Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_IIXzP0JRB58HoWWJQZPfdiBq68.roa
File: _IIXzP0JRB58HoWWJQZPfdiBq68.roa (raw, json)
Hash identifier: 4HvibCdVV1wlQ45YW97bJzbbfTGtkJiPtcOjYwA/1UM=
Subject key identifier: FC:82:17:CC:FD:09:44:1E:7C:1E:85:96:25:06:4F:7D:D8:81:AB:AF
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01961FDA2572BDC9510C9ED92392274BB9E8
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_IIXzP0JRB58HoWWJQZPfdiBq68.roa
Signing time: Thu 10 Apr 2025 13:18:32 +0000
ROA not before: Thu 10 Apr 2025 13:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.36.25.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:da:25:72:bd:c9:51:0c:9e:d9:23:92:27:4b:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 10 13:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc8217ccfd09441e7c1e859625064f7dd881abaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:25:29:7e:5c:b3:e1:04:ef:d1:b0:36:ec:
51:42:37:5a:d3:f6:e6:aa:f3:ef:49:46:9a:5e:77:
39:33:4f:c7:6d:69:2a:07:27:6d:87:2b:b9:5b:03:
f6:35:0e:c0:21:37:b1:dd:55:df:b2:4d:fa:30:39:
0c:44:29:28:e2:d0:01:bb:68:c0:5f:cb:d3:43:81:
8a:12:2e:99:90:f0:26:af:eb:35:09:9c:ff:86:52:
b6:0b:4f:2d:e8:69:4c:36:05:2a:f9:5c:e2:07:c7:
fb:6f:2a:d7:3d:04:1c:0a:7b:17:a1:44:ff:b3:f8:
2f:0b:ce:ce:4c:7a:d7:36:28:c4:14:76:d9:8d:f2:
a5:ec:f3:12:5d:a6:13:b8:07:a8:12:92:09:ee:bc:
f1:fb:88:d0:b6:68:f1:56:92:6a:6a:c2:1c:67:05:
72:49:f1:78:c2:39:8e:b0:22:5c:31:73:c6:b3:8a:
ae:89:6c:af:bf:0b:d0:f0:b9:6b:a1:fd:f3:8c:99:
f3:60:e2:65:88:11:fd:53:e8:0a:df:98:d5:60:a4:
10:69:70:9f:d3:d3:98:cb:05:d6:36:8b:a5:1c:ab:
fa:40:90:7a:c7:4a:da:8d:52:89:95:06:bb:19:19:
10:4d:6f:e3:62:09:f9:7f:27:f1:86:ea:2e:78:5c:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:17:CC:FD:09:44:1E:7C:1E:85:96:25:06:4F:7D:D8:81:AB:AF
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_IIXzP0JRB58HoWWJQZPfdiBq68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
8e:62:bc:59:25:af:f6:5a:01:d1:b0:08:6a:77:d3:66:69:93:
fd:84:fd:db:47:b2:15:7e:cf:c2:72:c7:69:ff:94:7e:b9:bc:
30:15:50:7f:19:12:0f:50:8d:06:98:53:40:3c:c9:c8:6d:24:
7e:17:13:52:53:d2:36:07:43:46:68:bc:ac:be:87:8b:5d:5e:
39:89:63:2e:e4:8f:e3:2c:f9:9e:df:7a:08:86:ac:eb:1e:78:
0b:9e:22:69:61:18:79:01:3d:c7:cf:a2:b8:fb:f9:f9:56:2b:
db:ec:a2:0a:2d:e0:af:44:47:30:b7:bb:ac:15:ea:37:97:67:
37:d0:f4:56:de:0c:54:e8:a0:8e:6a:38:d7:2a:1d:be:d7:a2:
3c:a1:ee:fc:7e:fe:bf:a9:dc:66:2a:df:e4:30:a1:46:12:30:
27:78:f2:b5:04:2a:cc:0e:1c:78:82:de:31:c2:f8:4b:7e:eb:
9d:68:7c:ed:1b:a8:97:11:e4:26:bf:a5:a9:4c:73:85:46:ac:
a5:92:8c:74:7f:b3:36:49:38:b6:73:0b:73:2a:0b:da:d3:02:
a5:e6:23:5b:1d:52:e0:6a:48:1b:db:f1:71:b9:0c:c3:11:52:
3b:2f:ea:bb:3e:47:e3:91:83:30:e5:55:bb:06:14:25:b3:22:
93:78:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:28 2025 by rpki-client