Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PPv7HtwASCZyxXYMK1xYvBijwIM.roa
File: PPv7HtwASCZyxXYMK1xYvBijwIM.roa (raw, json)
Hash identifier: fg1WRJjKtlyqAJiTC/vVUJl17F0mnSfxrvrpWs8EhNE=
Subject key identifier: 3C:FB:FB:1E:DC:00:48:26:72:C5:76:0C:2B:5C:58:BC:18:A3:C0:83
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01970B087C5E2DAF1CD7CBE41398F29B1D93
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PPv7HtwASCZyxXYMK1xYvBijwIM.roa
Signing time: Mon 26 May 2025 05:19:54 +0000
ROA not before: Mon 26 May 2025 05:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.80.0/21 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked on Wed 28 May 2025 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:08:7c:5e:2d:af:1c:d7:cb:e4:13:98:f2:9b:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 26 05:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cfbfb1edc00482672c5760c2b5c58bc18a3c083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:f9:25:81:42:9b:95:c9:68:65:7f:ee:24:
da:bd:4e:32:38:dc:ab:92:a0:92:b7:a5:7c:ae:49:
b1:df:00:99:91:dd:27:48:15:41:21:5d:7c:2d:57:
ab:85:21:3e:36:fe:cb:cd:30:a5:97:c4:9a:34:01:
1d:86:6a:3b:00:6b:8b:1e:ae:3e:1a:d5:cd:26:f0:
2b:76:33:a1:58:e1:7f:7b:fb:80:ce:8f:e1:05:a1:
08:f3:da:cc:b2:98:64:92:60:be:89:2d:0f:11:bd:
44:6b:9d:b3:aa:f1:f6:d7:2e:b3:56:b3:34:3d:8a:
f0:1f:7c:94:8b:85:30:6c:12:09:38:de:c9:24:a2:
a8:3a:7f:46:46:0f:20:3a:f9:96:54:1e:6d:e0:c5:
dc:ce:b6:44:ac:83:3d:d9:fa:71:21:4d:79:1b:4b:
51:e7:9d:5c:04:d5:af:aa:11:46:9f:b7:18:a5:9a:
47:06:f5:7d:8a:34:f9:ff:82:0c:c8:02:2f:66:53:
67:7f:bb:2e:0c:90:34:06:31:bb:90:d9:ce:45:8a:
a3:ec:7c:bc:c7:9e:80:59:12:5f:dd:24:be:d0:c6:
94:69:c9:c3:6b:29:9d:76:14:c2:82:96:b1:2d:f8:
9c:d7:07:4f:7d:2d:33:bc:b7:f0:f0:fc:92:f9:8d:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:FB:1E:DC:00:48:26:72:C5:76:0C:2B:5C:58:BC:18:A3:C0:83
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PPv7HtwASCZyxXYMK1xYvBijwIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.8.80.0/21
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0-5.101.95.255
5.188.44.0/22
5.188.49.0/24
5.188.192.0/22
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
73:f7:61:5f:a5:35:d9:e8:0d:9f:c5:51:24:61:35:6b:29:86:
dd:08:9b:06:c2:a5:88:11:2a:48:59:a9:91:11:8f:a5:6b:ee:
c0:56:1f:6f:79:30:10:b1:43:ce:70:9b:30:1c:08:cf:38:a5:
dd:b6:d6:27:0d:cc:64:56:ec:c5:39:6b:df:2d:6a:70:bd:5a:
70:19:f5:5c:9c:5b:36:f2:88:56:db:ef:bf:5d:19:3c:fd:bc:
aa:d2:d0:b6:8d:a8:bf:13:a6:3d:02:81:ff:91:b3:a6:45:ff:
ce:91:98:b3:dd:95:9b:23:89:6e:79:e5:7b:00:e4:ed:9b:21:
b9:2d:45:21:40:fb:b0:9c:16:c9:bd:26:9a:f7:d3:32:e9:24:
8a:15:62:e5:3f:11:8d:34:57:f0:dd:e9:53:0f:09:d1:76:b1:
64:30:16:97:b1:45:eb:a2:ba:f9:0e:93:5b:ab:90:bf:df:2f:
1f:5f:11:0a:9c:75:e0:c2:b7:3e:25:01:1f:34:11:f2:e1:81:
47:bd:ae:54:c2:fc:78:d0:64:33:ae:80:53:c1:88:40:6d:fe:
88:90:fd:56:82:2c:57:2f:fb:ab:cc:55:84:c2:d9:23:12:53:
ee:71:ca:6a:20:22:1e:69:dc:08:15:e4:a5:9b:8f:11:b8:45:
0b:85:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:13 2025 by rpki-client