Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONHtGFxvO7wqXBKRVBC1cwDYPd0.roa
File: ONHtGFxvO7wqXBKRVBC1cwDYPd0.roa (raw, json)
Hash identifier: ZM1fWmdKwXO10EZ0RQPHwdTmttSg6QsAHo7yX0GQKMc=
Subject key identifier: 38:D1:ED:18:5C:6F:3B:BC:2A:5C:12:91:54:10:B5:73:00:D8:3D:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01961FC75D4FFB8A5DB524BAD562F363BFDC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONHtGFxvO7wqXBKRVBC1cwDYPd0.roa
Signing time: Thu 10 Apr 2025 12:58:01 +0000
ROA not before: Thu 10 Apr 2025 12:58:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.232.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 13:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:c7:5d:4f:fb:8a:5d:b5:24:ba:d5:62:f3:63:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 10 12:58:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38d1ed185c6f3bbc2a5c12915410b57300d83ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:6b:f3:8d:6a:00:91:fb:66:82:cd:15:e8:
11:07:86:bc:86:92:30:21:02:b5:38:de:16:d5:9b:
91:b1:2c:c8:cb:e6:0f:3f:0a:76:e4:df:ff:e6:f5:
5f:d6:1f:0b:23:6d:e4:03:23:58:0d:5e:ea:10:87:
2e:92:80:d2:8c:5a:66:5b:29:e3:a0:e7:8d:60:30:
c0:85:0e:6b:d3:ec:bd:24:ba:ca:85:c9:78:9b:03:
fe:b3:26:a7:b1:af:fc:c3:d0:ee:61:fc:db:8a:8b:
9a:ff:ee:24:2c:a5:0b:de:bf:2f:c5:cd:1c:a8:be:
28:38:ab:03:05:59:c1:14:c1:b2:ca:27:be:0d:90:
20:0f:d2:f2:44:f5:5e:6e:21:ea:3e:e5:ba:4d:20:
1f:bb:49:70:cc:a3:e4:6a:b2:b2:dc:6f:cf:3d:4b:
84:e6:a1:00:0a:b8:da:27:dc:91:9c:b5:3b:19:75:
f0:90:11:86:24:cd:1f:49:3f:df:ab:5b:1d:93:fc:
79:d4:d1:9e:7a:f8:ca:86:e1:aa:9b:b6:a5:b0:40:
51:ce:96:3e:b2:79:10:ff:43:84:ac:17:4b:e0:b9:
e3:c5:96:6e:f3:26:01:7d:d7:89:5f:bb:81:c4:90:
57:68:40:68:c7:c2:47:07:05:59:2f:2f:ea:cb:97:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:ED:18:5C:6F:3B:BC:2A:5C:12:91:54:10:B5:73:00:D8:3D:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONHtGFxvO7wqXBKRVBC1cwDYPd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.230.0/23
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.70.0/24
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.232.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.73.0-171.22.75.255
178.215.224.0/24
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
31:15:c6:e5:e2:90:d3:1b:90:89:53:a3:9e:f8:53:6f:ec:ae:
16:f4:0b:19:55:87:df:36:95:72:08:b8:ef:e1:37:44:df:a9:
bb:36:e1:ba:02:a7:e4:aa:fd:db:a1:17:aa:4a:ed:39:6d:2b:
