Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IWK3N6S70Q5EFd5FMoIjf4Cl9bc.roa
File: IWK3N6S70Q5EFd5FMoIjf4Cl9bc.roa (raw, json)
Hash identifier: bAeeYVOUzI0twR0kotzk4U7emK9pHkH98/nQTHsat4c=
Subject key identifier: 21:62:B7:37:A4:BB:D1:0E:44:15:DE:45:32:82:23:7F:80:A5:F5:B7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01975A53E979D35DD0473542B0C704C86FE6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IWK3N6S70Q5EFd5FMoIjf4Cl9bc.roa
Signing time: Tue 10 Jun 2025 14:52:18 +0000
ROA not before: Tue 10 Jun 2025 14:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.216.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.231.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.76.0/22 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.154.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jun 2025 16:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:53:e9:79:d3:5d:d0:47:35:42:b0:c7:04:c8:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 14:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2162b737a4bbd10e4415de453282237f80a5f5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:e6:f8:c1:9e:bf:59:56:66:a8:87:1c:f9:
ce:7a:12:0a:55:cd:27:92:9e:08:d6:ff:a4:9d:2c:
a3:a8:ac:47:47:c9:c1:93:3a:ec:06:af:73:4b:f7:
c2:2c:a2:f8:2e:8a:cd:df:d4:eb:68:44:99:aa:c3:
87:5c:cb:fe:e3:b3:1e:38:35:6a:d6:40:e4:34:78:
46:fb:fa:e7:a4:2c:4b:39:44:2c:e9:3d:1a:36:29:
61:c3:a5:c6:c7:26:af:69:01:fd:48:8a:b5:ae:15:
15:63:33:9f:7b:07:80:77:e9:cd:e0:ea:23:95:1f:
70:7a:fc:ff:62:3f:94:d4:d7:4e:44:77:1b:5d:7f:
67:31:d8:fc:5c:3f:b1:65:04:6e:92:06:f4:22:61:
e2:57:04:ab:33:c2:e9:db:f2:e3:f1:9f:64:ad:a0:
0c:a2:0a:90:85:d2:05:e6:4e:f5:c3:c6:47:41:5c:
e0:f1:6a:b8:5c:0a:b8:f3:b7:2d:86:f5:a9:48:33:
6d:fd:b3:5c:42:97:24:b0:e2:4b:1a:f1:b5:56:47:
10:d9:da:2e:bf:71:c1:1f:55:84:7e:9f:19:fc:76:
b1:04:6a:3d:d5:d5:67:59:d0:33:be:36:fc:7b:f7:
1d:bf:96:1c:b7:cd:3e:c2:86:d3:52:60:e3:c2:9e:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:B7:37:A4:BB:D1:0E:44:15:DE:45:32:82:23:7F:80:A5:F5:B7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IWK3N6S70Q5EFd5FMoIjf4Cl9bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.216.0/23
82.153.220.0/24
82.153.231.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.169.0/24
89.213.172.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.76.0-194.105.95.255
212.38.79.0/24
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.130.154.0/24
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:ab:06:e4:5e:61:70:a7:5c:6d:e1:7e:df:15:4c:47:78:ba:
a4:ea:cd:82:d8:2a:48:05:1f:1f:84:22:31:ef:35:10:33:b0:
a2:48:52:b7:a0:dd:13:df:76:78:8f:94:ea:e5:e0:73:e8:dd:
74:8e:cd:6a:07:bd:1f:bf:de:f1:a1:fe:e7:8c:dc:80:df:4a:
8b:5f:41:31:18:0f:a7:96:0f:75:56:82:1e:7d:23:2c:93:3a:
10:ef:d9:e3:e5:47:f1:c4:9a:67:e7:1c:88:e1:c3:4c:53:fb:
8d:69:8d:61:24:f8:0e:59:a8:90:ef:c2:0c:3f:78:40:52:af:
9c:53:55:46:7f:b0:44:36:35:f8:e8:68:06:ff:ec:3e:8c:32:
86:8f:88:87:f7:90:a4:70:78:c4:34:9e:a9:de:0a:d8:19:8e:
e1:c1:b6:5d:2a:8f:60:01:84:0d:26:04:34:b5:d5:c0:7f:17:
bd:93:29:7d:9b:de:11:91:b8:bc:81:2b:73:d9:76:ca:f2:4b:
56:82:17:df:19:c4:49:0c:9b:af:fa:9a:51:e7:76:b0:6a:30:
e7:1f:63:b7:33:7a:a7:e7:1d:d1:ab:06:49:90:9f:bd:e2:ee:
9a:c1:71:b0:b5:2c:d9:31:75:c2:5f:7d:54:e2:97:ef:0f:66:
36:57:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:10 2025 by rpki-client