Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jKiBWugskKAWbQc-J671Cxr11aA.roa
File: jKiBWugskKAWbQc-J671Cxr11aA.roa (raw, json)
Hash identifier: wY2n3K3RBwLk1rVJO5k9dQxjYiRIJeKgX9qLrcQ17SE=
Subject key identifier: 8C:A8:81:5A:E8:2C:90:A0:16:6D:07:3E:27:AE:F5:0B:1A:F5:D5:A0
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0196D319DFFB2EB50DABEA690DB94BEA266B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jKiBWugskKAWbQc-J671Cxr11aA.roa
Signing time: Thu 15 May 2025 08:40:10 +0000
ROA not before: Thu 15 May 2025 08:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60397
IP address blocks: 2.59.112.0/22 maxlen: 24
45.149.116.0/22 maxlen: 24
79.170.148.0/22 maxlen: 24
151.237.56.0/23 maxlen: 24
151.237.58.0/23 maxlen: 24
151.237.130.0/24 maxlen: 24
151.237.132.0/23 maxlen: 24
151.237.134.0/23 maxlen: 24
185.158.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 11:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:19:df:fb:2e:b5:0d:ab:ea:69:0d:b9:4b:ea:26:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 15 08:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca8815ae82c90a0166d073e27aef50b1af5d5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:f4:37:73:b0:e0:f5:4a:97:4d:63:96:4e:
ed:26:cc:5d:ee:a1:49:b2:8e:f8:0a:b4:98:e6:a0:
56:31:9a:1b:2b:3b:cb:03:af:1e:7a:d3:ff:a2:eb:
33:91:2c:61:4b:1d:b8:d4:e4:6a:33:6d:89:e6:7e:
1a:90:33:fb:eb:52:cf:ec:e5:9c:11:8c:48:5f:ff:
3c:c7:9c:48:b2:cb:4d:73:83:e1:ce:11:99:10:04:
4d:60:e0:5f:2a:f5:a9:3a:3d:fa:d0:18:3f:11:6b:
45:41:78:d8:b0:4d:70:ea:79:0e:49:61:e8:70:46:
94:54:d1:21:a3:48:d4:44:f8:04:f2:e5:be:5c:2b:
83:70:3c:50:60:49:9d:9c:91:97:bd:ec:f5:67:04:
80:93:68:c3:01:70:cd:52:5a:3e:9d:83:f9:69:88:
f9:18:a8:33:4e:09:52:97:26:03:b4:61:4b:f5:44:
e8:1c:37:25:a3:24:53:00:fd:b4:f6:cb:ca:30:4f:
68:5d:37:5e:0a:cd:7f:49:b2:3d:44:ee:ac:fe:8d:
61:02:4c:a6:46:00:4a:27:53:cb:17:71:ef:6a:36:
45:b3:70:1f:3e:61:9e:3c:2c:35:c6:a0:50:04:6e:
03:18:1b:a9:61:e7:2a:ea:a1:c9:91:af:6d:70:4b:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:81:5A:E8:2C:90:A0:16:6D:07:3E:27:AE:F5:0B:1A:F5:D5:A0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jKiBWugskKAWbQc-J671Cxr11aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.112.0/22
45.149.116.0/22
79.170.148.0/22
151.237.56.0/22
151.237.130.0/24
151.237.132.0/22
185.158.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:14:7b:4d:5e:16:2e:bc:46:74:3f:d3:a8:95:1f:fb:3c:7b:
83:99:de:ff:a8:c7:ea:bc:0d:f5:5e:59:51:f3:c3:f2:80:bb:
b3:b9:28:b4:cc:e6:aa:f7:44:71:d1:48:c7:80:19:02:ed:e1:
ec:89:72:26:00:43:d9:4c:b3:59:02:c4:d3:e5:2b:17:b2:55:
a0:cd:0e:aa:92:39:0f:cc:dd:13:ef:93:4c:a8:ca:69:e8:9a:
9a:e4:68:9f:ef:5e:f1:ab:b0:83:42:cf:5c:95:2c:a5:1d:c7:
f7:fe:75:42:36:93:7e:6e:d4:cd:4b:8e:ad:f3:71:fa:d8:4a:
a9:f6:5e:87:17:e7:3b:16:d2:1b:b6:9b:e6:c4:ec:78:fa:f6:
dc:26:d0:f4:81:08:43:da:91:be:89:4e:1f:0b:4c:00:20:9a:
e5:23:cb:60:f6:ac:87:1d:c8:3a:ca:dd:43:c6:da:b3:d7:a4:
77:92:5b:df:a2:62:7f:3a:fd:9f:32:0c:fc:cd:ab:53:e8:a1:
48:a4:9b:81:86:57:ed:0f:83:a6:23:30:30:e4:e8:1d:d7:c0:
b5:40:b4:66:a2:15:43:fc:46:cb:91:7d:94:e6:2e:83:db:eb:
1e:3a:0d:ef:78:d0:15:d9:ce:71:89:b4:b2:75:a0:a4:cc:88:
ac:a6:5d:9a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZbTGd/7LrUNq+ppDblL6iZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjUwNTE1MDg0MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2E4ODE1YWU4MmM5MGEwMTY2ZDA3M2UyN2FlZjUwYjFhZjVkNWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHv0N3Ow4PVKl01jlk7tJsxd7qFJ
so74CrSY5qBWMZobKzvLA68eetP/ouszkSxhSx241ORqM22J5n4akDP761LP7OWc
EYxIX/88x5xIsstNc4PhzhGZEARNYOBfKvWpOj360Bg/EWtFQXjYsE1w6nkOSWHo
cEaUVNEho0jURPgE8uW+XCuDcDxQYEmdnJGXvez1ZwSAk2jDAXDNUlo+nYP5aYj5
GKgzTglSlyYDtGFL9UToHDcloyRTAP209svKME9oXTdeCs1/SbI9RO6s/o1hAkym
RgBKJ1PLF3HvajZFs3AfPmGePCw1xqBQBG4DGBupYecq6qHJka9tcEtgmwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIyogVroLJCgFm0HPieu9Qsa9dWgMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvaktpQld1Z3NrS0FXYlFjLUo2NzFDeHIxMWFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCAjtwAwQC
LZV0AwQCT6qUAwQCl+04AwQAl+2CAwQCl+2EAwQCuZ4IMA0GCSqGSIb3DQEBCwUA
A4IBAQBKFHtNXhYuvEZ0P9OolR/7PHuDmd7/qMfqvA31XllR88PygLuzuSi0zOaq
90Rx0UjHgBkC7eHsiXImAEPZTLNZAsTT5SsXslWgzQ6qkjkPzN0T75NMqMpp6Jqa
5Gif717xq7CDQs9clSylHcf3/nVCNpN+btTNS46t83H62Eqp9l6HF+c7FtIbtpvm
xOx4+vbcJtD0gQhD2pG+iU4fC0wAIJrlI8tg9qyHHcg6yt1Dxtqz16R3klvfomJ/
Ov2fMgz8zatT6KFIpJuBhlftD4OmIzAw5Ogd18C1QLRmohVD/EbLkX2U5i6D2+se
Og3veNAV2c5xibSydaCkzIispl2a
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:32:11 2025 by rpki-client