Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DhQC3f3bHhwxEP8Kydt88flXtVY.roa
File: DhQC3f3bHhwxEP8Kydt88flXtVY.roa (raw, json)
Hash identifier: zUj+S5ZaYrh2KoJbdiw/N54BGZhnhcm9tCr3PtORSIw=
Subject key identifier: 0E:14:02:DD:FD:DB:1E:1C:31:10:FF:0A:C9:DB:7C:F1:F9:57:B5:56
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01982F6ACF0C272AFCF6A0A46BD1EF8A76B7
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DhQC3f3bHhwxEP8Kydt88flXtVY.roa
Signing time: Mon 21 Jul 2025 23:56:25 +0000
ROA not before: Mon 21 Jul 2025 23:56:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Jul 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:6a:cf:0c:27:2a:fc:f6:a0:a4:6b:d1:ef:8a:76:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 21 23:56:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1402ddfddb1e1c3110ff0ac9db7cf1f957b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:08:0b:75:92:a3:1c:16:fe:72:ed:0c:64:
ee:70:6a:42:73:0d:36:76:77:13:1d:71:59:da:d6:
cc:02:64:62:52:2c:2c:7b:7a:62:a7:4b:dd:38:04:
6d:03:31:02:27:6e:f6:c7:bc:8e:e1:01:a4:08:d4:
f9:4e:be:55:39:44:63:9c:ba:22:c0:d0:5c:c8:5e:
be:f3:14:66:b2:8f:9a:a7:7c:a1:74:80:bd:eb:78:
15:6e:63:b5:a7:a8:77:43:16:d1:87:0c:eb:8b:1b:
3a:f3:89:16:91:d0:29:4f:4e:e0:90:fd:07:59:b9:
6f:50:6a:a9:9f:e0:d9:58:c9:b3:62:83:3a:1d:2a:
27:62:1b:64:e8:ff:49:60:a4:79:91:4a:87:fe:9d:
ca:e1:5c:31:f0:06:d5:6e:47:10:89:df:f3:01:7b:
b6:4c:10:70:88:82:14:58:9f:6b:df:04:56:b1:7e:
98:46:4a:6e:6e:5e:1d:cc:9b:30:98:c9:bf:78:cf:
88:55:f9:6d:95:b3:9d:a2:35:ff:1d:39:dc:51:be:
71:be:68:d9:dc:07:5a:b3:3f:19:16:bb:f8:15:6d:
3a:ee:3e:d0:78:8b:a8:77:50:72:b2:f9:79:d7:61:
74:64:f4:0c:bb:fe:67:4b:c8:c3:6f:f9:c8:73:ee:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:02:DD:FD:DB:1E:1C:31:10:FF:0A:C9:DB:7C:F1:F9:57:B5:56
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/DhQC3f3bHhwxEP8Kydt88flXtVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.13.0-94.131.14.255
94.131.20.0/24
94.131.104.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4c00::/32
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
16:8e:e7:ad:8d:a3:df:b7:dc:5d:08:2b:4e:0d:a0:53:ef:5f:
d9:07:bb:a5:a2:d6:25:55:5f:12:80:31:17:da:8e:c3:55:3a:
c6:66:be:8f:34:11:65:33:e3:bd:50:24:4b:11:b4:63:5f:d5:
cf:4c:fd:81:a4:b0:40:63:5a:99:2b:36:dc:eb:78:69:8c:82:
31:13:76:c7:eb:ea:98:62:e9:f1:53:3b:18:1b:1f:17:ae:47:
ed:f2:0e:0f:ac:a5:cb:cb:d4:87:cf:d7:08:a7:62:59:1c:8c:
e3:8c:cd:3b:10:94:c7:12:3b:36:fb:cd:66:0d:6f:62:dd:45:
fa:08:5d:e8:fa:98:c8:e8:32:df:77:36:1a:89:34:07:cc:99:
f6:a3:fe:7d:00:c1:24:7c:12:8e:d7:32:8a:c3:4c:f6:f8:83:
f4:b6:78:cf:ea:75:41:bb:04:14:0b:7f:bb:c0:62:e1:df:fc:
e7:c5:b4:3a:b5:3b:69:7c:a2:9d:8a:b7:e1:e1:a1:e4:db:08:
38:eb:2d:d7:7c:f6:e6:db:cd:3c:f9:56:96:cf:7c:26:ee:05:
a8:d1:08:78:23:c8:8e:44:8b:e9:9a:0b:7d:9d:1c:67:f9:6a:
97:7a:be:8b:c9:98:8b:60:2f:bd:91:86:6e:1a:f1:d3:bb:51:
c7:7c:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:39:49 2025 by rpki-client