Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VWmma6mmJgHt49d8mIP-DwBZHsM.roa
File: VWmma6mmJgHt49d8mIP-DwBZHsM.roa (raw, json)
Hash identifier: WhcUGyyDbYi8xqBgMtkwmwmN5v749ZqYIVwmn+zMyQ0=
Subject key identifier: 55:69:A6:6B:A9:A6:26:01:ED:E3:D7:7C:98:83:FE:0F:00:59:1E:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196B8D0C1D16C8F6CE3A541AB9EA5C766F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VWmma6mmJgHt49d8mIP-DwBZHsM.roa
Signing time: Sat 10 May 2025 06:10:10 +0000
ROA not before: Sat 10 May 2025 06:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.31.192.0/22 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 09:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:d0:c1:d1:6c:8f:6c:e3:a5:41:ab:9e:a5:c7:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 06:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5569a66ba9a62601ede3d77c9883fe0f00591ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:25:72:9e:d7:de:d2:19:3e:56:a8:e8:4d:
16:90:d1:15:70:91:f0:d4:07:97:a0:f0:e0:6d:81:
eb:cc:53:76:e9:8b:8f:76:f3:d0:6b:78:a0:6d:58:
bd:e2:d9:2a:cf:0d:61:55:72:d4:30:c7:fc:54:18:
63:ac:bd:08:aa:4f:0f:ed:02:fb:bb:a3:b4:f9:89:
74:4b:29:a9:fc:76:b9:b2:4a:1e:de:7b:d6:23:3a:
25:15:1c:9b:ed:5f:30:fd:a3:d9:f6:74:8a:e6:63:
57:1a:f0:ad:90:70:08:fe:3e:ac:ea:08:93:da:80:
27:bd:d2:5e:3e:5e:c1:2b:c7:27:1f:ba:20:a4:00:
af:69:1b:46:53:fe:30:0a:62:02:71:87:07:af:78:
3a:11:01:5a:9e:1e:82:ea:71:81:ad:b5:da:fe:7e:
e3:41:8b:b6:dc:63:07:d6:79:80:a5:36:36:ce:05:
fa:5d:7d:55:62:1b:79:b4:05:dc:6b:c6:0e:8f:ee:
ab:56:25:1f:ff:48:75:fd:08:21:bb:bc:94:f2:80:
7e:71:e6:92:69:e8:03:31:1c:ed:8c:fd:3d:ac:2e:
1a:9f:aa:79:a8:90:81:58:5a:08:7e:29:93:6d:36:
7f:e9:f7:4b:58:a9:e7:b9:8b:35:23:a7:f3:04:42:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:A6:6B:A9:A6:26:01:ED:E3:D7:7C:98:83:FE:0F:00:59:1E:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VWmma6mmJgHt49d8mIP-DwBZHsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.31.192.0/22
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/23
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
194.55.186.0/24
194.169.172.0/24
194.169.175.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bb:50:f4:28:74:f6:61:f7:cc:f2:49:64:3f:e8:49:5d:1c:
79:d5:34:14:f3:49:d4:bd:8b:41:e0:df:04:23:10:61:9f:ff:
85:09:3a:85:14:c7:1d:cc:6d:d3:9e:ef:31:a6:43:70:f3:70:
f0:35:7f:29:bb:45:e2:23:ee:b1:d1:73:b6:1d:05:23:ad:32:
b6:80:59:bf:87:9f:d0:26:f8:ef:d8:ad:37:79:73:1f:69:a6:
0d:54:e4:72:b3:4b:b0:f6:99:8f:18:b0:49:c7:f0:63:b4:42:
fd:85:c7:d1:a1:71:dd:cb:04:e1:ef:c1:c7:6e:87:a9:fe:7e:
cf:55:f1:be:6f:38:73:ab:75:83:49:9f:4a:3f:e1:70:15:05:
4a:24:f2:be:23:24:6a:7f:6f:33:e2:f6:98:45:64:b5:ea:92:
9a:ef:1b:3b:e4:6f:e4:4c:66:cf:99:6c:91:e1:af:85:92:2f:
30:e8:87:31:df:7b:e7:a2:4d:ea:07:07:57:26:6f:2f:40:8b:
a9:62:61:e2:ef:80:2b:36:5d:35:62:7c:43:07:c7:ad:c8:b4:
15:72:6d:35:f0:0e:1a:6f:b2:c3:63:29:a1:5b:62:71:57:39:
82:26:48:87:5f:d9:82:8b:52:0d:2b:3f:75:39:8e:31:09:ba:
d3:5b:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:02:55 2025 by rpki-client