Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xHxer9T7X8eHrAZ_vTp_8f8c2j4.roa
File: xHxer9T7X8eHrAZ_vTp_8f8c2j4.roa (raw, json)
Hash identifier: NM57KEf4p0xSzN15m44Yus2vWFVwvyr9aGDDEcoLuVs=
Subject key identifier: C4:7C:5E:AF:D4:FB:5F:C7:87:AC:06:7F:BD:3A:7F:F1:FF:1C:DA:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019759CE3E7A09CBF9CC0EECA2C69B0CED2A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xHxer9T7X8eHrAZ_vTp_8f8c2j4.roa
Signing time: Tue 10 Jun 2025 12:26:18 +0000
ROA not before: Tue 10 Jun 2025 12:26:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ce:3e:7a:09:cb:f9:cc:0e:ec:a2:c6:9b:0c:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 10 12:26:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c47c5eafd4fb5fc787ac067fbd3a7ff1ff1cda3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:a7:e7:28:44:69:8f:99:96:05:01:02:07:
3b:2e:cc:c9:08:07:a0:00:c7:f0:ce:f3:3f:76:64:
db:e9:98:3c:22:67:74:c7:c1:1e:f3:8b:38:a3:09:
8e:e8:a5:1c:9b:24:30:f6:f5:0b:6d:60:23:9e:ab:
51:1d:16:1b:5a:38:7b:3a:45:37:61:ff:c8:ea:62:
dd:ff:a2:fc:e9:a5:56:02:c9:f6:87:f7:b0:51:23:
da:6a:0d:58:b3:89:65:07:85:26:84:18:21:52:df:
a5:f2:02:a1:6a:7a:b0:8e:90:92:b4:fb:3d:ee:94:
f9:d7:d0:e7:c9:b4:95:2c:ce:2f:85:3a:57:e8:ac:
f7:80:5f:6d:3a:15:45:ba:d5:4b:0e:6e:20:36:6a:
6c:5e:78:c5:3e:eb:c0:cc:e8:13:6f:aa:57:1d:3e:
ce:c5:4f:38:c9:99:d2:41:7a:d8:a9:7b:4f:c3:e9:
12:1a:38:a5:ef:b9:eb:23:ee:e7:3b:fe:1f:9a:23:
4a:ef:d2:cc:aa:01:98:7e:cf:16:94:fc:24:66:4c:
50:7c:50:c0:51:6d:45:ae:51:fc:7a:1d:65:4a:0a:
9d:de:da:20:81:5a:08:e1:71:ad:aa:15:fa:a5:6d:
f9:dc:09:50:5a:6a:4e:5f:4b:bd:a0:c0:69:a1:6b:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:5E:AF:D4:FB:5F:C7:87:AC:06:7F:BD:3A:7F:F1:FF:1C:DA:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xHxer9T7X8eHrAZ_vTp_8f8c2j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:37:6d:01:f5:74:34:4f:a5:e0:18:87:4c:c9:3a:b3:35:91:
30:29:6a:cb:5d:8a:5a:66:f5:0b:60:ab:a1:69:93:1f:2a:5c:
ce:ce:c7:74:00:23:4a:5b:3b:1c:3d:b1:1f:f4:cf:5c:f8:9e:
20:ae:2f:2a:1d:9f:8f:64:05:7c:d8:93:cf:32:fd:c4:b3:7b:
2e:88:f7:dc:a3:f0:00:a9:4e:6f:42:c1:2f:02:29:a4:52:83:
27:a9:ba:41:d9:99:e7:7c:c2:10:36:b1:3a:21:81:44:87:5c:
0b:e2:c5:69:7e:c8:0d:86:5f:39:09:15:ab:e2:95:f4:38:e7:
a2:69:d7:a3:1d:18:72:14:63:8e:c1:d1:42:a2:e8:68:60:2d:
f6:e1:80:27:e2:7c:8a:9e:db:68:d7:6f:4f:f1:6b:82:5e:95:
70:b5:04:e6:e1:33:dd:30:12:ed:4d:a3:98:b1:0a:0a:18:69:
29:53:21:2d:7b:a6:a9:c5:ca:5e:a5:e6:a2:7e:7a:9a:6c:a5:
58:e4:93:ad:95:f0:e1:a3:87:b0:f4:31:e1:ec:b1:a2:12:f0:
51:5d:fb:a1:14:d3:22:9d:f5:5b:a8:d9:df:38:bd:ac:57:04:
68:ee:cb:0b:0c:2d:d6:50:40:88:99:01:b7:a6:d5:e4:ec:ba:
20:55:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:13 2025 by rpki-client