Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/jXXhXgP2G7m31hG6EIf8vsoBhjg.roa
File: jXXhXgP2G7m31hG6EIf8vsoBhjg.roa (raw, json)
Hash identifier: KETT7g5GMdXHXivwAtLCVxeXA+dnghV3cl7AzRWw3Xk=
Subject key identifier: 8D:75:E1:5E:03:F6:1B:B9:B7:D6:11:BA:10:87:FC:BE:CA:01:86:38
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01951D800009D43FDB3110C5DD7165A62EFF
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/jXXhXgP2G7m31hG6EIf8vsoBhjg.roa
Signing time: Wed 19 Feb 2025 09:18:02 +0000
ROA not before: Wed 19 Feb 2025 09:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:80:00:09:d4:3f:db:31:10:c5:dd:71:65:a6:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Feb 19 09:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d75e15e03f61bb9b7d611ba1087fcbeca018638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:4a:a8:c5:a1:f7:3d:df:25:04:4c:08:c5:
56:c1:6f:ff:19:d0:21:9b:eb:5c:1b:14:96:27:d8:
98:1d:e4:b5:a7:08:c6:88:07:46:35:83:c5:c4:14:
7b:79:c8:7c:ac:55:c6:1c:60:91:31:6c:bb:eb:36:
b0:83:b4:e7:a5:4b:82:53:c9:5a:00:c0:9c:2a:fd:
66:a0:e8:8c:be:26:65:11:a9:4e:09:c4:c3:46:6e:
b3:36:10:8b:3a:c1:ba:a7:e2:cd:63:67:75:ce:72:
ad:9e:a2:ff:39:4e:92:99:5a:56:02:bd:a7:00:81:
36:2b:72:aa:63:8c:8c:98:99:66:50:af:ce:bd:71:
e8:de:f5:5a:08:55:35:0b:8b:dd:b0:6f:d5:09:e8:
6b:1f:c2:1f:c2:21:e1:60:70:ae:07:4e:b2:54:49:
63:1b:56:91:3f:aa:df:dc:62:26:d2:27:3c:a3:f0:
be:5e:b3:13:bf:5b:f8:a3:99:70:04:80:8d:cc:44:
b4:a3:2f:51:59:b8:59:45:66:d0:45:a9:34:18:be:
2a:fd:da:f8:e5:ec:8d:48:67:ee:5c:4b:af:2f:2d:
2b:21:09:0e:77:11:3a:01:fd:0b:dd:df:d8:fa:6d:
0d:b5:ce:b1:9c:cb:f2:23:2d:57:de:20:9b:be:bb:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:E1:5E:03:F6:1B:B9:B7:D6:11:BA:10:87:FC:BE:CA:01:86:38
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/jXXhXgP2G7m31hG6EIf8vsoBhjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
85.158.108.0/23
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:de:45:a7:81:bf:2d:90:6c:2c:a8:45:e0:e8:d2:06:e0:c6:
bf:06:e7:4f:b9:2a:23:3c:6a:12:30:d0:d5:02:84:4f:a7:c5:
5b:7d:28:a2:b1:e5:86:16:bb:83:91:ea:88:76:e9:81:19:c3:
86:99:cf:e9:c1:d5:29:e8:8f:8f:37:2c:2f:b2:2b:ef:92:3c:
cc:d0:0d:6b:61:9f:1c:58:2f:f2:be:24:ea:ee:ed:a6:76:90:
26:a9:15:8d:23:29:0f:be:e7:17:c5:b1:ae:ad:2b:b6:85:85:
0b:c6:0f:02:a7:84:88:c3:94:df:58:80:16:57:83:03:16:e4:
f8:47:b0:37:b7:a3:4e:a9:82:24:2f:71:97:04:eb:b9:9f:a8:
98:cf:8b:48:a4:3e:77:c6:d3:df:d4:d4:b7:be:85:33:a4:65:
0c:f5:e0:dc:89:09:b0:e6:3d:77:fb:69:c0:9f:b1:e4:37:e4:
b4:9c:a6:57:d9:81:6c:68:72:0c:09:17:d3:76:a0:cb:ac:7e:
60:50:19:d9:54:57:ef:23:b7:20:c4:63:a4:64:0d:9c:8a:83:
66:d8:45:4c:ea:18:17:cb:1c:d3:07:94:c3:75:5e:05:93:13:
7f:e9:63:c6:29:41:42:d7:73:92:c0:86:22:32:90:49:38:fc:
e6:13:0a:34
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAZUdgAAJ1D/bMRDF3XFlpi7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjUwMjE5MDkxODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDc1ZTE1ZTAzZjYxYmI5YjdkNjExYmExMDg3ZmNiZWNhMDE4NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXJKqMWh9z3fJQRMCMVWwW//GdAh
m+tcGxSWJ9iYHeS1pwjGiAdGNYPFxBR7ech8rFXGHGCRMWy76zawg7TnpUuCU8la
AMCcKv1moOiMviZlEalOCcTDRm6zNhCLOsG6p+LNY2d1znKtnqL/OU6SmVpWAr2n
AIE2K3KqY4yMmJlmUK/OvXHo3vVaCFU1C4vdsG/VCehrH8IfwiHhYHCuB06yVElj
G1aRP6rf3GIm0ic8o/C+XrMTv1v4o5lwBICNzES0oy9RWbhZRWbQRak0GL4q/dr4
5eyNSGfuXEuvLy0rIQkOdxE6Af0L3d/Y+m0Ntc6xnMvyIy1X3iCbvrsZmwIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFI114V4D9hu5t9YRuhCH/L7KAYY4MB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvalhYaFhnUDJHN20zMWhHNkVJZjh2c29CaGpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCBwwQCAAEwgbwD
BAEFlfgDBAEFlf4wDAMEAk1TxAMEAE1TxgMEAU+NpAMEAU+NrgMEAVWebAMEAFmW
KAMEAFmWLQMEAFmWMAMEAFmWOQMEAFvBEgMEAFvcCAMEALkoVgMEArlQNAMEAblR
cjAMAwQGuWjAAwQAuWjCAwQCuXVYAwQAuXtmAwQAua6FAwQAua6HMAwDBAC564kD
BAC564owDAMEArn9dAMEALn9dgMEAMEqJAMEAMEqJwMEAMFv0AMEAMNfmzB6BAIA
AjB0AwcAKgGGQAAAAwcAKgGGQAACAwcAKgGGQAAGMBIDBwAqAYZAAAkDBwAqAYZA
AAoDBwAqAYZAAA8wEgMHACoBhkAAEQMHASoBhkAAFDASAwcAKgGGQAAXAwcAKgGG
QAAYMBIDBwEqAYZAABoDBwEqAYZAABwwDQYJKoZIhvcNAQELBQADggEBAEHeRaeB
vy2QbCyoReDo0gbgxr8G50+5KiM8ahIw0NUChE+nxVt9KKKx5YYWu4OR6oh26YEZ
w4aZz+nB1Snoj483LC+yK++SPMzQDWthnxxYL/K+JOru7aZ2kCapFY0jKQ++5xfF
sa6tK7aFhQvGDwKnhIjDlN9YgBZXgwMW5PhHsDe3o06pgiQvcZcE67mfqJjPi0ik
PnfG09/U1Le+hTOkZQz14NyJCbDmPXf7acCfseQ35LScplfZgWxocgwJF9N2oMus
fmBQGdlUV+8jtyDEY6RkDZyKg2bYRUzqGBfLHNMHlMN1XgWTE3/pY8YpQULXc5LA
hiIykEk4/OYTCjQ=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:07 2025 by rpki-client