Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/S61Ctq-6KNMqpDS6zh4FWUWjXE0.roa
File: S61Ctq-6KNMqpDS6zh4FWUWjXE0.roa (raw, json)
Hash identifier: SBiDiARQLeF2/ZEskKerAhTpqxG6Pu/D6VFqmRUgzGY=
Subject key identifier: 4B:AD:42:B6:AF:BA:28:D3:2A:A4:34:BA:CE:1E:05:59:45:A3:5C:4D
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0197C30743E99A68F110EC34716B34A01ECF
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/S61Ctq-6KNMqpDS6zh4FWUWjXE0.roa
Signing time: Mon 30 Jun 2025 22:48:42 +0000
ROA not before: Mon 30 Jun 2025 22:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Jul 2025 23:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:07:43:e9:9a:68:f1:10:ec:34:71:6b:34:a0:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jun 30 22:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bad42b6afba28d32aa434bace1e055945a35c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:f8:5e:39:b7:0a:57:a5:4c:25:6f:af:34:
00:3e:40:34:56:aa:d2:42:69:be:82:ae:09:0f:33:
96:39:64:3f:51:b1:41:c1:7e:7a:18:55:92:64:aa:
b0:62:74:46:d3:55:77:02:fb:f6:71:b8:2b:2f:cf:
b0:49:43:7b:d9:eb:ad:24:d7:ae:ce:75:de:56:e8:
67:65:5f:db:de:41:d1:6a:81:27:00:9d:21:84:20:
c0:4e:5c:6f:09:0c:80:1e:21:86:f8:29:5f:5c:81:
df:13:5e:a8:aa:26:de:ce:d1:34:85:c5:e6:52:9f:
00:8f:1e:27:77:da:e3:2d:33:c0:42:27:24:6f:e8:
e4:3d:69:8e:e0:68:e8:60:1a:1b:5a:02:2e:f3:f2:
1b:29:26:d9:8d:ac:ae:ec:f6:1c:fe:4d:d5:fa:74:
36:3d:1c:06:9d:4a:46:db:9e:09:a2:83:f4:ef:0c:
3d:3e:56:2a:73:de:39:b6:cb:9b:df:d0:bc:cb:c9:
60:ea:86:f6:69:68:32:0f:b0:c0:02:aa:86:55:85:
68:95:ee:67:9a:3c:1c:bc:65:6d:9e:c4:73:e3:28:
ee:94:b0:25:ff:b0:cf:9d:0b:ea:9c:86:44:0b:8c:
f1:35:78:13:8d:fa:94:ee:cd:74:85:05:ea:3b:ae:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:42:B6:AF:BA:28:D3:2A:A4:34:BA:CE:1E:05:59:45:A3:5C:4D
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/S61Ctq-6KNMqpDS6zh4FWUWjXE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.13.0-94.131.14.255
94.131.20.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4c00::/32
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
77:fc:cb:23:7b:94:4a:8e:60:a1:6f:b2:31:50:92:02:1a:a5:
45:56:03:5e:2e:fe:ab:77:8a:d6:f1:9e:1f:09:51:00:64:87:
01:5c:5a:d2:5f:0b:7a:f9:7c:70:68:3a:80:d5:51:07:4f:b1:
64:7b:67:a2:94:45:69:ea:fb:ac:4e:79:83:06:b1:07:ee:73:
62:fe:d6:2e:d0:b8:3a:ce:ff:c6:da:e2:0d:08:5d:0a:d4:9a:
e2:c6:49:24:96:93:7f:54:1f:a4:3b:fb:35:9c:7c:ef:cf:4e:
47:6e:6f:dc:14:60:30:7b:c3:5a:e6:70:b2:8d:0b:24:df:e6:
1e:45:be:2f:aa:f8:07:b8:35:60:02:a4:be:a0:a4:ea:6d:10:
ab:bf:63:ce:45:9c:8d:0f:38:30:1b:95:dc:6c:cd:e8:f3:61:
93:b0:7a:44:19:1a:48:01:6f:9e:90:7b:0e:46:93:5b:9d:42:
a3:66:ef:81:d3:9f:d3:34:9e:ab:5b:00:fe:c6:b5:80:49:65:
a5:2b:16:12:63:a0:4e:c2:54:68:71:49:66:f7:f2:fb:db:d4:
33:64:ff:46:4d:3a:7e:31:3f:c9:cd:f6:bc:fc:50:1b:ea:53:
44:ad:23:8d:64:e3:3f:cc:8d:77:ba:a4:7a:20:ad:15:45:d0:
b4:f0:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:40:36 2025 by rpki-client