Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UsIi1-KTOZwDts4q585f0qJ-2U4.roa
File: UsIi1-KTOZwDts4q585f0qJ-2U4.roa (raw, json)
Hash identifier: 0+904eKskjBbzauSQrSGi0HdcBWY2es183ClMHjY3Iw=
Subject key identifier: 52:C2:22:D7:E2:93:39:9C:03:B6:CE:2A:E7:CE:5F:D2:A2:7E:D9:4E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01972F885B7519FFF5181D3319B37E46B481
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UsIi1-KTOZwDts4q585f0qJ-2U4.roa
Signing time: Mon 02 Jun 2025 07:25:54 +0000
ROA not before: Mon 02 Jun 2025 07:25:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.128.120.0/23 maxlen: 23
78.128.122.0/24 maxlen: 24
78.128.123.0/24 maxlen: 24
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.30.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.149.0/24 maxlen: 24
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.166.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/23 maxlen: 23
130.185.227.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Jun 2025 07:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:88:5b:75:19:ff:f5:18:1d:33:19:b3:7e:46:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 2 07:25:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52c222d7e293399c03b6ce2ae7ce5fd2a27ed94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:b3:ff:3d:12:04:e4:97:bc:d5:26:12:b3:
90:04:61:0b:84:d8:14:66:40:a6:8d:60:69:6a:2f:
c7:4f:a0:b4:47:54:bb:60:05:76:30:06:ac:d2:98:
44:23:1b:44:81:e4:f5:6b:44:2c:52:1c:59:22:f0:
75:00:3f:4e:3c:7f:ff:4f:ad:ac:6b:e6:b7:33:38:
72:a3:95:bb:f4:8e:d1:3f:7f:d0:b9:52:c4:9b:b6:
71:e5:77:f6:c9:2b:a9:61:43:dc:02:83:82:25:2a:
c2:b6:81:ab:90:47:68:8c:41:3a:9b:6b:b5:4b:fe:
2f:bc:57:cd:e7:36:dc:1c:0c:0d:02:2c:c6:3f:87:
29:93:11:37:e5:43:00:52:3c:75:9e:ee:4c:e6:cd:
9f:d2:ab:a8:fd:02:3c:fd:5d:34:a0:42:a5:2e:5b:
83:bc:82:30:e8:82:cf:8b:b5:16:ff:5e:cf:00:7b:
81:ed:5b:a1:4b:27:d1:b8:6b:45:27:0f:7d:e9:1c:
f7:4d:b5:56:15:5c:8f:39:85:ad:27:85:f5:f9:f9:
fc:23:e1:c4:df:3e:68:05:9a:db:8b:22:4c:a8:3e:
a2:e2:23:d8:b5:d7:f4:22:a5:0b:0a:a8:e7:73:b4:
92:0f:23:e8:de:47:4d:9a:1a:f6:89:07:b2:25:01:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:22:D7:E2:93:39:9C:03:B6:CE:2A:E7:CE:5F:D2:A2:7E:D9:4E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UsIi1-KTOZwDts4q585f0qJ-2U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.116.0/23
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.30.0/23
84.201.224.0/20
91.148.149.0/24
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
130.185.227.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
85:e1:7d:01:2d:c7:7c:aa:76:f0:ed:ea:0b:37:58:60:0d:3f:
8a:2f:b9:d8:92:23:58:45:00:11:4d:1d:54:86:03:1b:48:4c:
c1:8a:88:c9:0f:c0:d9:f8:23:55:2e:d4:27:b4:a9:16:43:51:
1c:d2:e4:d1:ec:03:3e:41:9f:f0:2a:6d:1c:95:94:d2:d7:7c:
b8:a5:cf:14:cf:a4:47:58:21:ea:4a:86:99:ff:9a:f3:6c:87:
b3:cd:d2:f0:8a:cf:34:ea:a8:f9:e0:fa:30:1f:76:92:16:2a:
d2:37:96:3e:76:99:04:9b:8d:f3:1d:f0:05:b2:a1:3e:1b:19:
1c:c4:3a:b9:e0:26:09:c7:40:f1:43:2b:d8:9f:34:e8:aa:ed:
c1:46:26:90:00:a8:61:ac:7e:cc:86:22:3f:23:a2:92:d6:8a:
fd:3d:c1:fd:ad:19:29:f8:11:14:5f:0d:d9:1b:41:5b:11:a4:
60:f5:d1:7d:d5:bd:98:60:d7:c7:f8:f4:0c:f6:9c:6d:22:7b:
9e:fa:8a:c4:32:36:98:fe:8d:8d:fd:20:c8:f8:25:88:b7:d8:
67:61:98:a6:d0:f1:10:cc:73:8c:97:f1:f5:9a:6b:fb:7a:0a:
92:5e:d5:10:17:da:ab:eb:fe:d6:a8:8f:b0:4d:6b:d1:47:67:
bb:ef:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:33:09 2025 by rpki-client