Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/4QfdOfWyN5Vn4RRGY0kjSBEvoQg.roa
File: 4QfdOfWyN5Vn4RRGY0kjSBEvoQg.roa (raw, json)
Hash identifier: PoZo6c/Ou7gbLZMAK5VSMr81qWBGDPMJ/S1oH6OGmhk=
Subject key identifier: E1:07:DD:39:F5:B2:37:95:67:E1:14:46:63:49:23:48:11:2F:A1:08
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01965A4B5C2FDE75DF14E24D08E38CA9065E
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/4QfdOfWyN5Vn4RRGY0kjSBEvoQg.roa
Signing time: Mon 21 Apr 2025 21:40:10 +0000
ROA not before: Mon 21 Apr 2025 21:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.240.0/22 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 May 2025 09:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:4b:5c:2f:de:75:df:14:e2:4d:08:e3:8c:a9:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 21 21:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e107dd39f5b2379567e1144663492348112fa108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:11:9d:f7:82:00:dd:6a:5b:19:76:b7:4c:
6a:b0:c3:86:e8:19:55:d6:ed:fe:fa:0d:9a:3e:91:
05:45:b7:e0:bf:80:44:9c:ad:a1:6c:40:ed:5a:16:
de:ed:28:1b:94:59:85:f0:04:cb:89:56:df:1d:31:
66:a1:e7:23:28:a4:aa:16:25:99:92:f3:64:7a:d7:
df:0a:9c:b4:fc:2c:bb:79:dc:60:3f:2b:05:4a:83:
3e:ba:9c:69:97:d7:87:22:b2:1c:a3:8f:fd:46:7d:
30:c7:0b:25:ec:4d:83:c9:e4:33:fc:25:b0:e9:8f:
d9:f1:2b:08:e5:61:95:3b:d6:7e:df:e7:73:84:fd:
a2:42:86:2a:13:48:43:9a:8a:81:d2:15:e8:ff:b6:
29:02:e1:be:93:19:7f:b5:b4:af:0a:bc:04:97:49:
c0:2a:60:7a:c7:90:53:3a:7f:1d:ca:04:91:ba:c3:
b4:08:ce:36:28:a5:f6:f7:75:39:c3:ab:0c:fd:63:
04:8a:08:7b:13:9f:e7:f4:3a:97:b0:a3:c6:d7:0e:
87:49:86:ab:08:3f:6a:55:9b:76:45:54:b7:f6:1e:
6d:50:2d:0c:87:f3:5c:b7:86:8d:b3:5f:83:b3:f3:
09:9a:e7:a2:86:d1:40:09:42:65:04:3a:84:b5:20:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:DD:39:F5:B2:37:95:67:E1:14:46:63:49:23:48:11:2F:A1:08
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/4QfdOfWyN5Vn4RRGY0kjSBEvoQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.23.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.240.0/22
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
05:78:cb:b1:39:94:92:c4:16:e0:bc:65:6c:3c:24:5e:d0:00:
20:eb:6b:13:26:65:61:a2:34:b0:39:88:5e:99:16:cd:6f:4b:
9b:ba:40:1d:77:be:a4:30:cc:db:df:c3:b6:ff:73:3e:f9:c5:
60:00:8a:68:85:fa:92:fc:79:9e:de:5e:01:57:12:47:48:23:
56:5e:42:35:98:84:f3:74:aa:96:95:43:6f:be:32:af:e5:2b:
1e:d1:3e:7a:a7:84:ab:1f:8a:7e:1b:f3:83:08:7b:23:d5:4b:
2b:70:de:5e:fb:93:35:b7:c0:b8:88:20:24:9e:50:2f:ed:fc:
2a:35:2d:db:d7:a8:01:a0:75:ae:da:aa:15:e3:59:03:7b:d5:
8b:d0:0b:bc:a3:43:88:fc:b8:d1:e1:f3:42:69:85:e7:f7:e8:
e7:7a:c6:e9:2f:64:b6:36:9c:86:6b:69:15:26:60:18:11:69:
00:92:14:78:89:41:a5:9b:8d:07:9e:9f:70:6a:37:9e:90:b7:
e3:80:0d:27:18:45:04:dd:0f:e2:25:99:8e:0a:2d:07:f2:0e:
a9:e4:9e:d7:62:a1:dc:49:11:89:ed:df:1f:fb:87:c5:a4:f9:
3f:ad:8c:9e:99:30:ab:34:6c:8e:e5:ab:2a:4a:48:28:03:5f:
63:0c:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:53:14 2025 by rpki-client