Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/spm7G3uKWs_vNJdPjNOJPvyh7VQ.roa
File: spm7G3uKWs_vNJdPjNOJPvyh7VQ.roa (raw, json)
Hash identifier: Coc8iW704e6Im7q9PFdHFHPZw5vpEfSohQm8VFPDUQg=
Subject key identifier: B2:99:BB:1B:7B:8A:5A:CF:EF:34:97:4F:8C:D3:89:3E:FC:A1:ED:54
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0197544FFE4CC5A10E39715D2ED6BE616496
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/spm7G3uKWs_vNJdPjNOJPvyh7VQ.roa
Signing time: Mon 09 Jun 2025 10:50:17 +0000
ROA not before: Mon 09 Jun 2025 10:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jun 2025 06:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:4f:fe:4c:c5:a1:0e:39:71:5d:2e:d6:be:61:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 9 10:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b299bb1b7b8a5acfef34974f8cd3893efca1ed54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:1a:90:df:00:f9:f8:1a:bb:a4:ad:c5:dd:
85:c7:e6:db:b1:8f:40:91:d9:50:27:40:ad:2f:85:
57:40:72:fc:d1:21:df:76:5f:69:13:2d:8f:de:84:
72:12:ce:01:90:7b:fc:9f:ea:a3:31:64:1b:27:e0:
a2:d8:e5:b3:0e:a4:38:1d:ab:0e:2b:44:2e:ef:ed:
02:65:50:b6:07:02:83:68:1b:7c:52:dd:99:9b:51:
41:70:26:d9:b4:28:59:df:1d:ad:87:da:e7:89:3d:
19:b6:b4:ff:88:eb:05:cc:cf:0b:cb:40:dc:3a:c0:
a7:7f:b3:27:df:1e:5b:49:12:36:28:17:48:76:2b:
00:9e:53:59:90:cc:81:54:ef:10:f4:c2:75:68:a2:
ec:36:7f:c1:81:5b:8f:a7:4c:33:13:d7:5a:4b:5c:
11:c6:fd:4e:50:fb:b9:22:fd:ef:de:4f:3d:eb:a6:
aa:53:bf:d1:98:2f:0a:b4:5d:5d:b7:77:08:55:7b:
3d:47:37:52:35:de:19:ef:a8:3b:db:7b:fb:0b:d6:
37:2d:34:30:9d:de:90:21:f6:31:84:e5:91:c4:d6:
63:a2:25:42:df:9f:7f:6b:a5:d3:9b:5a:06:9c:0c:
06:d3:ff:2f:34:82:2a:9b:e5:be:80:a4:81:56:eb:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:BB:1B:7B:8A:5A:CF:EF:34:97:4F:8C:D3:89:3E:FC:A1:ED:54
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/spm7G3uKWs_vNJdPjNOJPvyh7VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
6f:94:fd:40:13:60:13:ba:f2:39:21:ca:11:9a:8a:f1:75:d1:
84:96:8c:96:ba:c6:10:7c:c6:05:f0:da:9d:11:ef:32:92:93:
ef:6b:01:34:af:f2:64:18:75:25:f9:ad:b0:cf:7b:02:e3:61:
19:6e:bc:4c:a5:13:3c:2c:a8:b9:bf:d1:5a:bc:26:35:03:86:
21:21:17:32:78:dd:1b:b1:d9:d2:0b:4a:6f:25:1b:56:8e:5d:
34:80:44:b4:6e:84:2c:49:8b:4f:6e:55:d8:9f:fa:0d:db:5d:
78:32:33:7a:56:78:10:a3:33:4a:53:7d:fc:ca:2f:d4:95:28:
8e:d2:73:57:23:36:99:dc:e5:54:c5:f5:30:76:7e:91:95:5c:
3f:69:e0:0c:2a:ca:49:98:8b:6b:d9:95:86:2a:ef:a1:0a:1b:
6a:bf:f2:d6:ec:bf:00:32:df:2e:49:59:4c:e9:d2:6a:64:20:
69:e9:4c:79:93:89:ea:b3:d4:97:5f:d5:70:14:3a:cb:76:d3:
3d:dd:38:65:49:7a:95:31:30:10:b9:53:bc:28:ce:3d:00:f6:
76:9d:ac:9b:38:18:83:c2:16:75:29:01:21:0b:82:76:07:00:
5e:8d:8f:fb:55:f1:09:5f:2c:87:9f:a8:a4:07:75:97:1a:d8:
66:1d:0a:c3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZdUT/5MxaEOOXFdLta+YWSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwNjA5MTA1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjk5YmIxYjdiOGE1YWNmZWYzNDk3NGY4Y2QzODkzZWZjYTFlZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme4akN8A+fgau6Stxd2Fx+bbsY9A
kdlQJ0CtL4VXQHL80SHfdl9pEy2P3oRyEs4BkHv8n+qjMWQbJ+Ci2OWzDqQ4HasO
K0Qu7+0CZVC2BwKDaBt8Ut2Zm1FBcCbZtChZ3x2th9rniT0ZtrT/iOsFzM8Ly0Dc
OsCnf7Mn3x5bSRI2KBdIdisAnlNZkMyBVO8Q9MJ1aKLsNn/BgVuPp0wzE9daS1wR
xv1OUPu5Iv3v3k8966aqU7/RmC8KtF1dt3cIVXs9RzdSNd4Z76g723v7C9Y3LTQw
nd6QIfYxhOWRxNZjoiVC359/a6XTm1oGnAwG0/8vNIIqm+W+gKSBVusziQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFLKZuxt7ilrP7zSXT4zTiT78oe1UMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvc3BtN0czdUtXc192TkpkUGpOT0pQdnloN1ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB
MgMEBwU1gAMEByU/AAMEAy7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3s
oAMDAE5TAwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AAD
BAVVW4ADBAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgD
BAVZvsADAwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAM
AAMEAMEWZwMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AMEBdQkAAMEBdQyAAMEBdRb
oAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ
4AMEBNkK8AMEBNkS8AMEBNlPIDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZI
hvcNAQELBQADggEBAG+U/UATYBO68jkhyhGaivF10YSWjJa6xhB8xgXw2p0R7zKS
k+9rATSv8mQYdSX5rbDPewLjYRluvEylEzwsqLm/0Vq8JjUDhiEhFzJ43Rux2dIL
Sm8lG1aOXTSARLRuhCxJi09uVdif+g3bXXgyM3pWeBCjM0pTffzKL9SVKI7Sc1cj
Npnc5VTF9TB2fpGVXD9p4AwqykmYi2vZlYYq76EKG2q/8tbsvwAy3y5JWUzp0mpk
IGnpTHmTieqz1Jdf1XAUOst20z3dOGVJepUxMBC5U7wozj0A9nadrJs4GIPCFnUp
ASELgnYHAF6Nj/tV8QlfLIefqKQHdZca2GYdCsM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:38:30 2025 by rpki-client