Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/Fk8Ciw0gNJaKeD03psrl8JWCYuU.roa
File: Fk8Ciw0gNJaKeD03psrl8JWCYuU.roa (raw, json)
Hash identifier: H94Uy9fNd3y7WthPEl1dU2MBWqHPFMgBEiHeCjaSyjs=
Subject key identifier: 16:4F:02:8B:0D:20:34:96:8A:78:3D:37:A6:CA:E5:F0:95:82:62:E5
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01942143B7230D0D3A95C58AFDF866EAF5BC
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/Fk8Ciw0gNJaKeD03psrl8JWCYuU.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 14 Jan 2025 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b7:23:0d:0d:3a:95:c5:8a:fd:f8:66:ea:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164f028b0d2034968a783d37a6cae5f0958262e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:74:dd:ee:6f:a7:5d:67:3a:14:71:d6:27:
74:30:54:9e:f3:fe:33:c1:77:d1:cf:d8:c9:d8:ae:
1a:75:e6:69:93:fa:e4:38:22:d8:94:2e:77:be:7b:
aa:7d:ea:c1:20:eb:83:55:fa:85:fd:ef:b3:f2:c8:
46:4e:f6:71:28:c7:4d:e5:e3:a6:41:65:8b:6e:ab:
16:25:72:69:f1:6d:ac:fe:16:98:db:bf:e3:cb:05:
7b:86:4a:c8:8a:8a:c2:3c:2c:7e:db:e2:6c:3c:82:
cf:b4:47:6a:c0:db:69:de:69:79:6f:88:59:b6:24:
c4:1d:df:b5:4c:b0:c5:90:62:88:5b:59:cb:e3:ba:
a1:16:19:3d:6b:d6:2a:91:5b:41:9f:1c:20:bc:3a:
6e:7c:d6:5d:86:03:2f:54:cb:f2:42:dc:90:12:39:
c7:53:1a:c0:7f:24:88:cb:8d:ab:88:cd:f8:d2:31:
34:eb:59:15:25:c5:e7:e6:ef:e6:cb:c6:67:cc:2a:
1e:f5:c5:9b:be:c6:b7:24:43:26:d8:22:f3:0a:e6:
61:36:8b:7a:f1:63:63:e1:84:af:67:84:ee:0b:61:
84:0e:23:3c:ad:5e:7a:9b:28:54:23:15:f6:b1:7e:
02:3e:e9:b6:67:d0:a5:6c:96:77:bc:25:79:76:88:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:02:8B:0D:20:34:96:8A:78:3D:37:A6:CA:E5:F0:95:82:62:E5
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/Fk8Ciw0gNJaKeD03psrl8JWCYuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0-86.48.196.255
86.48.208.0-86.48.212.255
86.48.214.0-86.48.225.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:e2:7f:ce:c2:a1:f2:32:7d:bf:40:e4:be:8c:e9:3d:30:95:
9b:72:b5:d9:ff:ad:a2:ea:be:9f:8c:8a:68:c6:16:f6:7b:0a:
8b:d5:f0:d4:1f:89:d0:2b:61:41:b2:63:5a:db:b6:88:d5:df:
16:f0:b4:47:98:72:f3:8e:58:e6:36:f8:d1:22:1c:aa:c9:ec:
3f:7e:63:ad:3f:b7:48:19:6b:0c:f4:7b:69:dd:64:bb:34:4e:
c9:4c:d3:72:9f:99:ec:39:4c:ca:25:c2:74:1d:d1:68:ee:35:
e8:e0:24:b8:a2:b5:80:73:a6:bf:37:77:66:f2:d8:11:b4:6b:
72:6a:e9:59:84:db:c5:54:f1:cc:69:14:0b:ea:7b:0d:46:87:
71:f7:a0:2e:f8:be:d5:41:28:22:19:54:29:15:b1:96:0d:01:
40:f5:8d:20:59:a8:4a:a5:73:6b:78:9f:50:73:98:49:57:5a:
b4:f6:d1:91:0c:60:96:da:f1:98:db:5e:54:d1:4d:15:77:d7:
a4:39:c9:64:7f:9c:f6:65:ab:87:d1:d1:48:29:2b:03:1f:83:
39:a8:7c:22:d9:04:e2:cb:c1:21:73:2f:aa:27:5e:25:7d:da:
57:1c:e0:54:60:7c:b1:da:f3:5a:80:f5:e6:8a:1b:a7:59:0a:
7d:54:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:08 2025 by rpki-client