Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-MZIZM2UHZjvE6DA0yOJ37nsCeU.roa
File: 1-MZIZM2UHZjvE6DA0yOJ37nsCeU.roa (raw, json)
Hash identifier: hFKg0XNyGF0ewGcZ0Tn1aGV4Cqfkh9ZMXrkoygUdaD8=
Subject key identifier: F8:C6:48:64:CD:94:1D:98:EF:13:A0:C0:D3:23:89:DF:B9:EC:09:E5
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019753EA5DFA31407D6809F4DD20109C9177
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-MZIZM2UHZjvE6DA0yOJ37nsCeU.roa
Signing time: Mon 09 Jun 2025 08:59:17 +0000
ROA not before: Mon 09 Jun 2025 08:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9125
IP address blocks: 5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.34.0/24 maxlen: 24
5.172.36.0/22 maxlen: 22
5.172.36.0/23 maxlen: 23
89.23.65.0/24 maxlen: 24
89.23.66.0/23 maxlen: 23
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.78.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.83.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
89.23.88.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.252.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
93.93.192.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.116.0/22 maxlen: 22
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.227.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.229.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.232.0/22 maxlen: 22
109.111.236.0/22 maxlen: 22
109.111.240.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
109.111.246.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.254.0/24 maxlen: 24
178.254.128.0/21 maxlen: 21
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.140.0/22 maxlen: 22
178.254.144.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.146.0/24 maxlen: 24
178.254.148.0/24 maxlen: 24
178.254.149.0/24 maxlen: 24
178.254.151.0/24 maxlen: 24
178.254.152.0/24 maxlen: 24
178.254.153.0/24 maxlen: 24
178.254.154.0/24 maxlen: 24
178.254.155.0/24 maxlen: 24
178.254.156.0/24 maxlen: 24
178.254.157.0/24 maxlen: 24
178.254.158.0/24 maxlen: 24
178.254.159.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.168.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.187.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
185.157.44.0/24 maxlen: 24
193.104.68.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.216.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.220.0/22 maxlen: 22
2a02:b58::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Jun 2025 13:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:ea:5d:fa:31:40:7d:68:09:f4:dd:20:10:9c:91:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 9 08:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c64864cd941d98ef13a0c0d32389dfb9ec09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:4d:9f:e4:f5:52:b6:c2:5b:d8:d6:f0:2c:
4e:fc:16:1f:fa:6f:76:84:bb:77:45:b6:bf:46:1f:
5e:b9:c9:63:df:c5:8a:ff:b4:2d:72:f5:97:b2:17:
1a:08:12:79:ff:8a:b1:fa:8c:21:ec:18:a5:54:d7:
f2:8d:00:7b:53:12:f8:ce:55:cd:01:db:11:bc:8e:
32:35:3a:83:b9:28:62:ce:51:35:6c:80:b1:3a:a3:
e6:c5:ea:bf:09:58:85:59:30:51:94:2f:e7:34:0b:
d0:a2:87:47:df:7a:ad:03:77:4b:d0:14:5d:05:41:
72:8e:4d:58:e1:d4:3d:ce:92:8c:a7:ed:c5:dc:fa:
35:ba:d5:d0:e7:54:27:62:f2:71:53:88:b2:e6:91:
52:8b:54:ae:1f:8f:a6:d5:bf:e7:29:d2:b1:c4:70:
af:d2:f5:3e:0e:b4:80:d8:40:b3:fc:4b:5b:53:af:
2c:0c:f5:34:e3:20:fb:4a:12:82:88:85:cb:3b:d6:
cc:af:32:9b:61:b3:ad:f9:66:ba:c3:03:3a:8d:d5:
d3:aa:b3:08:ad:68:b1:70:4f:3a:74:bd:a6:3d:0f:
52:f3:0c:ec:34:d7:a9:61:38:96:30:fd:00:0e:32:
ce:48:be:24:a7:6b:25:a5:87:ac:5f:17:46:1c:d0:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:48:64:CD:94:1D:98:EF:13:A0:C0:D3:23:89:DF:B9:EC:09:E5
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1-MZIZM2UHZjvE6DA0yOJ37nsCeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0-89.23.70.255
89.23.74.0/23
89.23.77.0-89.23.79.255
89.23.83.0-89.23.84.255
89.23.86.0/24
89.23.88.0/24
89.23.90.0/24
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.250.255
109.111.252.0-109.111.254.255
178.254.128.0-178.254.146.255
178.254.148.0/23
178.254.151.0-178.254.159.255
178.254.163.0/24
178.254.165.0/24
178.254.168.0/23
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.184.255
178.254.187.0-178.254.191.255
185.157.44.0/24
193.104.68.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
01:b0:0e:73:50:55:79:31:12:9c:ae:7c:3b:a3:64:53:db:c2:
e7:70:c7:8d:4d:5f:22:e1:d1:f8:ad:6b:0d:0f:e2:8b:6b:da:
04:6d:7c:64:bb:93:d4:9f:e3:7e:cc:12:44:36:b9:02:58:63:
a2:26:9f:25:1a:4b:de:c9:17:83:f4:f9:20:c9:57:7f:12:89:
b7:13:41:51:91:d9:1b:d0:31:9a:cb:ea:da:e1:b4:8b:d3:d6:
bf:e3:51:f7:b1:df:eb:dc:24:fc:d6:03:be:f8:c4:4b:da:d8:
5b:5b:11:bf:e2:bd:60:6c:d3:fc:e6:ae:58:da:9b:2e:14:33:
e8:3f:c1:4d:7d:2c:9e:25:2f:f8:4f:5b:79:67:5b:e4:35:75:
ce:56:65:7d:8b:cb:75:40:0f:a6:1c:4c:4b:cd:30:1c:39:48:
6e:f2:5d:97:4e:d0:2e:f7:0d:9c:36:64:6e:48:6c:fb:e0:6b:
85:c2:0c:e1:7a:83:f4:1e:ad:3c:47:d8:1f:b4:5f:58:0f:96:
fe:48:b2:f8:dc:79:5a:ad:44:95:50:9d:85:1f:a9:92:54:52:
f2:66:f2:3a:2a:f4:03:ef:4c:ad:9d:5f:6f:ec:7d:4f:36:9a:
c4:c1:2c:4f:4a:2f:de:82:be:7e:79:32:2d:34:f3:e6:1d:f6:
d5:01:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:59 2025 by rpki-client