2b:ea:61:f5:00:7a:4e:77:68:
34:48:ea:df:6e:e6:e1:7e:27:86:f4:f0:11:9c:1a:
18:25:40:25:03:3d:5b:16:36:22:4a:8e:14:dd:58:
38:9e:a3:b2:4e:89:b3:d3:72:a1:08:bf:c1:7f:4e:
30:1b:42:84:6e:39:07:5c:f3:4a:32:76:47:4f:c7:
a0:9b:b6:c8:c0:52:2a:dc:92:4f:18:de:68:e9:94:
ce:6a:06:af:ee:24:5b:53:3b:bb:f4:4e:c0:7b:53:
4f:ff:e6:a4:f1:b9:68:44:d8:5a:d1:c7:5d:cb:e3:
81:ba:3e:bf:66:ea:ee:d8:6a:c2:62:3c:02:4c:d0:
34:04:b2:32:2e:0a:d6:1c:d6:04:44:d2:83:05:1c:
4d:e0:8b:51:a6:d0:ac:64:f8:eb:91:a4:3b:cf:7c:
a1:bd:77:03:d1:92:eb:22:7f:c1:04:f1:c2:f1:45:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:60:F0:77:1C:27:F9:F6:6B:4C:79:BA:31:A8:4C:1B:6D:33:FF
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/SYtg8HccJ_n2a0x5ujGoTBttM_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.135.0/24
45.82.165.0/24
45.85.2.0/24
45.134.18.0/24
45.144.242.0/23
81.90.190.0/24
91.220.202.0/23
147.78.14.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.227.0/24
185.171.122.0/24
185.172.114.0/24
185.175.142.0/23
188.119.102.0/24
192.54.56.0/24
192.54.58.0/24
193.37.57.0/24
194.124.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0d:38:a5:95:aa:82:ed:fc:57:ed:e4:86:1e:4b:d2:56:5b:
fd:0a:76:6a:7d:58:ab:a1:3c:89:26:f6:15:e9:0a:60:7d:4b:
9f:27:7e:5d:38:4a:55:4d:3f:bd:df:ec:38:ea:4c:a8:b0:7e:
da:36:7a:3d:13:a5:67:38:fb:c9:8c:a5:ec:0f:4a:5a:af:c2:
b1:6b:e9:6e:8f:25:b5:db:cf:e8:0a:6b:eb:e0:92:8c:9f:99:
f9:49:c0:b3:dd:4c:01:4f:91:ac:e2:65:a7:d8:9c:f8:a0:17:
d2:53:d2:52:03:28:36:d9:81:72:cc:75:99:c7:0f:03:13:28:
9c:04:b0:d9:91:2b:3f:61:26:5c:64:f9:c3:58:36:24:97:1b:
52:eb:27:13:93:ee:5f:bf:03:de:bf:60:c5:ed:d4:e1:44:7e:
d2:45:26:11:82:e3:95:36:c7:70:df:fc:e0:cc:a6:09:d1:78:
4e:dd:fb:e3:64:3e:43:87:bb:da:e3:90:bc:11:9c:55:d1:df:
73:7b:7e:99:a2:6f:79:99:3d:1e:98:2b:77:fc:27:af:f9:d5:
73:ad:e1:aa:e2:c0:1a:ec:7f:a7:8f:30:04:90:ca:55:c4:ad:
71:05:bc:19:3d:e1:b6:5b:b1:0f:eb:d8:b5:e9:3b:42:fe:ea:
51:5a:45:b4
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZcYR5oIVn0ecIXcTqDYD4WSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUwNTI4MTkwMzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OThiNjBmMDc3MWMyN2Y5ZjY2YjRjNzliYTMxYTg0YzFiNmQzM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAust8ajXUiB6CccxnuIpmUN/NkLu8
8KkNEsamUrCTR0d8yOKPkkAQHkjB1W7cRSgAYAcUqxLWCvJybhrpsPnnhDXrgRrf
39x/I28/YqjvJ0Ar6mH1AHpOd2g0SOrfbubhfieG9PARnBoYJUAlAz1bFjYiSo4U
3Vg4nqOyTomz03KhCL/Bf04wG0KEbjkHXPNKMnZHT8egm7bIwFIq3JJPGN5o6ZTO
agav7iRbUzu79E7Ae1NP/+ak8bloRNha0cddy+OBuj6/Zuru2GrCYjwCTNA0BLIy
LgrWHNYERNKDBRxN4ItRptCsZPjrkaQ7z3yhvXcD0ZLrIn/BBPHC8UVE1wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFEmLYPB3HCf59mtMeboxqEwbbTP/MB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvU1l0ZzhIY2NKX24yYTB4NXVqR29UQnR0TV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAC1C
hwMEAC1SpQMEAC1VAgMEAC2GEgMEAS2Q8gMEAFFavgMEAVvcygMEAJNODgMEALlp
vwMEALl4EQMEALl+RAMEAbl+iAMEALl+4wMEALmregMEALmscgMEAbmvjgMEALx3
ZgMEAMA2OAMEAMA2OgMEAMElOQMEAMJ8IDANBgkqhkiG9w0BAQsFAAOCAQEAHQ04
pZWqgu38V+3khh5L0lZb/Qp2an1Yq6E8iSb2FekKYH1Lnyd+XThKVU0/vd/sOOpM
qLB+2jZ6PROlZzj7yYyl7A9KWq/CsWvpbo8ltdvP6Apr6+CSjJ+Z+UnAs91MAU+R
rOJlp9ic+KAX0lPSUgMoNtmBcsx1mccPAxMonASw2ZErP2EmXGT5w1g2JJcbUusn
E5PuX78D3r9gxe3U4UR+0kUmEYLjlTbHcN/84MymCdF4Tt3742Q+Q4e72uOQvBGc
VdHfc3t+maJveZk9Hpgrd/wnr/nVc63hquLAGux/p48wBJDKVcStcQW8GT3htlux
D+vYtek7Qv7qUVpFtA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:23 2025 by rpki-client