Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/f4EyHUhIJ-qywNCURg3ZipV88fY.roa
File: f4EyHUhIJ-qywNCURg3ZipV88fY.roa (raw, json)
Hash identifier: fZbdBP1XSwSHaBmoueFhNLRxmNj0In5M+yJtEmiWCNQ=
Subject key identifier: 7F:81:32:1D:48:48:27:EA:B2:C0:D0:94:46:0D:D9:8A:95:7C:F1:F6
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 0196EC3EF24BF6683FAC3786249495E8D4AE
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/f4EyHUhIJ-qywNCURg3ZipV88fY.roa
Signing time: Tue 20 May 2025 05:51:10 +0000
ROA not before: Tue 20 May 2025 05:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29518
IP address blocks: 5.44.192.0/20 maxlen: 20
5.172.144.0/21 maxlen: 21
31.192.192.0/20 maxlen: 20
31.208.0.0/16 maxlen: 16
31.209.0.0/18 maxlen: 18
37.17.248.0/21 maxlen: 21
46.162.64.0/18 maxlen: 18
46.236.64.0/18 maxlen: 18
62.182.0.0/21 maxlen: 21
62.220.160.0/19 maxlen: 19
77.53.0.0/16 maxlen: 16
79.138.0.0/17 maxlen: 17
80.244.64.0/19 maxlen: 19
81.88.0.0/20 maxlen: 20
81.186.240.0/20 maxlen: 20
82.117.96.0/19 maxlen: 19
82.209.128.0/18 maxlen: 18
83.209.0.0/16 maxlen: 16
83.219.192.0/19 maxlen: 19
83.233.0.0/16 maxlen: 16
85.8.0.0/18 maxlen: 18
85.30.0.0/18 maxlen: 18
85.235.0.0/19 maxlen: 19
85.235.17.0/24 maxlen: 24
85.235.18.0/23 maxlen: 23
85.235.20.0/22 maxlen: 22
85.235.24.0/24 maxlen: 24
85.238.192.0/19 maxlen: 19
87.96.128.0/17 maxlen: 17
87.236.88.0/21 maxlen: 21
87.241.64.0/18 maxlen: 18
87.251.192.0/19 maxlen: 19
87.253.64.0/19 maxlen: 19
88.83.32.0/19 maxlen: 19
88.129.0.0/16 maxlen: 16
89.160.0.0/17 maxlen: 17
89.233.192.0/18 maxlen: 18
89.236.0.0/18 maxlen: 18
89.236.0.0/23 maxlen: 23
89.236.2.0/23 maxlen: 23
89.236.4.0/22 maxlen: 22
89.236.8.0/23 maxlen: 23
89.236.11.0/24 maxlen: 24
89.236.15.0/24 maxlen: 24
89.236.17.0/24 maxlen: 24
89.236.18.0/23 maxlen: 23
89.236.20.0/22 maxlen: 22
89.236.24.0/23 maxlen: 23
89.236.26.0/24 maxlen: 24
89.236.35.0/24 maxlen: 24
89.236.36.0/23 maxlen: 23
89.236.38.0/24 maxlen: 24
89.236.47.0/24 maxlen: 24
89.236.48.0/24 maxlen: 24
89.236.53.0/24 maxlen: 24
89.236.54.0/23 maxlen: 23
89.236.56.0/22 maxlen: 22
91.191.128.0/20 maxlen: 20
91.232.59.0/24 maxlen: 24
91.232.60.0/23 maxlen: 23
94.198.64.0/21 maxlen: 21
94.245.0.0/18 maxlen: 18
94.245.0.0/20 maxlen: 20
94.245.16.0/20 maxlen: 20
94.245.48.0/20 maxlen: 20
94.255.128.0/17 maxlen: 17
95.155.192.0/18 maxlen: 18
109.124.128.0/18 maxlen: 18
109.225.64.0/18 maxlen: 18
146.247.80.0/21 maxlen: 21
178.132.248.0/21 maxlen: 21
178.251.240.0/21 maxlen: 21
185.18.164.0/22 maxlen: 22
185.52.180.0/22 maxlen: 22
185.58.144.0/22 maxlen: 22
185.113.96.0/22 maxlen: 22
188.120.160.0/19 maxlen: 19
188.122.128.0/19 maxlen: 19
193.23.57.0/24 maxlen: 24
195.78.224.0/22 maxlen: 22
195.238.255.0/24 maxlen: 24
213.21.64.0/18 maxlen: 18
213.142.0.0/19 maxlen: 19
213.185.0.0/19 maxlen: 19
213.185.4.0/24 maxlen: 24
213.185.6.0/24 maxlen: 24
213.185.7.0/24 maxlen: 24
213.185.8.0/23 maxlen: 23
213.185.10.0/24 maxlen: 24
213.185.12.0/22 maxlen: 22
213.185.16.0/23 maxlen: 23
213.185.20.0/23 maxlen: 23
213.185.24.0/24 maxlen: 24
213.185.26.0/24 maxlen: 24
217.72.48.0/20 maxlen: 20
217.72.52.0/23 maxlen: 23
217.72.54.0/24 maxlen: 24
217.72.56.0/22 maxlen: 22
217.72.60.0/23 maxlen: 23
217.72.62.0/24 maxlen: 24
217.76.80.0/20 maxlen: 20
217.78.32.0/20 maxlen: 20
217.115.32.0/19 maxlen: 19
217.118.208.0/20 maxlen: 20
2001:9c8::/29 maxlen: 29
2a00:1598::/29 maxlen: 29
