Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5COXfAwvTosoHI2jru8PunxWjAg.roa
File: 5COXfAwvTosoHI2jru8PunxWjAg.roa (raw, json)
Hash identifier: yVp6S9ln/lZ1l15b1FCUbBLKzQujLewdOfzeKCNlgc0=
Subject key identifier: E4:23:97:7C:0C:2F:4E:8B:28:1C:8D:A3:AE:EF:0F:BA:7C:56:8C:08
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0195A92D8E380A5DEB13114CBD9AC7AF410E
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5COXfAwvTosoHI2jru8PunxWjAg.roa
Signing time: Tue 18 Mar 2025 12:14:49 +0000
ROA not before: Tue 18 Mar 2025 12:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Mar 2025 14:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:2d:8e:38:0a:5d:eb:13:11:4c:bd:9a:c7:af:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Mar 18 12:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e423977c0c2f4e8b281c8da3aeef0fba7c568c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:4b:85:5e:31:c0:fd:c5:17:16:d3:ee:e9:
88:84:0b:2e:d7:cf:85:04:60:c1:3f:2f:f7:eb:3c:
a9:de:1e:3e:97:00:21:83:ef:31:f2:7c:e6:84:3c:
77:96:87:67:13:04:91:57:74:ae:ed:25:96:6c:da:
5b:89:3a:39:8d:5f:9c:36:93:f9:ca:28:66:ee:98:
3b:c6:69:0d:e7:c8:03:25:16:d7:a8:74:c1:b8:6f:
11:d8:0a:8d:56:a0:09:6f:81:a3:a1:57:ea:83:62:
89:ac:9e:64:54:75:6a:50:3e:67:ed:fb:c7:d3:92:
eb:20:de:ee:7a:42:3c:22:59:3e:80:9a:ad:45:ce:
d1:1a:17:b3:12:cd:fe:6b:60:72:a2:a3:75:1e:1c:
4c:cf:90:29:bc:b5:22:f5:3b:a8:f3:98:8b:e8:10:
ca:39:8f:0d:3c:af:b9:18:64:6d:93:e3:01:fd:42:
c0:f9:f6:a5:f3:82:ac:76:80:b1:59:f9:70:00:96:
c2:ce:d6:81:c4:64:68:b1:5f:68:2d:43:4f:81:fc:
c1:6c:a9:c2:32:c2:fb:56:c6:02:b4:a7:66:df:63:
90:3f:bb:72:2e:9f:d8:70:76:21:04:80:a7:f6:43:
76:5c:25:ba:9a:d3:91:76:61:55:e7:d0:87:de:4d:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:97:7C:0C:2F:4E:8B:28:1C:8D:A3:AE:EF:0F:BA:7C:56:8C:08
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5COXfAwvTosoHI2jru8PunxWjAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/30
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
42:bf:8e:c9:51:dd:e2:42:25:44:21:bf:b5:a1:ec:e2:22:2f:
d3:a7:e0:e8:40:27:3d:10:50:60:af:af:89:27:83:b0:de:29:
fb:e6:f7:cd:b7:8b:3f:61:e7:d5:0c:10:e3:76:33:39:ea:cc:
1b:94:f7:a3:d0:ca:17:ec:25:1f:e3:cb:0f:84:59:62:2a:f8:
23:1b:51:ff:77:2d:64:f0:0d:25:b2:58:92:c2:11:58:c7:6c:
af:ba:54:07:2d:51:43:3e:8e:99:75:3a:c3:da:6b:16:18:69:
d4:be:2b:6a:bd:e9:75:a4:d2:24:a6:cf:45:08:08:4b:14:33:
47:49:0d:86:bc:51:06:72:47:d3:68:7a:92:e4:f7:51:a9:d4:
cf:b2:99:91:8c:e1:bd:13:20:f9:94:3e:b7:c7:6e:c9:aa:76:
9c:4a:0a:8e:c5:7a:55:f1:d1:4f:30:49:67:8c:93:41:ed:98:
44:06:e2:f0:f5:5c:2d:d7:ba:55:b7:f2:6c:0f:ec:c4:6b:15:
23:8a:1e:fe:aa:49:16:e8:da:a1:6e:d4:5e:92:a7:ac:ea:b0:
dc:56:59:10:de:c8:2d:08:f7:29:71:a7:a0:cc:d3:6e:1d:27:
1b:0c:3d:d6:10:e1:88:e1:d7:20:82:3e:7b:10:5f:94:46:59:
8c:f1:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:27:30 2025 by rpki-client