Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K5t7cXr7JZgBjFYFo2ojVZsFk1g.roa
File: K5t7cXr7JZgBjFYFo2ojVZsFk1g.roa (raw, json)
Hash identifier: 1i/SE6w+KORQ36yg4z35uukwf/MQWnngm6ztegA/daM=
Subject key identifier: 2B:9B:7B:71:7A:FB:25:98:01:8C:56:05:A3:6A:23:55:9B:05:93:58
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01983718224F4ACF155FC3E8A73B15BF44C0
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K5t7cXr7JZgBjFYFo2ojVZsFk1g.roa
Signing time: Wed 23 Jul 2025 11:43:05 +0000
ROA not before: Wed 23 Jul 2025 11:43:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c01::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Jul 2025 11:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:18:22:4f:4a:cf:15:5f:c3:e8:a7:3b:15:bf:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 23 11:43:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b9b7b717afb2598018c5605a36a23559b059358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:95:1d:74:da:8f:86:fa:4a:22:fa:18:6b:
8b:07:6d:da:94:6d:e7:bc:58:aa:5d:14:c1:53:fa:
47:08:fa:a1:aa:00:82:4d:c6:2c:8a:ff:78:f1:82:
97:79:fc:64:d7:d2:09:80:93:4e:86:6c:bc:d7:4e:
75:ad:9e:2c:8d:c3:dc:8d:2f:08:88:09:d3:a8:b4:
9c:09:29:27:52:b9:53:59:9b:c0:07:1d:fd:bc:b9:
4d:0b:01:9b:ca:2a:d8:a7:01:c1:6f:85:cb:ed:45:
37:c4:b0:11:38:f9:0d:66:3b:52:a9:9b:87:0c:9d:
23:f1:56:4c:4b:73:23:dd:05:54:a6:f2:28:46:2f:
fa:89:02:af:65:14:b7:0e:39:53:a8:e0:03:7e:6b:
5d:28:02:0b:8e:e7:99:25:1a:30:e8:e7:ff:92:c0:
95:59:8a:82:d6:19:76:fa:73:a1:4c:3d:5c:8a:4a:
55:aa:22:9b:f2:f1:5a:98:3a:3a:2f:90:57:4b:1f:
10:08:08:c9:d6:5f:f4:c6:c8:e1:a8:77:ec:1e:a5:
35:7b:9f:69:5b:10:ce:45:46:97:51:b1:2a:30:a6:
2f:33:69:3f:7b:49:fb:7d:d3:d7:d2:8e:e9:84:6d:
48:41:41:ea:7e:c2:86:6a:f7:c4:48:81:2f:84:3d:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:7B:71:7A:FB:25:98:01:8C:56:05:A3:6A:23:55:9B:05:93:58
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K5t7cXr7JZgBjFYFo2ojVZsFk1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.10.0/24
94.131.13.0-94.131.14.255
94.131.20.0/24
94.131.96.0/24
94.131.104.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4c00::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
45:dd:21:3b:b0:91:52:73:11:18:d2:b0:b2:49:08:68:03:04:
2b:cd:5a:c3:08:82:92:a7:b1:52:bd:30:80:2e:9c:1c:f2:30:
5f:e7:fc:0a:56:80:96:01:20:c3:4b:1e:33:d3:41:1b:2c:7c:
f2:24:6d:23:9e:4a:87:e6:6a:9f:34:b6:b8:7f:db:43:01:8a:
63:aa:48:8a:01:a7:26:4d:c7:6f:65:48:5f:f2:61:ab:51:63:
1f:d4:2e:a1:61:03:ba:c7:b3:2e:76:6a:dd:14:b8:8f:13:c5:
98:68:5d:67:55:cf:54:7a:e0:0c:72:8b:4c:4a:8b:7e:59:fa:
93:d3:8c:d5:44:8d:6a:9b:89:17:d2:0a:39:3d:6a:2c:0f:ae:
99:bc:3d:85:38:9a:d0:29:24:bb:c0:26:88:7b:92:f8:bb:8c:
ba:23:a6:d0:66:cd:a2:51:c8:ad:2b:f0:ca:a7:04:1e:db:56:
fc:e4:f3:3c:49:ba:10:a2:6c:15:49:10:f8:82:bd:5b:e1:fe:
0c:f6:9f:2d:66:af:65:e1:5c:08:20:15:c1:36:08:14:06:74:
13:96:b6:31:b6:c9:77:db:ce:7c:c8:85:fe:42:4c:4f:b5:1d:
81:a6:93:81:64:97:6e:f1:ac:c6:6b:ee:eb:a5:a9:21:83:19:
fc:a4:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:37 2025 by rpki-client