Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ggp0UCuF2fiuAJ3Kznx6Phlac9Q.roa
File: ggp0UCuF2fiuAJ3Kznx6Phlac9Q.roa (raw, json)
Hash identifier: EvTU7A3Hell8fAyTMUJvckEmbFg86wAXQMSTV0I8egc=
Subject key identifier: 82:0A:74:50:2B:85:D9:F8:AE:00:9D:CA:CE:7C:7A:3E:19:5A:73:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019875556F835DDF162E370A72B812519E33
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ggp0UCuF2fiuAJ3Kznx6Phlac9Q.roa
Signing time: Mon 04 Aug 2025 13:46:29 +0000
ROA not before: Mon 04 Aug 2025 13:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.138.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.174.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Aug 2025 04:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:55:6f:83:5d:df:16:2e:37:0a:72:b8:12:51:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 4 13:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820a74502b85d9f8ae009dcace7c7a3e195a73d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:4a:f4:4c:2d:2e:2c:c5:41:06:33:9f:f3:
2d:19:bc:ec:8b:5d:6a:51:be:ad:3c:13:04:1e:70:
9d:0b:ba:a3:03:b9:13:2c:41:20:45:e9:49:b5:79:
14:b8:cf:14:a1:67:36:a4:e1:37:75:a2:13:63:09:
a4:88:24:6f:2a:92:c0:b1:3a:81:96:c0:75:f8:75:
11:b9:a2:7e:79:3a:66:60:e6:b8:97:23:a2:39:f9:
88:82:f2:98:53:5e:df:61:ba:f3:e3:2d:a0:2b:39:
01:55:f7:ca:d9:57:d0:81:66:ec:f1:30:38:61:6f:
67:93:e0:21:fa:0c:c4:5e:c8:e7:1b:22:f3:1a:34:
ec:c0:1b:85:71:50:ca:52:46:03:06:72:43:a2:8b:
cc:4f:aa:97:e4:12:40:74:65:d5:51:9c:96:1c:e8:
6c:bc:02:df:d4:22:d5:ad:10:e0:e0:80:17:72:2b:
50:f5:a6:85:3f:a1:59:b6:06:de:05:b0:c1:ed:73:
d8:93:ae:22:19:ad:5c:e8:2c:1a:8f:fe:6a:2e:6a:
79:9b:13:4e:bf:4e:23:8f:ed:a1:02:fc:27:81:5a:
c0:3d:f0:28:ee:be:99:33:72:32:41:7d:44:41:1d:
6f:33:14:77:c9:fb:ea:89:62:d8:5c:89:40:d4:e6:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:74:50:2B:85:D9:F8:AE:00:9D:CA:CE:7C:7A:3E:19:5A:73:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ggp0UCuF2fiuAJ3Kznx6Phlac9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.138.0/24
5.175.140.0/24
5.175.192.0/24
5.231.72.0/24
5.231.79.0-5.231.80.255
5.231.94.0/24
77.90.27.0/24
83.243.86.0/24
89.106.91.0/24
89.144.22.0/24
89.144.31.0/24
94.249.153.0/24
94.249.158.0/24
94.249.168.0-94.249.170.255
94.249.172.0-94.249.177.255
94.249.183.0/24
94.249.189.0/24
94.249.197.0/24
94.249.250.0-94.249.252.255
95.215.33.0/24
