Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zwt-u0ZNVUscPnrA-XEzQ8pb-jY.roa
File: Zwt-u0ZNVUscPnrA-XEzQ8pb-jY.roa (raw, json)
Hash identifier: +cqJ+QE8w6pvL9pS8VWJ0yPR2Jqx3Jj7xC60S87u9dA=
Subject key identifier: 67:0B:7E:BB:46:4D:55:4B:1C:3E:7A:C0:F9:71:33:43:CA:5B:FA:36
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01968095EA75269A6954902C6F2B2B3DD9CA
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zwt-u0ZNVUscPnrA-XEzQ8pb-jY.roa
Signing time: Tue 29 Apr 2025 08:07:10 +0000
ROA not before: Tue 29 Apr 2025 08:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.120.0/21 maxlen: 21
82.177.122.0/24 maxlen: 24
82.177.127.0/24 maxlen: 24
82.177.130.0/24 maxlen: 24
82.177.132.0/23 maxlen: 23
82.177.133.0/24 maxlen: 24
82.177.140.0/23 maxlen: 23
82.177.144.0/20 maxlen: 20
82.177.160.0/24 maxlen: 24
82.177.164.0/22 maxlen: 22
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.168.0/21 maxlen: 21
82.177.176.0/21 maxlen: 21
82.177.177.0/24 maxlen: 24
82.177.179.0/24 maxlen: 24
82.177.182.0/24 maxlen: 24
82.177.183.0/24 maxlen: 24
82.177.188.0/24 maxlen: 24
82.177.191.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
82.177.208.0/24 maxlen: 24
82.177.244.0/23 maxlen: 23
82.177.247.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
82.177.254.0/23 maxlen: 23
88.220.0.0/17 maxlen: 17
88.220.32.0/21 maxlen: 21
88.220.40.0/22 maxlen: 22
88.220.44.0/24 maxlen: 24
88.220.46.0/23 maxlen: 23
88.220.48.0/23 maxlen: 23
88.220.50.0/23 maxlen: 23
88.220.52.0/23 maxlen: 23
88.220.52.0/24 maxlen: 24
88.220.58.0/23 maxlen: 23
88.220.60.0/23 maxlen: 23
88.220.64.0/22 maxlen: 22
88.220.65.0/24 maxlen: 24
88.220.66.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.48.0/22 maxlen: 22
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.0.0/23 maxlen: 23
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.36.0/24 maxlen: 24
195.136.38.0/23 maxlen: 23
195.136.48.0/22 maxlen: 22
195.136.48.0/24 maxlen: 24
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.112.0/21 maxlen: 21
195.136.113.0/24 maxlen: 24
195.136.114.0/23 maxlen: 23
195.136.120.0/24 maxlen: 24
195.136.122.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
195.136.248.0/21 maxlen: 21
195.136.252.0/24 maxlen: 24
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: Failed, certificate revoked on Tue 29 Apr 2025 10:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:95:ea:75:26:9a:69:54:90:2c:6f:2b:2b:3d:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 29 08:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670b7ebb464d554b1c3e7ac0f9713343ca5bfa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:6f:a3:d2:e9:9f:ae:d9:bd:f9:45:4c:c1:
e4:cc:ad:30:a6:b6:20:4b:9d:30:08:0c:73:bc:e1:
a0:2b:8f:da:98:c1:8b:03:b2:ee:8d:0e:cf:e9:ab:
55:ca:d9:be:25:9f:24:e2:a1:ca:dc:23:19:e8:5c:
fb:ba:51:33:9c:28:86:de:92:b8:d6:c6:44:0f:d4:
30:98:69:9a:96:28:bb:e1:0d:03:2d:c1:4e:95:9c:
6a:36:e6:20:4d:88:1c:4b:d0:a9:11:bb:f2:09:08:
9d:aa:2e:2a:d2:71:9b:e2:15:24:70:06:91:29:da:
0e:46:f1:09:c2:a1:05:47:c4:94:de:df:e2:b1:ec:
52:f9:9b:9b:80:f2:76:33:b0:c3:46:5b:15:29:44:
db:53:9e:3f:b1:85:4e:6b:3d:ed:83:2e:fb:03:0f:
e2:09:93:9b:f0:d2:4c:2d:12:57:46:63:b6:ca:7c:
19:a2:e2:43:29:6d:0a:4a:3a:85:53:3d:fc:fb:30:
e5:bd:76:0f:fe:07:b6:61:c5:ca:8b:8d:e9:b1:8f:
69:f2:bb:e6:0c:f3:59:d8:d2:41:68:61:e2:19:a1:
58:18:89:df:75:47:f5:43:49:7b:38:36:1b:80:d8:
d0:14:9b:52:90:ba:5e:a2:b8:f9:f7:cd:cf:9f:0e:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:7E:BB:46:4D:55:4B:1C:3E:7A:C0:F9:71:33:43:CA:5B:FA:36
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zwt-u0ZNVUscPnrA-XEzQ8pb-jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
3c:a4:ac:ad:86:5c:b4:22:cb:b8:30:8c:c9:b0:3d:15:ba:4b:
74:64:fe:00:44:70:4e:ba:62:93:28:76:1a:2f:92:07:ec:f3:
40:cd:be:a1:66:1c:27:06:9e:0a:a9:6b:e9:59:d0:9e:e4:3a:
fe:14:ac:9f:3b:65:d7:7f:35:9d:e9:87:70:08:c6:4a:58:1a:
60:3d:4f:8e:d2:84:16:53:28:79:18:b8:3b:3c:16:87:0e:af:
33:e3:e7:ae:6b:98:25:74:45:ea:a3:d1:de:d2:54:50:50:37:
ef:7a:74:08:f2:51:a4:1a:b9:60:3e:a3:fe:09:af:05:36:f4:
05:38:0a:95:97:b3:6e:b7:a5:c2:a1:3b:22:af:14:9a:74:2f:
27:17:3c:42:19:1a:35:f5:a4:19:27:aa:0e:f6:27:fe:64:47:
81:97:c7:7e:77:0e:d9:1f:6c:8e:33:43:49:8e:5a:b7:7e:ea:
17:29:bf:48:17:15:a6:d3:f1:97:71:60:91:db:ff:a6:94:44:
2b:98:7d:5e:c7:35:de:c2:ec:88:64:dc:e9:99:ef:bc:92:35:
78:d0:e6:bb:8b:b6:60:ee:50:09:f8:be:2d:9e:bb:e8:4e:13:
ce:ca:c9:56:e8:97:e7:fc:86:0c:f2:ba:35:88:fd:33:f0:de:
f3:89:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:40:05 2025 by rpki-client