Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gJUTVuiJ_49OZSs0ZQvRRyKCHng.roa
File: gJUTVuiJ_49OZSs0ZQvRRyKCHng.roa (raw, json)
Hash identifier: jkw2zmz/UbpFaX3aQ4OGFEoFiiEITcdzyz+5IHdz0Ko=
Subject key identifier: 80:95:13:56:E8:89:FF:8F:4E:65:2B:34:65:0B:D1:47:22:82:1E:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019739E32AE34577B4CB70C77516F8A5415B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gJUTVuiJ_49OZSs0ZQvRRyKCHng.roa
Signing time: Wed 04 Jun 2025 07:41:18 +0000
ROA not before: Wed 04 Jun 2025 07:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.8.186.0/24 maxlen: 24
193.8.187.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 10:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:e3:2a:e3:45:77:b4:cb:70:c7:75:16:f8:a5:41:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 07:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80951356e889ff8f4e652b34650bd14722821e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:75:cc:70:e8:23:f6:b2:64:b7:2e:d3:4b:
0e:c7:bc:b5:bb:4d:a4:72:38:13:15:24:26:52:47:
3d:24:0b:f0:86:7b:67:3f:1c:27:a1:30:7e:c8:f4:
af:54:91:34:82:05:8b:ba:a1:de:3c:cb:7b:04:ce:
bd:58:df:b6:c4:d3:5f:2d:3d:82:b0:7c:24:1b:af:
18:be:67:59:84:be:53:48:10:46:bc:0e:98:c1:ad:
1f:df:06:2e:51:cb:a8:4c:d1:b6:32:a0:cb:8b:18:
30:9d:09:c7:a4:c3:79:29:48:1d:79:c3:9e:16:4c:
6d:01:c0:a9:49:e2:f5:48:28:fe:83:a1:17:02:2a:
b2:26:33:7c:19:a2:d3:77:1a:e3:73:5e:c2:84:57:
58:69:44:91:a7:54:f7:9b:09:6f:20:a1:39:9b:21:
34:ab:e0:05:59:e4:7d:fd:06:b1:48:1f:78:72:00:
17:53:f0:8e:15:af:bf:79:5f:f1:3b:bf:3c:1a:1a:
1c:e8:a5:42:2f:1f:4a:2e:b5:4f:f8:ea:a3:b5:e9:
f2:d0:3c:d5:87:65:47:cf:da:15:8b:48:e6:fc:eb:
cb:3e:f6:d8:ec:23:36:5a:0f:68:4e:e1:84:f5:79:
3f:af:a4:e5:4d:57:38:be:a9:53:17:a6:38:57:31:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:13:56:E8:89:FF:8F:4E:65:2B:34:65:0B:D1:47:22:82:1E:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gJUTVuiJ_49OZSs0ZQvRRyKCHng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0-5.253.58.255
31.169.127.0/24
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
79.110.63.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.216.0/24
91.92.21.0/24
93.123.31.0/24
94.125.102.0/23
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.221.0/24
185.252.179.0/24
193.8.184.0/24
193.8.186.0/23
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:7f:98:ee:61:49:1f:4c:43:04:30:6a:e5:4e:85:d1:6a:1b:
88:05:65:fc:48:81:c4:32:37:f8:a9:59:e7:9d:ac:cb:24:8a:
36:be:13:ce:5a:bf:63:6d:2b:d6:93:f6:13:1b:c3:d2:63:f0:
7f:82:81:fe:a8:86:02:ac:9c:0d:bc:3e:f1:bf:4d:40:56:99:
67:ae:66:d3:b8:93:ce:f9:e8:0e:d2:f1:17:1e:07:ff:7c:94:
a0:a8:23:3f:d5:07:a2:64:c1:8a:e7:da:85:f5:73:1c:36:dd:
8a:ee:3c:99:7e:f8:9a:a4:42:f1:76:08:f5:af:0b:8f:6b:92:
f7:db:2b:25:31:54:d3:6d:33:b0:ae:c5:a1:67:2e:8b:ce:58:
94:e0:a1:15:22:bb:7b:bf:9a:dc:f7:1b:56:01:08:ff:44:26:
50:77:71:2e:aa:7a:ec:a8:ff:b7:83:bd:86:c2:59:af:62:23:
97:c0:7f:6d:09:4e:e1:c1:6b:27:68:bd:02:87:35:95:f4:d1:
7c:e4:06:d7:5e:e6:c3:52:79:bd:4c:12:e6:df:e6:29:86:2f:
3f:bb:fa:b9:ef:c6:18:39:36:a8:7c:71:a2:34:b6:92:e4:09:
8a:90:9f:42:e6:13:cb:41:71:5f:98:13:b2:ef:8e:6c:65:23:
53:fa:8c:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:51:33 2025 by rpki-client