178.18.144.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0b:a6:9d:1d:be:7e:79:65:26:70:12:32:dd:fc:77:5e:c9:
9e:02:1e:95:8c:44:56:87:b6:a4:0e:d7:92:8d:a5:a3:dc:88:
e5:f9:f4:3b:2a:8e:fa:a0:e0:a2:44:01:cd:37:ea:83:61:8c:
eb:8a:56:d3:15:52:c1:e2:f2:06:67:7d:01:30:e6:f6:6f:88:
15:61:de:ee:0c:89:b9:1d:4e:42:1f:49:8d:37:7b:f2:87:9e:
74:16:b0:88:aa:ab:f9:c7:03:95:02:cd:4b:4f:d2:b0:17:ff:
a2:fa:fe:99:0c:2b:f8:9f:23:c2:76:7c:61:e4:37:f8:b5:ce:
61:cd:02:7b:fe:4f:a8:dc:9e:b8:fe:dd:a8:9c:18:69:d4:c5:
06:b0:83:d8:7c:f7:ab:a8:a9:36:42:53:e4:ed:c8:64:0e:24:
ce:1a:f3:6e:21:e6:ab:22:21:62:9e:23:14:48:a8:f9:57:6b:
86:20:0e:35:28:5e:aa:58:7b:05:2d:d6:c3:3d:63:29:07:af:
1c:1d:d7:af:41:67:a5:28:f1:6c:63:6a:80:d5:32:67:ef:70:
8b:a4:b5:ba:86:f3:e7:0c:42:38:e6:cc:4b:da:9c:a6:3a:6e:
79:e0:aa:af:0a:14:fc:73:7c:e7:82:1a:e0:91:38:6c:a1:2b:
f1:68:3e:28
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZh1VW+DXd8WLjcKcrgSUZ4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODA0MTM0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjBhNzQ1MDJiODVkOWY4YWUwMDlkY2FjZTdjN2EzZTE5NWE3M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99K9EwtLizFQQYzn/MtGbzsi11q
Ub6tPBMEHnCdC7qjA7kTLEEgRelJtXkUuM8UoWc2pOE3daITYwmkiCRvKpLAsTqB
lsB1+HURuaJ+eTpmYOa4lyOiOfmIgvKYU17fYbrz4y2gKzkBVffK2VfQgWbs8TA4
YW9nk+Ah+gzEXsjnGyLzGjTswBuFcVDKUkYDBnJDoovMT6qX5BJAdGXVUZyWHOhs
vALf1CLVrRDg4IAXcitQ9aaFP6FZtgbeBbDB7XPYk64iGa1c6Cwaj/5qLmp5mxNO
v04jj+2hAvwngVrAPfAo7r6ZM3IyQX1EQR1vMxR3yfvqiWLYXIlA1OaHQwIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFIIKdFArhdn4rgCdys58ej4ZWnPUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ2dwMFVDdUYyZml1QUozS3pueDZQaGxhYzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAF
U4YDBAAFU4oDBAAFr4wDBAAFr8ADBAAF50gwDAMEAAXnTwMEAAXnUAMEAAXnXgME
AE1aGwMEAFPzVgMEAFlqWwMEAFmQFgMEAFmQHwMEAF75mQMEAF75njAMAwQDXvmo
AwQAXvmqMAwDBAJe+awDBAFe+bADBABe+bcDBABe+b0DBABe+cUwDAMEAV75+gME
AF75/AMEAF/XIQMEALISkAMEALkNnwMEALkvjzANBgkqhkiG9w0BAQsFAAOCAQEA
vQumnR2+fnllJnASMt38d17JngIelYxEVoe2pA7Xko2lo9yI5fn0OyqO+qDgokQB
zTfqg2GM64pW0xVSweLyBmd9ATDm9m+IFWHe7gyJuR1OQh9JjTd78oeedBawiKqr
+ccDlQLNS0/SsBf/ovr+mQwr+J8jwnZ8YeQ3+LXOYc0Ce/5PqNyeuP7dqJwYadTF
BrCD2Hz3q6ipNkJT5O3IZA4kzhrzbiHmqyIhYp4jFEio+VdrhiAONSheqlh7BS3W
wz1jKQevHB3Xr0FnpSjxbGNqgNUyZ+9wi6S1uobz5wxCOObMS9qcpjpueeCqrwoU
/HN854Ia4JE4bKEr8Wg+KA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:21 2025 by rpki-client