Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u3Aa3GNuxYA-zA1LXnBRvb6fFRU.roa
File: u3Aa3GNuxYA-zA1LXnBRvb6fFRU.roa (raw, json)
Hash identifier: +WeOXJMCQA9Q4NgyUHGkMt7PgYInMp8MAsmLCbELuH0=
Subject key identifier: BB:70:1A:DC:63:6E:C5:80:3E:CC:0D:4B:5E:70:51:BD:BE:9F:15:15
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01983BDF471FAFA9CE53D1B48EEA0A111B3C
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u3Aa3GNuxYA-zA1LXnBRvb6fFRU.roa
Signing time: Thu 24 Jul 2025 09:59:05 +0000
ROA not before: Thu 24 Jul 2025 09:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Jul 2025 06:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:df:47:1f:af:a9:ce:53:d1:b4:8e:ea:0a:11:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 24 09:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb701adc636ec5803ecc0d4b5e7051bdbe9f1515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:3b:85:8c:d2:9d:4a:f4:ac:8a:c2:cd:73:
70:0a:70:02:24:f2:d2:f4:23:9e:ff:49:a0:c9:6f:
6d:80:13:42:c6:53:77:88:02:de:d2:53:e1:0e:38:
d3:65:86:87:17:f5:55:9c:c5:55:89:ad:4d:54:92:
2b:e3:3e:c9:00:a4:37:b3:84:b5:17:ed:eb:a1:2f:
06:c4:a7:9c:3f:29:e7:20:8e:11:34:e9:47:eb:fc:
24:18:32:e9:7e:32:0b:1f:b3:a0:59:30:02:a7:7c:
fb:24:c9:25:35:14:e8:85:17:6b:67:25:1d:6b:1b:
ad:7e:03:cb:78:98:fc:f5:88:a8:99:16:f0:a3:25:
dd:16:4a:f7:63:18:71:e0:d0:cb:ac:e1:39:10:7f:
17:45:43:ea:2b:7e:ec:e2:f2:8b:5a:05:f6:92:03:
0c:55:93:4b:e1:e6:2c:18:77:08:1a:4e:bc:f0:7a:
77:26:60:dc:14:ab:06:6d:60:f8:77:1d:c8:28:be:
e6:4d:66:57:a8:02:7f:07:5e:4a:47:e1:ae:e3:cb:
ec:20:e6:cd:b8:a0:e4:8c:bf:75:64:c4:b7:9a:b1:
bc:f2:8f:14:b4:fb:53:d4:56:62:09:df:c0:a9:d8:
36:79:65:4a:f3:d4:50:60:8a:8b:e0:60:6c:17:ad:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:1A:DC:63:6E:C5:80:3E:CC:0D:4B:5E:70:51:BD:BE:9F:15:15
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u3Aa3GNuxYA-zA1LXnBRvb6fFRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0/22
46.102.106.0/24
62.197.45.0/24
62.197.48.0/23
82.117.242.0/23
85.90.208.0/24
89.187.73.0/24
176.97.79.0/24
176.98.40.0/24
185.109.48.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
12:d5:25:ee:35:77:0b:9b:92:b3:07:af:a6:51:57:3f:02:f0:
78:65:0c:58:6c:7f:de:ba:bc:b8:d5:e2:ee:47:bf:21:e2:a0:
3c:71:ff:3c:11:a1:93:3a:98:59:34:4f:10:a3:19:25:c5:d8:
