Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rKABBS-eL3tmh6Zhcdf2X6qpPaA.roa
File: rKABBS-eL3tmh6Zhcdf2X6qpPaA.roa (raw, json)
Hash identifier: 37/iFIzQsBaGhWxol36fdq8rvK+8S8f+dlKjGTxQ+b0=
Subject key identifier: AC:A0:01:05:2F:9E:2F:7B:66:87:A6:61:71:D7:F6:5F:AA:A9:3D:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01972F952DBD2543D6CB59610C1C6F14F870
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rKABBS-eL3tmh6Zhcdf2X6qpPaA.roa
Signing time: Mon 02 Jun 2025 07:39:55 +0000
ROA not before: Mon 02 Jun 2025 07:39:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.231.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:95:2d:bd:25:43:d6:cb:59:61:0c:1c:6f:14:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 2 07:39:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca001052f9e2f7b6687a66171d7f65faaa93da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:2f:08:d8:7f:92:76:06:98:b5:39:39:e3:
41:e7:26:45:de:b8:19:5c:36:07:66:b4:47:f8:44:
1f:d3:67:3c:d4:1c:e8:00:af:9c:44:ee:75:63:f3:
bb:39:06:40:ce:06:51:1c:6e:8a:24:64:b9:55:44:
8e:87:79:63:b6:0a:72:55:16:8e:be:9e:ac:a8:06:
14:ae:b3:2c:0c:60:0d:20:c9:f9:f1:f4:61:d0:6b:
f5:01:8f:10:08:12:cc:b8:6d:4a:b7:df:c2:8d:30:
c9:91:de:dc:89:a4:01:32:19:3d:3b:94:bf:d9:ec:
99:cd:e2:5b:8c:6f:67:36:d1:0b:43:c8:03:66:77:
5e:32:a4:52:16:6f:df:55:bd:38:47:2b:02:0f:24:
a8:07:dd:a1:17:c8:9c:fa:b2:56:dd:31:99:3f:c1:
5f:79:f7:55:a7:2b:75:3d:c5:8a:6d:0c:f9:ec:7e:
b1:0c:c1:93:b1:c1:8a:ce:19:48:1d:e6:7b:f3:94:
12:eb:00:fb:ed:c1:cc:db:f0:aa:84:c1:25:99:89:
a4:a2:05:46:79:8d:00:6e:a6:24:d9:73:6f:9c:30:
7e:b8:9d:e1:cf:70:65:57:44:c3:1e:e1:a9:20:75:
18:0b:a1:9f:2c:80:ce:cc:32:c2:2f:24:a6:fb:47:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:01:05:2F:9E:2F:7B:66:87:A6:61:71:D7:F6:5F:AA:A9:3D:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rKABBS-eL3tmh6Zhcdf2X6qpPaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.231.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.14.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:02:ef:ab:9e:d6:9d:7c:f3:3d:17:fa:a2:7e:6d:95:b8:bf:
d4:4d:c0:11:a1:00:12:af:db:01:69:24:cf:ed:08:76:f6:8d:
8a:be:5f:c0:81:6d:cf:79:ed:3a:10:b5:10:ef:60:06:8d:71:
d6:dd:bc:fe:5a:4f:8a:2a:71:32:b8:8a:04:3b:5c:63:89:ae:
0a:38:ea:8c:da:b7:c2:b5:cd:25:15:bf:66:34:6d:9f:7b:d8:
b1:d8:69:dc:da:b3:b3:62:e8:c8:92:18:6d:43:ce:45:75:cc:
18:6f:88:53:f4:fd:86:00:ac:15:be:6e:c4:aa:e7:7a:5c:1c:
81:3b:6f:12:38:9e:48:73:c3:75:5f:c5:fc:1c:02:7d:8d:1d:
fb:f3:54:90:0e:34:b5:ad:a6:22:ab:80:b8:63:f8:17:a5:b0:
1a:b8:d5:f3:ba:3f:79:4d:62:6d:cf:dd:f6:d5:8c:27:db:33:
79:17:60:9c:f4:4f:77:95:73:49:6f:38:3e:4c:c9:f7:b6:31:
f4:76:c1:c5:56:66:4b:bb:7d:a4:ec:4f:77:03:af:1b:a5:80:
f1:58:14:e8:eb:4d:f7:db:06:28:07:bc:d7:3d:d5:6e:4c:4c:
c2:39:12:09:cb:d5:7b:43:e8:ec:fc:72:f4:43:58:6c:81:c3:
c7:0f:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:10:25 2025 by rpki-client