Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdSHTx5MRtrRZCPJ5qEHVJB2Kwk.roa
File: zdSHTx5MRtrRZCPJ5qEHVJB2Kwk.roa (raw, json)
Hash identifier: s9Abfm282cdvxNidkx+f8DgM+ZKmJp6rX/+MrnGaFCg=
Subject key identifier: CD:D4:87:4F:1E:4C:46:DA:D1:64:23:C9:E6:A1:07:54:90:76:2B:09
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01982E0FD2E3DB71C5D3920D0F1A79F6D3AD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdSHTx5MRtrRZCPJ5qEHVJB2Kwk.roa
Signing time: Mon 21 Jul 2025 17:37:25 +0000
ROA not before: Mon 21 Jul 2025 17:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.117.0/24 maxlen: 24
2.56.118.0/24 maxlen: 24
2.56.119.0/24 maxlen: 24
2.56.120.0/21 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
45.9.17.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.114.0/23 maxlen: 24
45.12.129.0/24 maxlen: 24
45.12.130.0/24 maxlen: 24
45.12.131.0/24 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.140.0/22 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
45.15.178.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.184.0/22 maxlen: 24
45.15.184.0/24 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/24 maxlen: 24
45.82.247.0/24 maxlen: 24
45.82.248.0/21 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.26.0/24 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/24 maxlen: 24
45.89.107.0/24 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.48.0/22 maxlen: 24
45.128.52.0/23 maxlen: 24
45.128.54.0/24 maxlen: 24
45.128.57.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.72.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.230.0/24 maxlen: 24
92.118.231.0/24 maxlen: 24
92.118.232.0/24 maxlen: 24
92.118.233.0/24 maxlen: 24
92.118.234.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/24 maxlen: 24
141.98.161.0/24 maxlen: 24
141.98.162.0/24 maxlen: 24
141.98.163.0/24 maxlen: 24
141.98.164.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.110.0/24 maxlen: 24
171.22.111.0/24 maxlen: 24
171.22.112.0/21 maxlen: 24
171.22.120.0/24 maxlen: 24
171.22.122.0/24 maxlen: 24
171.22.123.0/24 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.129.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.131.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/24 maxlen: 24
185.166.152.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
213.59.112.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 18:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:0f:d2:e3:db:71:c5:d3:92:0d:0f:1a:79:f6:d3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 21 17:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdd4874f1e4c46dad16423c9e6a1075490762b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:8c:da:ef:42:b0:a7:40:04:e3:74:65:5e:
43:1c:1a:8b:61:ab:2f:27:ba:ee:0d:c5:30:5b:96:
34:44:87:70:ec:6e:2a:10:19:70:ed:7d:c7:1d:e0:
99:29:25:8c:05:3b:7c:2f:7c:ab:ea:97:ab:87:20:
b1:9d:07:06:3f:bc:b5:70:59:98:60:8a:ee:48:88:
cf:ad:e0:b5:ea:dd:d8:e5:ea:a6:ad:4d:00:6d:70:
54:1f:19:09:83:4e:5e:ea:04:e6:76:33:d3:bf:b1:
99:ec:ca:1c:8a:36:cb:ef:aa:f0:3b:96:42:3c:3b:
c7:ac:3f:5d:1d:fb:09:4b:2b:ae:72:a3:a3:ca:86:
a2:a0:17:fd:57:93:9b:9c:e5:b0:d5:01:df:d0:7f:
0b:75:de:ca:94:46:5c:34:bb:a9:10:27:a0:9b:13:
10:ba:9f:c5:b8:38:05:a7:e3:b8:7f:20:a3:33:b7:
f4:3a:22:ce:33:4d:a9:bd:0d:5d:61:88:5a:cf:1c:
0c:b2:5c:6e:a5:b4:5a:b7:a8:3e:e0:03:83:57:14:
9a:05:f8:17:0f:22:8e:44:cc:b3:a4:b1:95:e5:9a:
98:3c:fb:58:77:61:48:6e:b9:7e:24:4d:42:38:77:
af:9d:f9:7b:8c:e3:47:52:d5:a5:9e:3c:db:de:10:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:87:4F:1E:4C:46:DA:D1:64:23:C9:E6:A1:07:54:90:76:2B:09
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdSHTx5MRtrRZCPJ5qEHVJB2Kwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.179.255
45.9.17.0-45.9.19.255
45.12.108.0/22
45.12.114.0/23
45.12.129.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.126.0/23
45.15.140.0/22
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.26.255
45.83.128.0/22
45.83.140.0/22
45.83.148.0/23
45.86.60.0-45.86.65.255
45.86.67.0-45.86.70.255
45.86.72.0/24
45.86.74.0/23
45.88.160.0/22
45.88.176.0/23
45.88.182.0/23
45.89.105.0-45.89.111.255
45.89.196.0/24
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.54.255
45.128.57.0-45.128.58.255
45.128.72.0/24
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.234.255
141.98.161.0-141.98.167.255
171.22.109.0-171.22.120.255
171.22.122.0-171.22.127.255
171.22.129.0-171.22.132.255
185.106.98.0/23
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.70.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/24
213.59.119.0-213.59.120.255
Signature Algorithm: sha256WithRSAEncryption
ae:85:14:8b:25:6d:46:7e:1e:bb:52:dc:e2:45:e3:bb:35:fe:
86:35:6c:0e:66:c8:80:b5:aa:43:40:84:ba:9b:35:e6:81:07:
0a:16:04:e0:c2:27:41:2e:50:d6:43:af:65:fb:d4:9c:c5:ba:
82:d7:a5:99:60:e4:8b:f9:e0:10:2c:48:aa:18:9c:b8:c4:10:
a0:07:d1:51:78:dd:7c:87:e4:dc:cc:ae:4f:b5:4b:79:81:c0:
1c:6f:79:02:67:31:56:3b:5a:6e:df:f5:50:41:45:81:16:f0:
b8:16:40:47:c4:b9:30:c8:a9:d7:4f:35:f2:cd:4e:6e:0e:a1:
f9:94:00:cc:99:90:27:93:3a:e0:bd:42:68:11:e6:a8:11:0a:
dd:05:62:45:c4:c3:5b:91:c2:8b:68:52:ea:fd:de:7a:2f:65:
35:46:3c:6b:5b:37:d9:bc:42:85:6d:d8:c5:fd:d5:83:db:ee:
29:a5:ba:9a:e5:5f:97:5b:44:23:e0:5b:c3:55:1b:35:28:5a:
f1:7f:01:75:01:bd:bc:64:68:79:b9:d0:ac:8b:b1:25:3f:29:
06:fc:9a:27:e2:52:b7:56:62:cc:41:e6:5f:0b:38:df:dc:40:
a2:eb:23:f4:e0:82:94:a6:27:f4:59:dc:84:dc:11:5d:71:a5:
40:42:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:20:34 2025 by rpki-client