Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/znHMJRlsqVVfVjXDyynGJL7F_lc.roa
File: znHMJRlsqVVfVjXDyynGJL7F_lc.roa (raw, json)
Hash identifier: +XQHA1tP+fqcafn6ebGosg3DSCWNtIKjkY6gp4dN/M4=
Subject key identifier: CE:71:CC:25:19:6C:A9:55:5F:56:35:C3:CB:29:C6:24:BE:C5:FE:57
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0196810C04717EC327BD51E6E68A9E27015C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/znHMJRlsqVVfVjXDyynGJL7F_lc.roa
Signing time: Tue 29 Apr 2025 10:16:10 +0000
ROA not before: Tue 29 Apr 2025 10:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.132.0/23 maxlen: 23
82.177.133.0/24 maxlen: 24
82.177.140.0/23 maxlen: 23
82.177.144.0/20 maxlen: 20
82.177.160.0/24 maxlen: 24
82.177.164.0/22 maxlen: 22
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.168.0/21 maxlen: 21
82.177.176.0/21 maxlen: 21
82.177.177.0/24 maxlen: 24
82.177.179.0/24 maxlen: 24
82.177.182.0/24 maxlen: 24
82.177.183.0/24 maxlen: 24
82.177.188.0/24 maxlen: 24
82.177.191.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
82.177.208.0/24 maxlen: 24
82.177.244.0/23 maxlen: 23
82.177.247.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
82.177.254.0/23 maxlen: 23
88.220.0.0/17 maxlen: 17
88.220.32.0/21 maxlen: 21
88.220.40.0/22 maxlen: 22
88.220.44.0/24 maxlen: 24
88.220.46.0/23 maxlen: 23
88.220.48.0/23 maxlen: 23
88.220.50.0/23 maxlen: 23
88.220.52.0/23 maxlen: 23
88.220.52.0/24 maxlen: 24
88.220.58.0/23 maxlen: 23
88.220.60.0/23 maxlen: 23
88.220.64.0/22 maxlen: 22
88.220.65.0/24 maxlen: 24
88.220.66.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.48.0/22 maxlen: 22
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.0.0/23 maxlen: 23
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.36.0/24 maxlen: 24
195.136.38.0/23 maxlen: 23
195.136.48.0/22 maxlen: 22
195.136.48.0/24 maxlen: 24
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.112.0/21 maxlen: 21
195.136.113.0/24 maxlen: 24
195.136.114.0/23 maxlen: 23
195.136.120.0/24 maxlen: 24
195.136.122.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
195.136.248.0/21 maxlen: 21
195.136.252.0/24 maxlen: 24
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: Failed, certificate revoked on Tue 29 Apr 2025 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:0c:04:71:7e:c3:27:bd:51:e6:e6:8a:9e:27:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 29 10:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce71cc25196ca9555f5635c3cb29c624bec5fe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:cf:fb:8f:96:d2:b9:28:f0:d2:36:3a:8e:
dc:c0:3c:25:8e:ce:5c:0c:84:e8:7c:a1:19:a6:dc:
bb:e5:dc:a5:7f:00:02:4f:2a:38:ad:6a:56:24:6a:
92:8b:6b:bc:a0:e3:8d:ff:a1:84:0c:74:58:1a:96:
ba:d4:93:4e:eb:29:f2:55:ff:91:d9:88:ce:61:61:
b4:79:63:f0:3b:99:96:6d:e4:8b:06:a7:ee:4b:07:
0b:66:fe:22:1f:dc:21:8c:ae:8d:5a:70:f4:4b:86:
bb:3c:b8:07:ce:c2:5f:f3:6a:31:89:81:1e:b2:22:
c0:88:c8:e3:f3:f1:eb:2c:17:35:bf:81:a9:02:e7:
c6:99:c2:c2:94:26:ab:c6:87:45:31:78:83:29:f6:
84:9f:6f:b8:d7:fa:20:9d:d2:21:07:15:fd:b1:36:
0d:e8:4b:6b:10:24:95:6f:0c:bf:97:5b:f5:e1:f1:
eb:f0:f0:9d:21:37:d8:d1:b8:d3:ee:8f:0f:42:b0:
de:d3:e3:cb:d8:4d:98:42:0c:e1:38:de:02:70:44:
fd:43:f9:a6:8a:8f:6e:b7:8e:f3:c3:52:f4:0f:cd:
88:f0:91:8d:3f:4d:e9:23:09:18:90:6d:62:68:b9:
44:2c:99:57:13:a8:60:e1:9b:8c:13:ab:8d:9e:c8:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:CC:25:19:6C:A9:55:5F:56:35:C3:CB:29:C6:24:BE:C5:FE:57
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/znHMJRlsqVVfVjXDyynGJL7F_lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
62:42:d6:1f:d7:72:b6:f9:b3:a7:84:ea:ef:a3:7a:9a:79:cc:
01:90:ae:5b:4c:cc:ad:ea:7f:c3:d1:31:75:24:1d:48:85:71:
4a:ff:c5:91:c6:91:08:a2:5b:f0:18:86:e1:11:fe:ac:b4:cc:
20:96:7d:38:8e:ad:a7:6e:e9:39:f6:50:2c:7d:69:51:4a:9f:
21:60:e9:b9:ef:a1:57:c7:28:32:22:f4:d3:69:f3:a0:9e:26:
1a:58:08:98:01:aa:d9:0e:c1:f0:bc:75:b6:91:4e:45:62:05:
5f:0f:ae:ce:5b:0b:fe:73:7f:91:75:ec:55:ce:d8:9a:34:43:
e7:18:a3:04:61:30:61:ef:80:09:09:e1:b8:cf:ec:fa:ff:5f:
ff:b1:52:6e:96:46:25:98:8e:ea:9d:58:1a:34:bf:4c:e1:ca:
fe:04:df:9e:51:87:2c:3b:cd:79:cf:71:78:52:5d:ae:9d:1a:
6e:cb:8d:6e:59:b5:5d:f8:03:0b:4e:06:3a:82:0d:43:7d:4c:
a1:f8:84:cf:81:64:ca:da:cc:67:37:a7:a9:9e:59:f2:51:ed:
78:39:20:0e:de:80:a4:7a:27:f0:db:57:f1:ce:59:3c:9a:11:
2c:40:8e:46:c6:97:b7:bc:b8:ed:a6:89:33:62:a6:31:4f:d8:
bc:59:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:39:57 2025 by rpki-client