Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7GFUFUSUL3-mdMRHZZOA74b3czs.roa
File: 7GFUFUSUL3-mdMRHZZOA74b3czs.roa (raw, json)
Hash identifier: qRzf6haMHOWTA9os3XbAey/6rL8WaPEXqc4CNqo5ScA=
Subject key identifier: EC:61:54:15:44:94:2F:7F:A6:74:C4:47:65:93:80:EF:86:F7:73:3B
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019685F7C84A91BFA081BB28626A6CF113A8
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7GFUFUSUL3-mdMRHZZOA74b3czs.roa
Signing time: Wed 30 Apr 2025 09:12:10 +0000
ROA not before: Wed 30 Apr 2025 09:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Apr 2025 13:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:f7:c8:4a:91:bf:a0:81:bb:28:62:6a:6c:f1:13:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 30 09:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec61541544942f7fa674c447659380ef86f7733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:ca:10:b3:08:6a:20:70:e3:3c:38:d4:63:
b9:50:04:60:6f:b0:ee:ed:3f:87:0c:02:59:e5:47:
c1:a9:6d:7f:86:0a:f0:24:68:85:bd:55:88:fb:60:
d2:fa:2f:9f:ca:f4:aa:7f:5b:69:3b:ca:0c:ce:33:
fd:48:2a:2b:07:7d:96:4b:e4:f5:08:4c:38:63:89:
41:a1:f0:38:94:9d:88:f6:9e:54:ce:ec:8e:d5:38:
cf:2a:2a:1d:3f:7d:8e:56:70:ea:e0:9c:5d:d9:c9:
9a:73:91:cd:f1:bb:23:26:74:0f:4e:dd:4c:66:55:
33:78:66:c7:b8:b7:93:93:21:de:42:52:79:84:32:
57:3b:e4:97:9a:34:e0:96:45:82:17:30:06:89:37:
ff:06:06:7d:6e:4c:65:8b:f1:08:d7:5b:bd:55:f3:
a6:64:2b:fe:92:fe:67:ed:e8:ce:dc:26:d7:c4:b1:
f8:90:00:d5:b8:b0:b1:e0:57:f7:51:fc:fa:dc:5d:
2c:0a:f5:0e:f9:05:94:be:15:bf:49:bf:ff:c5:e9:
c8:18:b3:df:5a:b1:66:f8:51:af:f3:0a:cb:e7:7b:
ee:de:1f:b3:7d:f3:74:75:34:e8:9f:9d:89:a8:7a:
9d:9c:30:e7:d9:13:c5:0b:95:8f:62:d5:c8:4f:93:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:54:15:44:94:2F:7F:A6:74:C4:47:65:93:80:EF:86:F7:73:3B
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/7GFUFUSUL3-mdMRHZZOA74b3czs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
71:5b:12:21:d8:e3:f2:17:c7:f5:b1:b2:8e:94:cd:da:8a:f9:
20:ae:37:c2:f4:6f:ab:87:6a:92:33:e9:5a:7a:55:15:b4:13:
36:2e:8c:d3:b7:e2:fb:20:d1:a7:5d:b7:2d:d0:64:ef:17:0f:
90:07:23:c2:28:fb:65:35:bf:b9:ca:98:5a:f3:66:cd:a6:88:
e5:d0:6a:4f:7a:2c:ee:84:20:7c:f1:99:3b:dc:11:f2:18:0c:
a0:48:25:1f:15:1f:35:e0:ed:62:6e:bc:f5:c3:f4:73:c6:f4:
3f:bc:8f:a8:b6:b4:49:c7:0e:78:81:95:f5:d3:48:5b:46:66:
46:2a:a5:b3:81:27:e0:a6:60:2a:36:f7:ed:0f:c0:11:8b:98:
21:02:f4:07:8a:28:27:0b:49:77:c6:dc:dd:07:d5:c9:53:42:
91:20:ca:35:ad:45:ac:b1:65:e0:60:03:b4:f5:ef:9e:b8:e1:
aa:5d:55:8b:61:fe:fe:65:c2:5d:7c:0a:8d:07:c3:c3:8a:75:
8e:87:2e:79:57:7f:d1:f2:a7:3b:70:f5:30:73:0a:9e:c0:8d:
fe:13:61:a2:a8:c1:a9:48:02:68:e3:65:da:99:2c:f1:b3:06:
96:a9:54:09:7d:b1:3a:e3:eb:81:a9:dd:ea:27:84:b1:98:31:
05:3e:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:51:55 2025 by rpki-client