Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/NSJmmpjczkZElCpjqjXguPk8nC4.roa
File: NSJmmpjczkZElCpjqjXguPk8nC4.roa (raw, json)
Hash identifier: gR63uEocQWP5MQCU4VJRqXwtCrKr4ciofyFeHGGT51w=
Subject key identifier: 35:22:66:9A:98:DC:CE:46:44:94:2A:63:AA:35:E0:B8:F9:3C:9C:2E
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 0198750EECCD424479A6A0E80D8F745223B2
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/NSJmmpjczkZElCpjqjXguPk8nC4.roa
Signing time: Mon 04 Aug 2025 12:29:29 +0000
ROA not before: Mon 04 Aug 2025 12:29:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21277
IP address blocks: 93.91.192.0/20 maxlen: 20
93.91.192.0/24 maxlen: 24
93.91.193.0/24 maxlen: 24
93.91.194.0/24 maxlen: 24
93.91.195.0/24 maxlen: 24
93.91.196.0/24 maxlen: 24
93.91.197.0/24 maxlen: 24
93.91.198.0/24 maxlen: 24
93.91.199.0/24 maxlen: 24
93.91.200.0/24 maxlen: 24
93.91.201.0/24 maxlen: 24
93.91.202.0/24 maxlen: 24
93.91.203.0/24 maxlen: 24
93.91.204.0/24 maxlen: 24
93.91.205.0/24 maxlen: 24
93.91.206.0/24 maxlen: 24
93.91.207.0/24 maxlen: 24
95.170.192.0/19 maxlen: 19
95.170.192.0/24 maxlen: 24
95.170.193.0/24 maxlen: 24
95.170.194.0/24 maxlen: 24
95.170.195.0/24 maxlen: 24
95.170.196.0/24 maxlen: 24
95.170.197.0/24 maxlen: 24
95.170.198.0/24 maxlen: 24
95.170.199.0/24 maxlen: 24
95.170.200.0/24 maxlen: 24
95.170.201.0/24 maxlen: 24
95.170.202.0/24 maxlen: 24
95.170.203.0/24 maxlen: 24
95.170.204.0/24 maxlen: 24
95.170.205.0/24 maxlen: 24
95.170.206.0/24 maxlen: 24
95.170.207.0/24 maxlen: 24
95.170.208.0/24 maxlen: 24
95.170.209.0/24 maxlen: 24
95.170.210.0/24 maxlen: 24
95.170.211.0/24 maxlen: 24
95.170.212.0/24 maxlen: 24
95.170.213.0/24 maxlen: 24
95.170.214.0/24 maxlen: 24
95.170.215.0/24 maxlen: 24
95.170.216.0/24 maxlen: 24
95.170.217.0/24 maxlen: 24
95.170.218.0/24 maxlen: 24
95.170.219.0/24 maxlen: 24
95.170.220.0/24 maxlen: 24
95.170.221.0/24 maxlen: 24
95.170.222.0/24 maxlen: 24
95.170.223.0/24 maxlen: 24
109.127.64.0/18 maxlen: 18
109.127.64.0/20 maxlen: 20
109.127.64.0/21 maxlen: 21
109.127.64.0/24 maxlen: 24
109.127.65.0/24 maxlen: 24
109.127.66.0/24 maxlen: 24
109.127.67.0/24 maxlen: 24
109.127.68.0/24 maxlen: 24
109.127.69.0/24 maxlen: 24
109.127.70.0/24 maxlen: 24
109.127.71.0/24 maxlen: 24
109.127.72.0/21 maxlen: 21
109.127.72.0/24 maxlen: 24
109.127.73.0/24 maxlen: 24
109.127.74.0/24 maxlen: 24
109.127.75.0/24 maxlen: 24
109.127.76.0/24 maxlen: 24
109.127.77.0/24 maxlen: 24
109.127.78.0/24 maxlen: 24
109.127.79.0/24 maxlen: 24
109.127.80.0/24 maxlen: 24
109.127.81.0/24 maxlen: 24
109.127.82.0/24 maxlen: 24
109.127.83.0/24 maxlen: 24
109.127.84.0/24 maxlen: 24
109.127.85.0/24 maxlen: 24
109.127.86.0/24 maxlen: 24
109.127.87.0/24 maxlen: 24
109.127.88.0/24 maxlen: 24
109.127.89.0/24 maxlen: 24
109.127.90.0/24 maxlen: 24
109.127.91.0/24 maxlen: 24
109.127.92.0/24 maxlen: 24
109.127.93.0/24 maxlen: 24
109.127.94.0/24 maxlen: 24
109.127.95.0/24 maxlen: 24
109.127.96.0/24 maxlen: 24
109.127.97.0/24 maxlen: 24
109.127.98.0/24 maxlen: 24
109.127.99.0/24 maxlen: 24
109.127.100.0/24 maxlen: 24
109.127.101.0/24 maxlen: 24
109.127.102.0/24 maxlen: 24
109.127.103.0/24 maxlen: 24
109.127.104.0/24 maxlen: 24
109.127.105.0/24 maxlen: 24
109.127.106.0/24 maxlen: 24
109.127.107.0/24 maxlen: 24
109.127.108.0/24 maxlen: 24
109.127.109.0/24 maxlen: 24
109.127.110.0/24 maxlen: 24
109.127.111.0/24 maxlen: 24
109.127.112.0/24 maxlen: 24
