Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-ZsVTTUzIuMmfVqKCHGlRE99qTU.roa
File: 1-ZsVTTUzIuMmfVqKCHGlRE99qTU.roa (raw, json)
Hash identifier: XMLkEZBNQEYMMvi2jb6VQtiRZaimbedzimzf4s/wZXw=
Subject key identifier: F9:9B:15:4D:35:33:22:E3:26:7D:5A:8A:08:71:A5:44:4F:7D:A9:35
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0196812B24BFB05EC104D6633FFC346A24F5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-ZsVTTUzIuMmfVqKCHGlRE99qTU.roa
Signing time: Tue 29 Apr 2025 10:50:10 +0000
ROA not before: Tue 29 Apr 2025 10:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/22 maxlen: 22
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: Failed, certificate revoked on Wed 30 Apr 2025 11:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:2b:24:bf:b0:5e:c1:04:d6:63:3f:fc:34:6a:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 29 10:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99b154d353322e3267d5a8a0871a5444f7da935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:47:d9:b8:a8:38:5b:6f:a1:18:5d:8b:e1:
e6:9d:8f:6f:c9:65:14:c6:c3:5d:f8:c1:e8:c5:8b:
2f:42:6e:36:1e:ce:4f:fa:f7:93:27:01:2c:12:c4:
00:23:f4:63:ea:3e:77:88:80:0b:cd:8a:1a:e5:78:
01:05:08:30:d5:d4:b0:9d:48:5f:59:01:b5:ec:7e:
8f:16:8e:c5:e1:19:5b:6c:ff:b5:9a:6c:76:9a:05:
ac:ef:5a:cb:83:6b:df:7d:5e:8f:fe:71:ff:47:b4:
be:4a:62:22:16:e4:43:ee:b9:e7:e0:60:bb:7b:4a:
ee:de:18:b7:76:70:bd:c8:90:a7:c4:e5:bd:a2:31:
6f:7e:0e:dd:1b:6f:d8:2f:e1:45:36:0c:4f:75:a6:
c5:f6:92:fa:97:e0:9f:66:13:bd:12:2e:7e:fc:1c:
15:ad:04:d4:a7:93:17:2f:a0:d3:af:e9:32:73:c6:
7d:59:81:7f:ba:a3:ef:29:7a:7c:1b:54:85:b7:79:
c3:bf:64:29:d7:0a:41:95:00:89:68:eb:5a:6d:0c:
d5:a1:fb:68:5e:39:91:6b:a2:66:7c:b4:a0:13:b9:
d4:3b:66:d6:f5:be:94:48:94:ef:d8:b5:55:cc:0f:
d0:48:7f:51:1e:b4:02:81:a4:46:39:73:b9:11:fb:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:15:4D:35:33:22:E3:26:7D:5A:8A:08:71:A5:44:4F:7D:A9:35
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-ZsVTTUzIuMmfVqKCHGlRE99qTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
c1:8c:9c:c0:04:5b:7f:ae:86:39:cb:44:4b:ae:d4:b6:9f:ae:
4f:da:8a:43:c0:6a:4c:cf:3a:00:a8:e9:41:4e:55:03:dc:1e:
bb:22:3c:a0:b5:ec:ce:53:47:ea:d6:14:b8:9e:54:e7:17:fc:
38:55:27:a9:95:3b:0f:c4:c7:5b:11:d2:22:43:b0:88:56:14:
65:1e:18:34:4d:3a:ec:14:e8:34:3f:13:67:11:49:16:60:f5:
80:2e:d9:e8:66:95:51:e0:24:4e:64:45:a7:85:6d:b2:c7:aa:
a1:e0:26:b4:8b:4c:d8:7d:dd:01:b3:7f:c7:fb:3d:0a:92:22:
13:51:59:cf:55:71:e8:cd:48:59:10:02:c9:28:9c:f1:de:be:
46:49:97:2b:3d:03:5d:3b:fe:d4:f1:1b:4a:4d:36:d6:70:91:
c4:d0:58:e8:7d:66:10:e1:92:c6:1d:f0:e3:b8:da:f0:ff:a5:
7a:fc:40:f5:23:c7:ad:2a:ab:ce:41:6d:b0:47:84:7b:e4:ab:
50:74:68:36:22:2d:c2:ad:6a:d0:9e:02:17:3a:8e:37:eb:c3:
04:f3:ee:52:1d:a9:a0:36:24:fd:92:7e:3f:69:47:68:aa:5b:
97:19:13:37:b1:e3:a3:7b:69:da:6c:87:83:40:41:10:34:c6:
53:0e:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:19:02 2025 by rpki-client