Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QSt8SkpRWeGVNEm5_bYOu0qY91s.roa
File: QSt8SkpRWeGVNEm5_bYOu0qY91s.roa (raw, json)
Hash identifier: vv8TTYqkahzflvjoFW88wAG2Y7S/rTD3BxFHAp5JL0U=
Subject key identifier: 41:2B:7C:4A:4A:51:59:E1:95:34:49:B9:FD:B6:0E:BB:4A:98:F7:5B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01967C3D8C67CC166CB19BB45BD91E871B88
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QSt8SkpRWeGVNEm5_bYOu0qY91s.roa
Signing time: Mon 28 Apr 2025 11:52:10 +0000
ROA not before: Mon 28 Apr 2025 11:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.180.0/22 maxlen: 22
81.15.182.0/23 maxlen: 23
81.15.184.0/23 maxlen: 23
81.15.185.0/24 maxlen: 24
81.15.187.0/24 maxlen: 24
81.15.190.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.192.0/22 maxlen: 22
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.19.0/24 maxlen: 24
82.177.20.0/22 maxlen: 22
82.177.21.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.41.0/24 maxlen: 24
82.177.42.0/23 maxlen: 23
82.177.43.0/24 maxlen: 24
82.177.44.0/22 maxlen: 22
82.177.46.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.88.0/22 maxlen: 22
82.177.90.0/23 maxlen: 23
82.177.90.0/24 maxlen: 24
82.177.91.0/24 maxlen: 24
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.111.0/24 maxlen: 24
82.177.112.0/22 maxlen: 22
82.177.116.0/22 maxlen: 22
82.177.119.0/24 maxlen: 24
82.177.120.0/21 maxlen: 21
82.177.122.0/24 maxlen: 24
82.177.127.0/24 maxlen: 24
82.177.130.0/24 maxlen: 24
82.177.132.0/23 maxlen: 23
82.177.133.0/24 maxlen: 24
82.177.140.0/23 maxlen: 23
82.177.144.0/20 maxlen: 20
82.177.160.0/24 maxlen: 24
82.177.164.0/22 maxlen: 22
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.168.0/21 maxlen: 21
82.177.176.0/21 maxlen: 21
82.177.177.0/24 maxlen: 24
82.177.179.0/24 maxlen: 24
82.177.182.0/24 maxlen: 24
82.177.183.0/24 maxlen: 24
82.177.188.0/24 maxlen: 24
82.177.191.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
82.177.208.0/24 maxlen: 24
82.177.244.0/23 maxlen: 23
82.177.247.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
82.177.254.0/23 maxlen: 23
88.220.0.0/17 maxlen: 17
88.220.32.0/21 maxlen: 21
88.220.40.0/22 maxlen: 22
88.220.44.0/24 maxlen: 24
88.220.46.0/23 maxlen: 23
88.220.48.0/23 maxlen: 23
88.220.50.0/23 maxlen: 23
88.220.52.0/23 maxlen: 23
88.220.52.0/24 maxlen: 24
88.220.58.0/23 maxlen: 23
88.220.60.0/23 maxlen: 23
88.220.64.0/22 maxlen: 22
88.220.65.0/24 maxlen: 24
88.220.66.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.48.0/22 maxlen: 22
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.0.0/23 maxlen: 23
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.36.0/24 maxlen: 24
195.136.38.0/23 maxlen: 23
195.136.48.0/22 maxlen: 22
195.136.48.0/24 maxlen: 24
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.112.0/21 maxlen: 21
195.136.113.0/24 maxlen: 24
195.136.114.0/23 maxlen: 23
195.136.120.0/24 maxlen: 24
195.136.122.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
195.136.248.0/21 maxlen: 21
195.136.252.0/24 maxlen: 24
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: Failed, certificate revoked on Mon 28 Apr 2025 12:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:3d:8c:67:cc:16:6c:b1:9b:b4:5b:d9:1e:87:1b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 28 11:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=412b7c4a4a5159e1953449b9fdb60ebb4a98f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:6d:2d:af:eb:03:33:84:fb:60:61:ac:5f:
c4:b8:db:7c:15:50:c3:4e:a6:8a:72:c2:2d:ba:c5:
a1:4b:f9:bc:d6:72:47:7e:51:17:bf:ae:d3:71:9a:
d7:49:c8:f1:90:cd:f5:58:5f:60:14:5b:fb:ad:c8:
34:1f:63:68:88:bc:fb:b0:11:6c:6e:cc:e9:e6:83:
bf:56:2f:ba:5f:fb:e4:fc:c1:06:e3:03:52:2c:fb:
40:47:c1:e4:1a:2d:39:21:1b:72:8a:57:f6:ff:87:
7c:0d:59:e9:e1:4d:58:9f:42:d4:81:60:44:52:28:
07:72:3b:4e:53:c0:ad:54:f2:2b:e9:60:62:44:30:
f1:fa:64:49:7a:42:bc:76:0f:ea:0d:66:99:c4:ae:
fb:b2:17:58:c7:6c:6d:f9:ae:08:d2:6a:5b:cd:6b:
03:e2:90:3a:ed:6e:34:d1:15:b6:4f:16:ca:c0:a1:
f0:9a:67:d8:7b:bd:57:31:dd:a9:55:44:9a:de:21:
f0:0e:cb:57:3c:3d:48:28:06:53:66:12:11:24:7f:
58:ea:dd:0d:09:9b:2e:26:b6:b9:b0:97:3f:c8:6a:
66:0d:7f:57:ba:0b:5a:53:10:d0:c1:30:ca:d6:61:
09:0a:6d:9c:d3:30:54:50:4e:55:c2:8b:9d:86:43:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:7C:4A:4A:51:59:E1:95:34:49:B9:FD:B6:0E:BB:4A:98:F7:5B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QSt8SkpRWeGVNEm5_bYOu0qY91s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
31:14:bd:33:62:58:4f:99:89:5d:b5:eb:c1:12:92:be:25:56:
61:2d:de:39:0a:09:d7:d4:ab:6a:89:7c:da:41:4d:3a:88:3a:
e3:c3:a6:ff:61:a9:f1:95:c0:8d:c6:ca:74:a7:33:69:c1:aa:
5d:1f:fa:bb:23:b0:dd:f7:14:d4:af:bc:95:dd:9e:96:95:65:
a8:a9:55:08:91:6a:02:3b:95:78:b3:38:47:f4:ea:96:65:e6:
8c:6d:cb:19:8d:6a:06:fb:54:73:b0:7b:f9:f4:66:59:41:b5:
b3:ea:73:c5:b8:45:da:1e:74:c9:58:18:84:c2:c1:e6:24:23:
16:fe:b3:3f:5d:37:42:fc:69:3d:dd:d0:cc:6e:ba:3e:18:df:
92:0b:fc:a9:34:20:e0:cd:77:59:50:17:13:86:da:20:d3:44:
b1:47:11:95:ba:35:17:b4:9e:21:72:ff:09:94:bf:53:ba:90:
3a:ab:bf:2c:76:aa:11:78:59:73:0f:f6:c1:41:75:52:12:e0:
b5:84:a0:a4:51:cb:6c:c8:85:3d:88:dc:e5:9e:f6:22:9c:e0:
c1:93:f0:89:36:60:8b:45:e0:f2:de:5c:6b:ec:5a:83:a0:60:
8b:1b:7b:26:a4:73:c9:d2:02:f0:4e:be:94:c5:11:56:09:ab:
08:a8:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:49:01 2025 by rpki-client