Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/h9H3aBXma3Syu3AAZcHn2_CGCRY.roa
File: h9H3aBXma3Syu3AAZcHn2_CGCRY.roa (raw, json)
Hash identifier: LtUFZQL4S+c5oN2yvEcl3zHK/xeXgSh49irUK9rcAHk=
Subject key identifier: 87:D1:F7:68:15:E6:6B:74:B2:BB:70:00:65:C1:E7:DB:F0:86:09:16
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197C0229AEBA3EABDD9B3E4E9FA054CC8BE
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/h9H3aBXma3Syu3AAZcHn2_CGCRY.roa
Signing time: Mon 30 Jun 2025 09:19:42 +0000
ROA not before: Mon 30 Jun 2025 09:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/20 maxlen: 20
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/20 maxlen: 20
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/20 maxlen: 20
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/20 maxlen: 20
94.252.240.0/21 maxlen: 21
94.252.248.0/22 maxlen: 22
94.252.252.0/22 maxlen: 22
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.8.0/21 maxlen: 21
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: Failed, certificate revoked on Wed 02 Jul 2025 06:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:22:9a:eb:a3:ea:bd:d9:b3:e4:e9:fa:05:4c:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 30 09:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87d1f76815e66b74b2bb700065c1e7dbf0860916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:e3:7a:40:07:a0:4f:04:4a:40:64:17:67:
3e:f2:2b:b5:b7:9a:25:3a:1e:9e:fd:d7:3d:23:5a:
06:f4:04:ee:21:44:32:6e:ec:5b:f7:bd:ab:a2:2e:
85:47:9e:a5:55:bc:b1:47:41:ae:92:1e:9a:a3:92:
25:c3:01:38:b3:86:f4:1c:78:cb:17:e6:ed:78:21:
a5:76:4e:9a:97:2f:86:cc:84:da:8a:42:2c:05:95:
6b:51:6b:27:cf:d0:0f:86:b6:88:36:55:2c:fd:12:
97:69:00:c7:dc:b2:0a:8a:7d:de:5b:c9:4c:2f:c0:
53:16:bc:72:26:24:34:48:48:f1:45:41:31:99:ff:
9c:5c:30:5f:ee:24:b2:d9:23:0c:2d:2f:3e:ce:76:
35:16:b3:d1:f7:d3:4c:b1:41:6b:50:58:d9:53:9c:
e7:80:5a:d4:22:e3:85:90:71:5e:95:f6:c6:d9:46:
3e:15:31:f5:06:f8:0e:f2:e0:08:99:b6:51:ba:81:
25:01:a3:35:2f:90:eb:0c:32:f1:dc:54:87:74:48:
9d:f1:92:ca:2f:d0:24:8a:a4:1c:2e:f3:65:a5:6c:
41:4c:12:0a:a3:16:ac:84:39:d3:23:26:e8:be:40:
ab:9c:6e:ed:8d:12:aa:3c:82:d7:21:02:a4:0e:19:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:F7:68:15:E6:6B:74:B2:BB:70:00:65:C1:E7:DB:F0:86:09:16
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/h9H3aBXma3Syu3AAZcHn2_CGCRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0/17
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
27:56:36:93:ab:9d:3f:66:64:65:a8:94:30:6c:a4:be:11:13:
a9:08:a8:5b:43:e2:77:09:89:ae:c3:5b:c0:9a:6e:df:89:be:
6d:2e:4f:b7:21:a2:9b:0f:86:a1:af:c2:4f:e2:8c:f4:a0:78:
5c:aa:74:88:c5:6c:30:84:ae:c2:2a:30:c0:7c:ef:83:fe:18:
71:35:4c:45:c2:4b:70:11:97:7c:af:cd:be:bf:c1:8a:e1:17:
00:0b:f2:82:6a:d1:db:9b:04:b4:2e:2a:fa:09:27:51:d9:2f:
d7:85:8e:41:58:5a:5c:0f:d9:b2:2c:f6:bc:67:76:e0:04:d7:
19:1c:bb:8e:6b:f8:1b:0b:de:72:e1:a1:80:2f:cb:84:32:02:
71:dc:28:14:8c:18:84:40:87:3c:a3:ea:b8:63:a8:e6:dc:ac:
01:1b:f5:c1:16:32:19:c8:16:26:27:f3:60:ed:74:ef:d3:07:
8d:e8:aa:ca:8c:7d:fe:3a:4d:51:48:b5:20:38:67:63:a8:d6:
d8:c4:4c:0f:ca:7e:cd:1b:16:09:0a:46:62:78:a3:77:07:b8:
c2:29:44:a5:b4:7d:6d:2f:12:bc:58:0c:43:97:cb:a6:7e:42:
e5:33:e5:72:fc:c2:62:0d:e9:31:c2:09:7b:1a:0f:a4:de:eb:
c4:0f:d4:ba
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZfAIprro+q92bPk6foFTMi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjUwNjMwMDkxOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2QxZjc2ODE1ZTY2Yjc0YjJiYjcwMDA2NWMxZTdkYmYwODYwOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMXjekAHoE8ESkBkF2c+8iu1t5ol
Oh6e/dc9I1oG9ATuIUQybuxb972roi6FR56lVbyxR0Gukh6ao5IlwwE4s4b0HHjL
F+bteCGldk6aly+GzITaikIsBZVrUWsnz9APhraINlUs/RKXaQDH3LIKin3eW8lM
L8BTFrxyJiQ0SEjxRUExmf+cXDBf7iSy2SMMLS8+znY1FrPR99NMsUFrUFjZU5zn
gFrUIuOFkHFelfbG2UY+FTH1BvgO8uAImbZRuoElAaM1L5DrDDLx3FSHdEid8ZLK
L9AkiqQcLvNlpWxBTBIKoxashDnTIybovkCrnG7tjRKqPILXIQKkDhmOBQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFIfR92gV5mt0srtwAGXB59vwhgkWMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvaDlIM2FCWG1hM1N5dTNBQVpjSG4yX0NHQ1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQHLjmAAwMA
LtUDBAde/IADAwCyNAMEArmIkAMEB7yLgDANBAIAAjAHAwUAKgC4ADANBgkqhkiG
9w0BAQsFAAOCAQEAJ1Y2k6udP2ZkZaiUMGykvhETqQioW0PidwmJrsNbwJpu34m+
bS5PtyGimw+Goa/CT+KM9KB4XKp0iMVsMISuwiowwHzvg/4YcTVMRcJLcBGXfK/N
vr/BiuEXAAvygmrR25sEtC4q+gknUdkv14WOQVhaXA/Zsiz2vGd24ATXGRy7jmv4
GwvecuGhgC/LhDICcdwoFIwYhECHPKPquGOo5tysARv1wRYyGcgWJifzYO1079MH
jeiqyox9/jpNUUi1IDhnY6jW2MRMD8p+zRsWCQpGYnijdwe4wilEpbR9bS8SvFgM
Q5fLpn5C5TPlcvzCYg3pMcIJexoPpN7rxA/Uug==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:10 2025 by rpki-client