Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ra33r7QIa8D41Uls5wXD9KqKyq4.roa
File: Ra33r7QIa8D41Uls5wXD9KqKyq4.roa (raw, json)
Hash identifier: I9lsWVNH5E2ARBBBULJLk2ZlRnFW7BCaiI5TDrLNWzs=
Subject key identifier: 45:AD:F7:AF:B4:08:6B:C0:F8:D5:49:6C:E7:05:C3:F4:AA:8A:CA:AE
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0196835E316D8E7F0CEF4B691652BC8CE568
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ra33r7QIa8D41Uls5wXD9KqKyq4.roa
Signing time: Tue 29 Apr 2025 21:05:10 +0000
ROA not before: Tue 29 Apr 2025 21:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Apr 2025 23:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5e:31:6d:8e:7f:0c:ef:4b:69:16:52:bc:8c:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Apr 29 21:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45adf7afb4086bc0f8d5496ce705c3f4aa8acaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:e5:09:cc:ba:b6:e8:a9:8f:9e:60:4f:b4:
35:42:da:53:8f:db:c5:49:b8:27:e4:72:12:cc:e2:
d0:eb:61:87:2d:23:30:db:ef:9e:9c:9a:1b:4a:e9:
c6:65:8d:f8:4b:11:1e:74:26:64:ca:53:c5:a5:5e:
57:32:f3:20:8c:f8:94:5c:75:2a:d9:6e:ac:3c:ce:
3f:a8:e2:00:ff:24:32:31:2a:b0:be:15:b2:6f:39:
91:02:6a:4b:2b:4e:53:c8:60:17:6f:0b:3b:10:f5:
e4:76:18:ff:28:7f:6a:61:82:ad:08:17:f9:04:b6:
78:2a:a0:3c:09:bf:2b:31:eb:d4:c3:77:0e:a2:35:
3c:12:03:58:0f:11:4e:41:70:51:d2:0f:89:cd:5d:
1a:52:4f:a2:b4:03:56:0e:8e:7e:b4:27:2d:5a:e1:
a7:14:be:41:d9:68:78:9e:da:04:02:3c:40:6f:bf:
d4:eb:43:0d:f7:d2:d1:ec:4d:31:95:99:f2:37:de:
a1:8a:80:92:50:2f:4f:23:e3:0d:14:d0:cc:86:61:
80:7f:dd:5f:02:44:05:9b:1b:59:32:7e:43:d7:bb:
84:fa:ff:76:84:da:95:18:9d:e9:83:65:dc:4c:06:
ac:4c:8b:73:c0:a4:e8:5b:cc:d3:eb:9a:22:16:08:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:F7:AF:B4:08:6B:C0:F8:D5:49:6C:E7:05:C3:F4:AA:8A:CA:AE
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ra33r7QIa8D41Uls5wXD9KqKyq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:5::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:72:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:9c:74:75:28:c9:a3:89:19:90:5f:8f:47:90:75:91:2a:f5:
57:f3:38:73:fc:7d:d8:c6:7c:83:27:79:f3:63:95:12:dc:91:
5e:38:da:f7:99:ae:64:51:f2:85:b9:11:93:dc:b6:1b:c2:9a:
9e:75:a4:e6:02:74:0a:d2:85:7b:73:21:1c:16:f7:4d:00:6c:
ea:80:2c:1a:2e:50:b1:6b:ce:1e:2f:9b:6d:eb:cc:18:05:bc:
ea:2f:36:7c:0b:6e:e7:e0:6a:cc:b9:cf:36:aa:83:ee:8b:3a:
89:b5:b5:ed:dc:8b:f0:d5:79:e0:56:15:8d:f3:41:a3:f5:61:
58:dc:1b:9e:63:44:08:c1:46:8a:da:16:56:62:29:74:04:71:
8a:23:dc:6b:01:9b:96:84:c7:59:b7:b7:6a:31:ba:a4:31:70:
35:69:0f:17:1b:0f:c1:f9:08:78:9c:12:d9:b0:9e:0c:6d:81:
42:80:b6:e5:15:67:38:90:cc:a7:d0:9f:f4:1b:e8:b4:aa:4d:
d9:47:10:70:03:5e:14:3b:ba:c5:9d:42:c7:00:da:ff:a8:91:
6b:23:07:ce:f9:19:80:99:96:67:97:47:93:12:06:be:bc:cb:
fb:5a:1d:7c:f9:7a:90:46:f3:d1:05:53:a1:a8:2c:2f:4c:55:
9a:44:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:59:28 2025 by rpki-client