109.127.113.0/24 maxlen: 24
109.127.114.0/24 maxlen: 24
109.127.115.0/24 maxlen: 24
109.127.116.0/24 maxlen: 24
109.127.117.0/24 maxlen: 24
109.127.118.0/24 maxlen: 24
109.127.119.0/24 maxlen: 24
109.127.120.0/24 maxlen: 24
130.193.128.0/17 maxlen: 17
130.193.128.0/19 maxlen: 19
130.193.131.0/24 maxlen: 24
130.193.132.0/22 maxlen: 22
130.193.144.0/24 maxlen: 24
130.193.145.0/24 maxlen: 24
130.193.146.0/24 maxlen: 24
130.193.147.0/24 maxlen: 24
130.193.148.0/24 maxlen: 24
130.193.149.0/24 maxlen: 24
130.193.150.0/23 maxlen: 23
130.193.150.0/24 maxlen: 24
130.193.151.0/24 maxlen: 24
130.193.152.0/23 maxlen: 23
130.193.154.0/23 maxlen: 23
130.193.160.0/20 maxlen: 20
130.193.160.0/23 maxlen: 23
130.193.160.0/24 maxlen: 24
130.193.161.0/24 maxlen: 24
130.193.165.0/24 maxlen: 24
130.193.166.0/24 maxlen: 24
130.193.176.0/20 maxlen: 20
130.193.176.0/21 maxlen: 21
130.193.184.0/21 maxlen: 21
130.193.192.0/20 maxlen: 20
130.193.208.0/20 maxlen: 20
130.193.224.0/20 maxlen: 20
130.193.240.0/20 maxlen: 20
2a04:a040::/29 maxlen: 29
2a04:a040::/32 maxlen: 32
2a04:a041::/32 maxlen: 32
2a04:a042::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:0e:ec:cd:42:44:79:a6:a0:e8:0d:8f:74:52:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Aug 4 12:29:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3522669a98dcce4644942a63aa35e0b8f93c9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:e7:d9:03:2e:98:d1:9c:26:f4:43:31:cc:
08:da:f0:5d:5c:9e:0d:19:53:70:e4:93:ea:fc:6c:
7d:0d:56:42:0b:59:d0:f2:0a:25:fa:fa:b6:c9:3f:
f5:28:c4:de:bc:7c:91:34:66:58:1f:0b:e2:aa:f2:
4f:f6:fb:c1:7b:9c:19:a6:89:19:88:d8:c8:b5:50:
30:be:f0:45:7a:2b:27:c4:10:77:99:12:a0:65:de:
34:0b:e6:7f:c2:2d:e2:6f:05:ed:75:c9:b5:a4:84:
6b:30:f4:e6:79:a1:a2:d7:a6:e7:bb:68:1a:46:a8:
f7:53:fe:b2:68:3b:02:82:57:d9:12:e6:3f:46:5b:
86:b4:62:6b:d4:d4:9b:ba:67:0c:3b:8b:9f:ca:2c:
dd:3e:9d:60:7d:d6:6f:04:84:41:d9:3e:a7:d5:15:
5c:0f:9a:57:75:cc:41:86:40:2d:98:c3:34:f3:29:
0e:0f:40:04:b8:d4:ec:8e:47:11:86:f0:9f:ee:4d:
ee:0b:21:fd:c7:63:f3:b9:c0:a1:7f:29:c9:77:88:
51:4d:b3:62:20:d5:72:8b:6d:84:29:db:e1:94:dd:
95:4d:93:98:73:a6:b2:df:95:a7:7c:78:e1:15:a1:
5b:87:b5:ed:24:f9:9f:79:aa:76:8c:36:e8:cb:a4:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:22:66:9A:98:DC:CE:46:44:94:2A:63:AA:35:E0:B8:F9:3C:9C:2E
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/NSJmmpjczkZElCpjqjXguPk8nC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.192.0/20
95.170.192.0/19
109.127.64.0/18
130.193.128.0/17
IPv6:
2a04:a040::/29
Signature Algorithm: sha256WithRSAEncryption
19:ae:4c:8f:0b:56:f4:f0:20:10:22:08:d9:bd:02:cf:fb:fd:
49:ff:1e:a5:c7:15:ef:a7:49:b7:ea:a2:9d:a6:e2:6a:26:8b:
7f:64:af:f0:f6:a1:0a:2c:be:68:1a:84:10:38:81:f3:c8:89:
1d:05:0f:99:f6:8c:e6:15:1b:48:9e:5a:c8:ac:8c:8c:88:39:
f1:f3:e4:7d:11:6e:77:ff:9a:00:4b:80:89:da:fb:5f:6a:ca:
e8:5b:8b:4c:3c:7b:d5:27:ca:43:be:da:af:5a:6c:1a:51:66:
bc:96:df:86:49:85:b7:71:e9:21:f8:c4:ed:7d:25:f0:a3:9a:
0a:c4:a5:ae:b5:ed:f5:11:05:67:53:ad:4d:9a:6c:46:01:3d:
60:01:a7:d5:9d:1c:9f:47:ce:37:cf:5a:37:dd:de:4e:71:a3:
55:c0:c4:01:aa:3f:3c:13:17:93:7a:11:a7:7d:69:17:c0:35:
b8:2f:d4:35:7f:31:7f:8d:f3:a6:fc:64:8b:01:36:95:7b:53:
32:65:37:66:3c:8f:55:9e:7d:5d:fa:87:b3:be:ea:f6:c8:01:
92:b4:62:c6:60:3d:98:34:36:58:d4:56:aa:30:18:ba:9a:1b:
59:28:4d:6a:82:71:43:6e:87:02:bf:c0:e6:43:af:b4:b0:08:
2c:b5:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:10 2025 by rpki-client