Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Kr2EWIM5-bAQ-GLf89_USyxrHf4.roa
File: Kr2EWIM5-bAQ-GLf89_USyxrHf4.roa (raw, json)
Hash identifier: rwFpfhmrlCRjkWamXuWdIMnU8jJzv8U50FIPYMaoJLE=
Subject key identifier: 2A:BD:84:58:83:39:F9:B0:10:F8:62:DF:F3:DF:D4:4B:2C:6B:1D:FE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01969FE81A6719E6E49DDE7A4503B6803121
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Kr2EWIM5-bAQ-GLf89_USyxrHf4.roa
Signing time: Mon 05 May 2025 10:05:10 +0000
ROA not before: Mon 05 May 2025 10:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
45.81.127.0/24 maxlen: 24
45.130.160.0/22 maxlen: 22
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.137.136.0/23 maxlen: 23
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.184.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.241.122.0/23 maxlen: 23
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 10:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e8:1a:67:19:e6:e4:9d:de:7a:45:03:b6:80:31:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 5 10:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2abd84588339f9b010f862dff3dfd44b2c6b1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:6b:b4:f6:8a:af:2d:bd:2f:60:90:22:82:
4f:2a:3c:2a:36:13:00:a4:83:ee:c0:ce:e7:72:52:
ff:65:47:78:da:3b:6d:05:ba:c1:58:d6:69:84:d3:
94:b2:e2:7e:0e:42:10:77:8c:1a:4b:40:98:c6:7a:
74:b4:d1:91:3b:e8:77:da:6e:cd:95:b1:86:9b:2e:
a0:21:a2:f4:5a:c3:53:3c:be:d9:9a:38:66:52:d6:
10:f6:6e:bf:2e:0e:4c:20:ac:a3:3c:58:a8:39:3a:
ee:1e:85:3d:f6:71:df:0a:c7:12:90:0c:76:d7:5d:
21:a0:e2:f8:66:df:43:da:17:6c:62:de:28:63:d2:
84:bc:a5:3f:c1:de:3c:33:18:57:e2:e4:ce:c5:75:
b9:66:b6:fd:0a:6d:5b:f8:94:87:49:18:90:99:3f:
be:c4:93:35:c3:1d:09:8a:a8:72:3d:c8:0b:ac:6e:
ad:87:1f:8e:38:19:92:85:34:93:48:f6:4b:8d:73:
b1:19:b3:97:41:c7:f6:69:cb:5d:41:d6:8a:e8:da:
a8:ee:5c:65:39:68:27:67:c3:8a:6d:60:55:80:fa:
fd:e8:db:fc:db:b1:57:73:0f:b2:4e:6e:74:37:83:
29:30:10:86:ef:50:c7:f5:35:49:6f:74:ee:ef:05:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:84:58:83:39:F9:B0:10:F8:62:DF:F3:DF:D4:4B:2C:6B:1D:FE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Kr2EWIM5-bAQ-GLf89_USyxrHf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.130.160.0/22
45.133.60.0/22
45.137.12.0/23
45.137.136.0/23
45.137.139.0/24
45.145.135.0/24
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.184.0/22
185.241.122.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a5:76:f4:d6:3b:c4:62:43:db:74:ad:94:61:48:21:86:03:
cc:79:6f:84:82:9b:fa:df:01:9a:f0:1d:02:1c:7b:32:1a:1c:
ac:0b:c2:5e:9b:80:5c:73:d4:8c:dd:ba:a0:96:65:2e:e7:77:
d8:a3:95:2d:f3:5f:aa:a6:3c:b2:27:99:c6:9a:e3:a3:6f:91:
cb:59:1f:db:f8:69:1a:8c:a0:58:89:3f:4d:d4:23:22:d7:a1:
62:9c:e7:46:59:5b:0f:8e:70:1d:ac:ca:0f:46:b0:ab:81:a2:
be:12:37:23:8d:3a:36:d4:9a:78:09:15:63:b6:b5:3a:62:a2:
0e:55:21:21:cb:b3:b3:ae:f2:1b:f1:e5:5a:d0:98:65:3b:bc:
32:e2:5e:7c:dd:81:45:95:0b:1e:e8:df:62:04:6d:12:30:33:
17:6a:27:b6:f1:2d:c7:36:93:a6:0c:72:05:09:c5:d7:d3:73:
08:f3:07:51:aa:c3:ec:c0:40:85:e2:8b:cb:88:eb:61:0b:e2:
de:5f:68:9a:75:ef:26:64:c1:a0:e8:c2:1e:a2:f3:3f:1c:76:
b5:30:57:97:f9:a1:0a:0c:94:d6:60:ca:42:60:72:a6:2e:f7:
92:58:f6:7f:7e:9e:9f:8a:7c:7a:e7:93:bc:3b:61:5f:76:84:
cf:0e:c9:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:47 2025 by rpki-client