64:3f:64:2b:4c:77:82:4d:e3:ee:1b:ed:61:43:05:92:10:64:
84:e2:38:2b:8b:d3:be:13:b8:cf:b4:0f:81:bf:89:b2:48:84:
5a:6b:db:18:83:27:21:fb:4e:69:26:8d:33:15:3f:39:3b:aa:
25:c3:71:4e:c4:7b:ae:b8:c2:d7:0d:ce:e7:65:c9:d8:58:73:
e1:22:9e:95:a5:52:0b:d9:ff:cf:62:f8:70:72:e1:42:54:f4:
15:ac:84:7c:c9:62:c5:9e:93:2c:19:cb:8a:41:94:c0:cf:4a:
b4:22:db:ed:48:2d:8b:55:ee:b5:3e:41:04:80:06:28:ab:cd:
d3:14:41:e0:d7:7c:2d:e2:32:28:b8:2a:41:19:1e:7e:e6:7c:
aa:22:5f:fe:59:18:ea:73:1a:60:7a:79:0a:17:6a:58:11:70:
95:97:63:f9:8d:1a:17:af:92:19:bf:83:6c:b4:09:b0:1e:f0:
36:a3:a6:65:57:70:ef:2a:88:92:de:b4:52:d1:eb:b6:49:5c:
c6:35:d3:fe
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgISAZYfx11P+4pdtSS61WLzY7/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDEwMTI1ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGQxZWQxODVjNmYzYmJjMmE1YzEyOTE1NDEwYjU3MzAwZDgzZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uhr841qAJH7ZoLNFegRB4a8hpIw
IQK1ON4W1ZuRsSzIy+YPPwp25N//5vVf1h8LI23kAyNYDV7qEIcukoDSjFpmWynj
oOeNYDDAhQ5r0+y9JLrKhcl4mwP+syansa/8w9DuYfzbioua/+4kLKUL3r8vxc0c
qL4oOKsDBVnBFMGyyie+DZAgD9LyRPVebiHqPuW6TSAfu0lwzKPkarKy3G/PPUuE
5qEACrjaJ9yRnLU7GXXwkBGGJM0fST/fq1sdk/x51NGeevjKhuGqm7alsEBRzpY+
snkQ/0OErBdL4LnjxZZu8yYBfdeJX7uBxJBXaEBox8JHBwVZLy/qy5eyvwIDAQAB
o4IDQTCCAz0wHQYDVR0OBBYEFDjR7Rhcbzu8KlwSkVQQtXMA2D3dMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvT05IdEdGeHZPN3dxWEJLUlZCQzFjd0RZUGQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVQYIKwYBBQUHAQcBAf8EggFEMIIBQDCCATwEAgABMIIB
NAMEAAI7/QMEAgX8hAMEAB8N0wMEAC0JnQMEAC0M/QMEAC1C5AMEAS1C5gMEAC1R
JwMEAC1YQAMEAC1Z9wMEAC1aWQMEAC2LagMEAS2NngMEAC2XWgMEAE9uMgMEAFGh
7gMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4pgMEAFd5FgMEAFd5JgMEAFd5LQMEAFd5
VwMEAVd5fAMEAFd5ogMEAFd5pQMEAFtcRgMEAFz5MgMEAF17LQMEAF17LwMEAF17
VQMEAF17bQMEAF17dQMEAF17dwMEAF5nfQMEAl6aoAMEA16cQAMEAF6c6AMEAI1i
AQMEAI1iBgMEAJNOZDAMAwQAqxZJAwQCqxZIAwQAstfgAwQAstfjAwQCudhUAwQA
wRnYAwQAwSMSAwQAwje6AwQAwqmvMA0GCSqGSIb3DQEBCwUAA4IBAQAxFcbl4pDT
G5CJU6Oe+FNv7K4W9AsZVYffNpVyCLjv4TdE36m7NuG6Aqfkqv3boReqSu05bStk
P2QrTHeCTePuG+1hQwWSEGSE4jgri9O+E7jPtA+Bv4mySIRaa9sYgych+05pJo0z
FT85O6olw3FOxHuuuMLXDc7nZcnYWHPhIp6VpVIL2f/PYvhwcuFCVPQVrIR8yWLF
npMsGcuKQZTAz0q0ItvtSC2LVe61PkEEgAYoq83TFEHg13wt4jIouCpBGR5+5nyq
Il/+WRjqcxpgenkKF2pYEXCVl2P5jRoXr5IZv4NstAmwHvA2o6ZlV3DvKoiS3rRS
0eu2SVzGNdP+
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:29 2025 by rpki-client