92:58:93:50:9c:7f:9c:79:2f:d7:00:31:09:fb:30:15:1e:08:
b2:6c:f0:e1:a7:ae:e3:c3:6b:11:a7:16:f8:e4:ce:82:3e:21:
c3:e3:78:d8:c4:f4:b3:03:67:93:8c:4a:be:68:a6:10:ce:82:
da:48:89:b1:27:35:fd:cd:3f:c6:4b:03:ee:41:ca:29:5c:a8:
b9:d2:0a:6c:c4:67:fc:af:e4:74:f5:f7:38:64:69:b3:a3:cc:
da:02:d7:63:a8:d0:aa:0c:e0:9d:16:70:05:1d:f5:95:e8:f5:
ac:9f:4a:06:cb:28:57:f6:5d:6c:9a:82:5f:3b:33:9a:af:97:
22:51:58:a8:c8:25:78:24:53:e9:1b:14:36:54:1c:79:bc:02:
58:cd:7f:f3:27:26:c5:d1:0e:5e:6d:37:95:5a:11:3d:c2:74:
60:ea:e9:7a:a9:e1:04:0f:ca:88:1d:0b:41:4d:32:f2:89:47:
53:2b:e8:92:27:d3:19:dc:59:98:70:b5:8d:0b:65:b1:f0:a1:
3b:d3:6f:95
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISAZg730cfr6nOU9G0juoKERs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjUwNzI0MDk1OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjcwMWFkYzYzNmVjNTgwM2VjYzBkNGI1ZTcwNTFiZGJlOWYxNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTM7hYzSnUr0rIrCzXNwCnACJPLS
9COe/0mgyW9tgBNCxlN3iALe0lPhDjjTZYaHF/VVnMVVia1NVJIr4z7JAKQ3s4S1
F+3roS8GxKecPynnII4RNOlH6/wkGDLpfjILH7OgWTACp3z7JMklNRTohRdrZyUd
axutfgPLeJj89YiomRbwoyXdFkr3Yxhx4NDLrOE5EH8XRUPqK37s4vKLWgX2kgMM
VZNL4eYsGHcIGk688Hp3JmDcFKsGbWD4dx3IKL7mTWZXqAJ/B15KR+Gu48vsIObN
uKDkjL91ZMS3mrG88o8UtPtT1FZiCd/Aqdg2eWVK89RQYIqL4GBsF60pVwIDAQAB
o4IDHTCCAxkwHQYDVR0OBBYEFLtwGtxjbsWAPswNS15wUb2+nxUVMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvdTNBYTNHTnV4WUEtekExTFhuQlJ2YjZmRlJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCBsQQCAAEwgaoD
BAQFLUAwDAMEAgUtVAMEBQUtQDAMAwQEBT0wAwQCBT04AwQDJQHIAwQDJQHYAwQA
JfwDMAwDBAAl/A0DBAQl/AADBAItiDADBAItidQDBAAuZmoDBAA+xS0DBAE+xTAD
BAFSdfIDBABVWtADBABZu0kDBACwYU8DBACwYigDBAC5bTADBAK57qgDBAG8dBQw
DAMEALx0FwMEArx0GAMEAcM2rgMEAdWOkjBmBAIAAjBgAwcBKgLGwQACAwcAKgLG
wQAOAwcAKgLGwQAQMBIDBwAqAsbBAVEDBwAqAsbBAVYDBQEqAsbCAwUAKgLGxwMF
AyoMZ0ADBQMqDpLAAwUDKg6aQAMFAyoOp8ADBQMqD0tAMA0GCSqGSIb3DQEBCwUA
A4IBAQAS1SXuNXcLm5KzB6+mUVc/AvB4ZQxYbH/eury41eLuR78h4qA8cf88EaGT
OphZNE8QoxklxdiSWJNQnH+ceS/XADEJ+zAVHgiybPDhp67jw2sRpxb45M6CPiHD
43jYxPSzA2eTjEq+aKYQzoLaSImxJzX9zT/GSwPuQcopXKi50gpsxGf8r+R09fc4
ZGmzo8zaAtdjqNCqDOCdFnAFHfWV6PWsn0oGyyhX9l1smoJfOzOar5ciUVioyCV4
JFPpGxQ2VBx5vAJYzX/zJybF0Q5ebTeVWhE9wnRg6ul6qeEED8qIHQtBTTLyiUdT
K+iSJ9MZ3FmYcLWNC2Wx8KE702+V
-----END CERTIFICATE-----
Generated at Sat Jul 26 03:26:09 2025 by rpki-client