Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/atGIRZZ0nQZLZRQ_NdPfCEkiqBo.roa
File: atGIRZZ0nQZLZRQ_NdPfCEkiqBo.roa (raw, json)
Hash identifier: gpo9r/dMWl8Qk55whCrpHBW8v7pDraeu8eY2i0pYnz4=
Subject key identifier: 6A:D1:88:45:96:74:9D:06:4B:65:14:3F:35:D3:DF:08:49:22:A8:1A
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019834644EBEFE1C05458ABAA109ED367370
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/atGIRZZ0nQZLZRQ_NdPfCEkiqBo.roa
Signing time: Tue 22 Jul 2025 23:07:25 +0000
ROA not before: Tue 22 Jul 2025 23:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c01::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Jul 2025 11:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:64:4e:be:fe:1c:05:45:8a:ba:a1:09:ed:36:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 22 23:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad1884596749d064b65143f35d3df084922a81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:7a:1d:1b:c0:46:d8:8f:0f:69:9f:08:96:
1f:13:f2:dd:83:5b:f5:bd:54:74:73:a5:d5:a2:f8:
1e:f0:cb:fd:99:3f:46:a0:56:64:a3:b9:be:12:a5:
79:95:35:6d:5b:1b:65:39:c5:ec:78:a5:b6:19:48:
e7:be:28:22:85:93:47:60:63:34:8e:75:56:2f:3b:
c4:ed:18:50:46:ff:d2:03:11:b2:28:0b:8d:82:6a:
d5:de:6f:29:79:1e:da:5c:db:e3:ac:4e:ae:60:09:
28:86:13:04:95:c6:d6:ff:7a:42:c1:5c:61:60:78:
ed:fd:7c:91:9d:27:20:9e:14:d2:ed:86:db:d7:ab:
ae:83:33:79:3e:39:6b:45:6b:dd:34:30:13:94:a4:
0f:3a:cc:7b:5f:87:d2:96:b4:6d:7a:56:55:be:50:
7e:6a:b5:3a:b8:05:31:f6:13:ae:93:b8:ac:44:20:
ea:0f:7a:a7:95:47:bc:f5:10:41:ee:25:9d:38:e1:
6a:e6:96:d1:51:e3:4c:6f:ac:b6:8e:66:81:f8:05:
18:9f:73:2d:f2:63:1e:0b:0c:3c:98:e6:55:ad:fb:
c8:61:37:cb:4b:e3:ea:0c:6b:c7:cd:2e:ab:c8:2e:
4c:0a:99:7b:c5:68:4e:76:a0:26:68:0f:2e:e2:ce:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:88:45:96:74:9D:06:4B:65:14:3F:35:D3:DF:08:49:22:A8:1A
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/atGIRZZ0nQZLZRQ_NdPfCEkiqBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.10.0/24
94.131.13.0-94.131.14.255
94.131.20.0/24
94.131.104.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4c00::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
85:2b:ad:e7:04:d5:e9:78:48:ac:27:d3:fe:f9:7f:81:1e:7e:
0d:86:09:0a:75:84:cc:5e:2a:29:1d:4e:67:d4:b7:d2:b1:0c:
3d:ea:79:cc:09:d6:9a:30:56:48:dc:01:91:d0:9f:3c:ed:16:
8f:b2:33:4b:ae:19:53:f4:e4:b2:b3:24:96:2b:7d:9c:3a:a4:
6c:0f:67:6d:ce:f5:39:1d:30:91:94:a8:1f:41:cd:79:ab:19:
de:85:25:a7:bb:c0:1c:09:d4:a9:1f:2d:00:ba:32:7b:77:04:
be:bd:76:c9:89:8f:41:a1:8c:56:f3:9c:81:48:f9:92:a8:65:
e2:1f:6c:0c:64:77:12:42:c1:74:9d:4a:6b:91:25:d9:59:f5:
70:0b:d2:4d:7a:a3:98:bb:0f:25:ed:a2:2e:2c:ca:52:01:66:
22:d3:96:a6:0a:0b:bf:09:c3:6e:d5:28:3b:90:7e:40:ce:01:
f7:ce:c7:3b:d3:0b:b6:f8:e6:37:76:84:ce:df:15:79:74:64:
8f:f2:a8:da:58:0c:47:b6:00:f3:3f:df:67:7f:36:b6:05:41:
cd:cc:b1:db:8b:7c:a6:05:a4:19:dc:29:86:20:44:bc:a4:6b:
09:f9:e8:5a:36:68:94:be:d0:08:c1:b1:eb:b4:38:9f:8d:30:
40:76:10:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 23 22:46:14 2025 by rpki-client