
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa
File: 91F6gsKfRkkyzG79zr2Wf14cq54.roa (raw, json)
Hash identifier: OCwMB10ILsbbZgb3vxJeOUnNlQIqD51UlzCKqid/NZ4=
Subject key identifier: F7:51:7A:82:C2:9F:46:49:32:CC:6E:FD:CE:BD:96:7F:5E:1C:AB:9E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01969D080462DC39ED6DBFC76E1380525FA0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa
Signing time: Sun 04 May 2025 20:41:10 +0000
ROA not before: Sun 04 May 2025 20:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.12.0/24 maxlen: 32
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
2a00:f502:150::/44 maxlen: 44
2a00:f502:160::/44 maxlen: 44
2a00:f502:170::/47 maxlen: 47
2a00:f502:172::/47 maxlen: 47
2a00:f502:174::/47 maxlen: 47
2a00:f502:176::/47 maxlen: 47
2a00:f502:178::/47 maxlen: 47
2a00:f502:17a::/47 maxlen: 47
2a00:f502:17c::/47 maxlen: 47
2a00:f502:17e::/47 maxlen: 47
2a00:f502:180::/47 maxlen: 47
2a00:f502:250::/44 maxlen: 44
2a00:f502:260::/44 maxlen: 44
2a00:f502:270::/47 maxlen: 47
2a00:f502:272::/47 maxlen: 47
2a00:f502:274::/47 maxlen: 47
2a00:f502:276::/47 maxlen: 47
2a00:f502:278::/47 maxlen: 47
2a00:f502:27a::/47 maxlen: 47
2a00:f502:27c::/47 maxlen: 47
2a00:f502:27e::/47 maxlen: 47
2a00:f502:280::/47 maxlen: 47
2a00:f503:150::/45 maxlen: 45
2a00:f503:158::/45 maxlen: 45
2a00:f503:160::/45 maxlen: 45
2a00:f503:168::/45 maxlen: 45
2a00:f503:170::/47 maxlen: 47
2a00:f503:172::/47 maxlen: 47
2a00:f503:174::/47 maxlen: 47
2a00:f503:176::/47 maxlen: 47
2a00:f503:178::/47 maxlen: 47
2a00:f503:17a::/47 maxlen: 47
2a00:f503:17c::/47 maxlen: 47
2a00:f503:17e::/47 maxlen: 47
2a00:f503:180::/47 maxlen: 47
2a00:f503:250::/45 maxlen: 45
2a00:f503:258::/45 maxlen: 45
2a00:f503:260::/45 maxlen: 45
2a00:f503:268::/45 maxlen: 45
2a00:f503:270::/47 maxlen: 47
2a00:f503:272::/47 maxlen: 47
2a00:f503:274::/47 maxlen: 47
2a00:f503:276::/47 maxlen: 47
2a00:f503:278::/47 maxlen: 47
2a00:f503:27a::/47 maxlen: 47
2a00:f503:27c::/47 maxlen: 47
2a00:f503:27e::/47 maxlen: 47
2a00:f503:280::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 05 May 2025 10:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:08:04:62:dc:39:ed:6d:bf:c7:6e:13:80:52:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 4 20:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7517a82c29f464932cc6efdcebd967f5e1cab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:cb:7e:0c:04:34:09:59:46:bd:8f:62:30:
5c:80:5f:94:07:f4:ea:88:ab:83:11:14:90:dd:a1:
b8:91:6d:44:99:94:f7:27:65:f1:f9:90:13:0e:e6:
69:99:71:87:29:5e:3d:5e:98:94:99:48:a1:9e:7b:
3c:0b:54:cb:2d:f5:f2:cf:df:4f:ee:25:1f:83:1b:
18:68:fe:6c:f1:5f:8c:19:71:59:29:25:dc:c1:60:
7c:e6:07:fa:91:33:86:e3:18:38:60:ff:b5:d6:c5:
80:29:22:a6:cc:1c:a2:7b:bc:4c:47:3a:27:f3:9b:
14:6a:a7:27:cf:55:20:a9:11:60:69:01:0a:cb:bb:
d4:df:60:af:a0:30:c3:0b:81:61:50:9b:a2:dd:95:
52:d3:7a:cc:75:6e:95:a7:22:de:df:61:e0:2f:81:
9d:6b:74:9c:06:01:63:70:f4:d9:42:02:67:4f:96:
91:ea:46:37:09:43:e8:4a:6a:eb:4c:96:42:98:fc:
65:65:4f:d7:9d:1a:20:32:b7:04:ba:22:7f:53:0a:
6a:d3:bd:f6:91:97:30:fe:4d:db:4a:91:80:58:9e:
68:c0:66:dc:3a:1f:d9:5f:0e:e1:79:ac:19:f3:57:
50:4d:b6:5b:71:86:57:4d:1f:cb:ce:2b:ab:d3:88:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:7A:82:C2:9F:46:49:32:CC:6E:FD:CE:BD:96:7F:5E:1C:AB:9E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/91F6gsKfRkkyzG79zr2Wf14cq54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.97.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
04:91:5b:e5:e5:74:43:85:5d:32:6a:32:b8:d7:04:af:ed:23:
09:59:fe:0f:48:ac:98:a7:2f:d9:c7:72:d3:c5:a2:cc:cb:2c:
22:db:74:fe:8e:d5:b8:9b:c1:20:99:10:cb:7c:43:49:7a:49:
45:b8:00:a0:62:09:b9:f2:10:c3:b0:62:39:7e:4a:8f:1c:03:
5d:41:80:3b:ed:86:92:a2:94:7b:f3:dd:37:d8:1f:df:31:ec:
e6:53:ab:8c:88:21:c0:c7:b0:3b:27:b1:70:a0:b1:7f:93:5d:
30:fb:78:42:41:c5:29:e2:c6:7c:cc:48:f4:b6:a1:a7:07:f4:
48:65:0e:bb:dc:b0:ed:98:99:33:17:a4:d9:c6:f2:8e:bd:9d:
df:93:31:85:f2:90:cc:ae:9d:1f:fc:08:9c:93:19:95:74:3e:
39:04:da:ea:88:8e:03:4b:36:51:20:85:e8:36:57:47:5f:ba:
30:69:87:58:ef:15:43:58:0c:60:4e:af:79:2f:69:ef:94:fb:
d3:16:5b:f2:b4:23:07:8a:3f:d2:6f:9e:1c:56:4e:48:4a:a5:
5d:1a:a0:1e:12:d2:1a:46:a7:e3:03:5f:1b:19:1e:24:ea:4a:
54:f6:ce:85:53:74:fe:78:42:d9:96:e7:a7:c1:7d:97:26:f3:
98:1a:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:18:44 2025 by rpki-client