2a00:8280::/32 maxlen: 32
2a01:b700::/32 maxlen: 32
2a02:7b8::/32 maxlen: 32
2a02:23c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 21 May 2025 07:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:3e:f2:4b:f6:68:3f:ac:37:86:24:94:95:e8:d4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: May 20 05:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f81321d484827eab2c0d094460dd98a957cf1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:9c:c2:79:0f:a0:b5:0b:fd:1f:d8:ed:3c:
d9:56:2d:04:5e:1e:ae:be:f0:67:b6:1c:20:2d:d0:
95:ed:41:25:5c:a0:4e:30:bc:45:1c:47:b3:b5:12:
3d:84:61:99:48:b6:d3:fe:fd:ff:9a:28:70:56:a1:
e9:c0:f3:fb:5b:54:c5:cf:7a:87:2d:7a:9f:b5:14:
d0:02:f4:2b:80:a6:fa:6b:f8:02:a8:40:ee:90:da:
11:88:42:86:b6:bd:b1:82:64:7d:dc:ef:42:b5:78:
ad:0f:f8:75:9e:0c:a1:95:3d:f5:a3:a7:3b:4d:8c:
82:e9:b3:22:38:3a:dd:4b:b0:a9:4e:8f:62:3a:68:
10:ea:4f:ef:20:06:26:0a:f4:3b:0e:18:e7:63:dc:
bc:5a:4b:de:cf:5a:78:c8:0a:6d:66:e7:ea:26:28:
2d:a7:c8:61:41:f4:00:2b:06:c6:a7:25:02:87:db:
7f:03:df:12:b7:67:dc:d5:30:85:b4:4b:30:a2:21:
41:2a:49:9d:6b:9b:a0:64:79:1a:6d:a5:33:b4:73:
6c:3b:bd:df:1a:0c:17:6a:4b:a1:87:a6:27:5c:13:
ce:60:08:a5:75:8c:82:93:bc:c7:1c:3e:80:f8:da:
01:19:e9:8b:41:f0:24:ed:97:86:47:cc:db:59:b5:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:32:1D:48:48:27:EA:B2:C0:D0:94:46:0D:D9:8A:95:7C:F1:F6
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/f4EyHUhIJ-qywNCURg3ZipV88fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.192.0/20
5.172.144.0/21
31.192.192.0/20
31.208.0.0-31.209.63.255
37.17.248.0/21
46.162.64.0/18
46.236.64.0/18
62.182.0.0/21
62.220.160.0/19
77.53.0.0/16
79.138.0.0/17
80.244.64.0/19
81.88.0.0/20
81.186.240.0/20
82.117.96.0/19
82.209.128.0/18
83.209.0.0/16
83.219.192.0/19
83.233.0.0/16
85.8.0.0/18
85.30.0.0/18
85.235.0.0/19
85.238.192.0/19
87.96.128.0/17
87.236.88.0/21
87.241.64.0/18
87.251.192.0/19
87.253.64.0/19
88.83.32.0/19
88.129.0.0/16
89.160.0.0/17
89.233.192.0/18
89.236.0.0/18
91.191.128.0/20
91.232.59.0-91.232.61.255
94.198.64.0/21
94.245.0.0/18
94.255.128.0/17
95.155.192.0/18
109.124.128.0/18
109.225.64.0/18
146.247.80.0/21
178.132.248.0/21
178.251.240.0/21
185.18.164.0/22
185.52.180.0/22
185.58.144.0/22
185.113.96.0/22
188.120.160.0/19
188.122.128.0/19
193.23.57.0/24
195.78.224.0/22
195.238.255.0/24
213.21.64.0/18
213.142.0.0/19
213.185.0.0/19
217.72.48.0/20
217.76.80.0/20
217.78.32.0/20
217.115.32.0/19
217.118.208.0/20
IPv6:
2001:9c8::/29
2a00:1598::/29
2a00:8280::/32
2a01:b700::/32
2a02:7b8::/32
2a02:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:d7:24:5e:ab:fd:34:aa:78:b1:d9:30:67:1a:78:59:61:d0:
ec:55:9c:2d:e2:49:32:55:60:af:db:a4:8f:2b:a8:3f:63:3d:
f7:22:a1:dd:20:a4:28:90:c9:69:37:a5:4a:14:9d:41:8d:ed:
ec:b8:fc:74:e3:bc:67:37:29:3d:09:72:80:97:a6:7b:10:93:
ca:b4:74:be:39:0b:5c:e0:2a:8a:82:e0:3b:60:c8:d6:97:a9:
22:5b:37:a2:95:69:6e:b7:27:5b:95:b1:12:6e:13:85:ba:1e:
b7:0c:08:2a:1b:10:39:47:b6:37:48:02:76:3b:63:84:bb:31:
7b:6a:48:5f:35:16:2b:40:46:f1:e4:bd:77:37:e5:cc:0f:d6:
3f:d5:72:b1:78:8c:65:8f:03:c8:f2:7e:62:a3:37:e3:ae:c5:
e8:46:45:87:b6:8f:1e:36:62:74:fc:ec:c1:93:81:15:43:e6:
82:f4:cb:1a:7f:8a:6d:32:3a:18:48:0f:da:27:ed:d3:74:79:
41:77:5c:02:1e:a8:3c:f8:64:45:e9:96:97:c2:6e:5b:86:59:
92:db:8e:19:d0:76:b9:74:45:9f:46:f1:87:2b:a2:02:1d:5a:
ee:37:37:b7:cf:8e:39:f3:51:3a:f1:e3:b6:d3:4e:df:6f:48:
8c:0a:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:39:50 2025 by rpki-client