Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/4mlJBTPGIQGNGjUTFdebrykpL8M.roa
File: 4mlJBTPGIQGNGjUTFdebrykpL8M.roa (raw, json)
Hash identifier: 4sb/EULPsAcS+/FolLSTfL79T7zAHp1/9c7udivcjYg=
Subject key identifier: E2:69:49:05:33:C6:21:01:8D:1A:35:13:15:D7:9B:AF:29:29:2F:C3
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 01973096CA22E7A09728E349AA5DF1AB4139
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/4mlJBTPGIQGNGjUTFdebrykpL8M.roa
Signing time: Mon 02 Jun 2025 12:21:17 +0000
ROA not before: Mon 02 Jun 2025 12:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15685
IP address blocks: 77.78.76.0/22 maxlen: 22
77.78.76.0/23 maxlen: 23
77.78.76.0/24 maxlen: 24
77.78.94.0/23 maxlen: 23
77.78.95.0/24 maxlen: 24
77.78.96.0/20 maxlen: 20
77.78.112.0/21 maxlen: 21
77.78.118.0/23 maxlen: 23
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
81.0.214.0/24 maxlen: 24
81.0.217.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.228.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
81.0.231.0/24 maxlen: 24
81.0.232.0/21 maxlen: 21
81.0.240.0/22 maxlen: 22
81.0.240.0/23 maxlen: 23
81.0.250.0/24 maxlen: 24
81.0.254.0/23 maxlen: 23
82.208.4.0/22 maxlen: 22
82.208.6.0/23 maxlen: 23
82.208.8.0/22 maxlen: 22
82.208.12.0/24 maxlen: 24
82.208.14.0/24 maxlen: 24
82.208.16.0/23 maxlen: 23
82.208.16.0/24 maxlen: 24
82.208.17.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
82.208.26.0/23 maxlen: 23
82.208.27.0/24 maxlen: 24
82.208.28.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.34.0/23 maxlen: 23
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.44.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
85.239.227.0/24 maxlen: 24
85.239.252.0/23 maxlen: 23
85.239.252.0/24 maxlen: 24
109.123.192.0/21 maxlen: 24
109.123.202.0/23 maxlen: 24
109.123.205.0/24 maxlen: 24
109.123.206.0/23 maxlen: 24
109.123.208.0/22 maxlen: 24
109.123.214.0/23 maxlen: 24
109.123.216.0/21 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.235.0/24 maxlen: 24
217.11.236.0/24 maxlen: 24
217.11.242.0/23 maxlen: 23
217.11.242.0/24 maxlen: 24
217.11.246.0/23 maxlen: 23
217.11.248.0/23 maxlen: 23
217.11.249.0/24 maxlen: 24
217.11.251.0/24 maxlen: 24
217.11.254.0/24 maxlen: 24
2001:1528::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Jun 2025 14:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:96:ca:22:e7:a0:97:28:e3:49:aa:5d:f1:ab:41:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Jun 2 12:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e269490533c621018d1a351315d79baf29292fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:5d:9b:51:00:19:2a:f5:0f:6b:8c:d1:cc:
ba:d3:a8:e8:bf:69:2a:17:7e:c4:d2:83:73:b0:47:
2b:89:2d:c0:6a:f9:90:98:92:79:2a:6d:9b:13:56:
ca:69:d4:f5:cb:cf:ac:7f:d9:18:6d:b0:e5:cf:03:
f9:ab:20:a9:e6:0d:5d:f9:78:a9:a1:b8:69:0d:24:
10:29:83:0d:d0:5f:3e:7b:80:97:6f:cc:fd:b5:91:
ac:f1:d4:6c:6b:6e:e2:2d:73:68:c7:95:8c:4b:d1:
f0:2c:8f:36:b4:b4:7f:6d:72:1b:e8:3f:94:2c:6c:
99:c5:1f:85:cf:58:dd:51:b2:c6:70:8e:16:bb:32:
07:97:6f:53:18:fd:2d:e7:4f:8c:84:b3:36:35:17:
f5:17:dd:72:6f:d7:f9:3c:e6:0e:ce:fe:03:0b:36:
5c:25:6e:f7:17:a6:76:2a:16:76:7a:d8:c7:da:fc:
54:57:0a:d4:b4:fd:bd:95:53:c9:55:d2:2e:a4:73:
ee:52:0d:38:10:6f:2a:c4:29:35:73:c0:ee:fb:cb:
76:a9:f4:c3:41:f9:96:2d:3b:8a:6a:fa:cc:05:d8:
9d:98:fa:8d:e4:e4:19:99:1e:14:07:88:04:20:ea:
f3:aa:1c:cc:d2:ed:9a:8e:e8:15:ed:37:64:fe:a4:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:69:49:05:33:C6:21:01:8D:1A:35:13:15:D7:9B:AF:29:29:2F:C3
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/4mlJBTPGIQGNGjUTFdebrykpL8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.119.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.246.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
81:fd:5d:da:0e:fa:a7:01:10:d1:e6:93:f3:8b:e5:f8:18:f1:
59:89:25:32:45:3c:df:34:d3:69:83:67:d8:d0:df:ab:3c:b1:
ef:cd:ae:ba:aa:b4:01:d6:b3:ed:2e:43:9c:6c:a0:c5:13:6b:
46:4e:0a:a4:05:e7:62:5c:ad:97:a1:e8:88:85:61:26:56:bf:
93:23:72:50:a8:26:bf:37:70:6a:1e:fa:54:f0:71:48:a1:1b:
c2:5b:24:cb:fe:d3:33:ec:1b:4d:f4:d9:f2:58:e7:f0:4e:f6:
a2:c6:2a:19:0b:9d:af:8d:03:38:7b:d1:28:fa:4a:39:12:e8:
ee:7b:19:8c:28:8d:02:4c:bf:ec:18:ed:4a:0e:d0:64:02:e0:
6c:0c:59:71:03:16:4c:75:8c:a2:2a:63:27:60:c2:d7:23:a6:
17:66:a0:8b:7a:e3:48:95:81:24:5f:e8:3b:27:ad:0e:ea:ec:
fc:17:f1:6a:75:59:af:e2:e9:cc:03:03:ed:f7:83:0c:52:3b:
2e:08:d0:2e:3e:ad:c9:ef:58:00:73:36:c1:d8:a7:b9:c6:99:
66:ec:44:27:05:fb:cf:6a:ac:d8:53:89:37:fb:12:e8:c3:1c:
71:03:a4:2d:b4:af:1a:05:95:86:d1:40:a2:42:f3:6e:6f:26:
5b:63:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:55:43 2025 by rpki-client