Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nf6AoRCnTbdKQtBgxauNxl8jptQ.roa
File: nf6AoRCnTbdKQtBgxauNxl8jptQ.roa (raw, json)
Hash identifier: uvIJ9LHXLMCAT63U3W2tjOpyKauWnEPkf5Pq4TJI8V0=
Subject key identifier: 9D:FE:80:A1:10:A7:4D:B7:4A:42:D0:60:C5:AB:8D:C6:5F:23:A6:D4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019742BB43D71528D1F11F6FBB23E6FCA820
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nf6AoRCnTbdKQtBgxauNxl8jptQ.roa
Signing time: Fri 06 Jun 2025 00:54:18 +0000
ROA not before: Fri 06 Jun 2025 00:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 00:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:bb:43:d7:15:28:d1:f1:1f:6f:bb:23:e6:fc:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 6 00:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dfe80a110a74db74a42d060c5ab8dc65f23a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:1e:63:77:2b:06:6f:e8:e5:4b:e7:c2:a4:
69:9b:1a:45:ed:35:94:95:29:4c:fa:af:98:66:20:
ab:fb:58:a4:2c:09:15:9d:53:72:de:8c:2c:ed:96:
a2:13:f5:4f:b4:74:60:06:3f:68:e1:52:14:fc:df:
da:13:45:9e:af:17:8f:d4:ad:09:0f:37:e7:35:5c:
96:de:ef:c9:45:f8:01:dd:c2:32:d3:9d:ce:f8:e2:
5c:fd:de:74:0e:1c:8e:0d:e3:67:87:33:c9:7a:3d:
94:5b:25:e9:94:0b:ed:df:1a:c1:86:bd:ae:60:ad:
2c:b7:b3:81:86:bc:a9:4f:24:b0:25:6f:6b:2e:4a:
a5:5b:21:e3:fe:77:c0:c7:6e:0d:e6:64:cf:9c:af:
1b:25:e8:00:e4:74:e7:2d:67:d9:d7:b2:46:02:b7:
0c:cb:e9:ce:c7:8d:c5:6e:40:c5:9d:29:bd:84:19:
3a:c8:f6:77:a4:f8:05:ec:02:4b:ca:24:71:d1:5d:
ea:68:3d:b5:28:ad:bf:fc:0b:2a:7d:36:ce:39:47:
44:43:9f:40:e1:e5:1c:4d:a7:82:44:f9:40:21:14:
dc:8d:1f:f8:a4:0b:4d:4b:2c:77:e4:38:86:b7:31:
fe:ef:e9:1c:e8:d4:39:03:7f:d7:af:4d:43:10:98:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:80:A1:10:A7:4D:B7:4A:42:D0:60:C5:AB:8D:C6:5F:23:A6:D4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nf6AoRCnTbdKQtBgxauNxl8jptQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
66.56.87.0/24
103.61.196.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.178.0-203.188.180.255
203.188.184.0/21
212.32.51.0/24
212.32.71.0/24
212.32.73.0/24
212.32.76.0/22
213.254.163.0/24
213.254.172.0/23
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
02:21:a6:f0:45:c5:c0:11:e7:b8:7c:1c:1c:70:ca:86:45:02:
61:52:94:d5:29:b8:3b:d4:27:99:47:44:14:40:22:fd:30:a7:
33:d4:2f:b5:77:3e:60:5c:35:14:40:a7:91:32:44:08:57:b6:
c3:a9:33:84:01:8d:cd:f0:53:a2:bf:02:c0:9f:e6:b6:d3:44:
37:ce:db:84:89:07:79:cc:fb:ac:a4:52:a2:c9:9b:09:2f:93:
56:b2:23:80:66:b1:bc:08:4b:23:92:61:db:a5:3d:a3:5a:d3:
f0:07:49:ad:68:95:d7:bd:b4:35:39:58:85:e0:68:ef:aa:fe:
dc:a1:7e:52:85:4b:d3:4c:fa:8b:20:78:f1:bc:dd:af:99:05:
1c:65:63:30:25:02:b0:38:eb:e3:1b:ae:92:cb:95:3a:3a:61:
fc:39:4e:11:f9:6d:fc:32:db:38:e9:77:2d:f9:70:f8:26:4a:
60:af:bb:90:02:ed:36:43:d0:a8:b5:ef:88:3d:7a:08:91:91:
0d:2b:9d:1d:5c:16:c5:8c:09:0a:45:0f:4b:14:3b:97:90:68:
00:0a:d2:37:0c:9d:7c:0e:e6:31:bd:a0:65:34:cd:d1:2a:1e:
f6:16:1e:29:b5:7e:d6:9f:8d:d4:e8:c6:c8:6e:06:1c:ea:64:
f9:61:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:37:48 2025 by rpki-client