Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/1I01MMIbrxZ0ApPZKZxz-wI8Gik.roa
File: 1I01MMIbrxZ0ApPZKZxz-wI8Gik.roa (raw, json)
Hash identifier: aTji3ovHIIpqpy7gdQOoVXAqvxVvcdtB5rrPmZWj9JA=
Subject key identifier: D4:8D:35:30:C2:1B:AF:16:74:02:93:D9:29:9C:73:FB:02:3C:1A:29
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01998485751770127C93069DEEFFC567DDC9
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/1I01MMIbrxZ0ApPZKZxz-wI8Gik.roa
Signing time: Fri 26 Sep 2025 05:36:02 +0000
ROA not before: Fri 26 Sep 2025 05:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 19
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 08 Oct 2025 23:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:85:75:17:70:12:7c:93:06:9d:ee:ff:c5:67:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Sep 26 05:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48d3530c21baf16740293d9299c73fb023c1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:27:c5:0c:b5:6f:de:5a:23:28:92:77:6e:
7d:94:16:a4:a8:de:c7:48:cb:10:8c:9e:cb:fc:50:
d3:6b:c1:bb:fb:f5:90:d2:84:aa:af:52:5e:09:af:
f2:bd:c6:e2:76:00:3c:f8:45:26:ce:fe:b2:0d:f6:
15:d3:6e:70:39:d3:d5:ab:77:37:5e:f9:2f:8c:cd:
b2:a0:20:48:4c:2f:25:09:47:74:fa:8f:79:6c:34:
3a:e8:cf:9f:a1:f0:f2:36:d0:7c:69:2c:9d:25:90:
e4:b2:2a:bf:ea:26:2f:be:2d:7e:b5:5a:1c:db:1d:
19:23:e7:ef:8d:ee:f3:ce:4f:f6:20:b2:c4:4c:c8:
14:de:ef:fb:96:15:66:a8:5c:0d:86:83:a7:f9:8f:
36:ff:16:53:65:72:eb:48:68:e2:da:e8:db:17:11:
00:d7:f9:e6:e9:31:ce:43:08:26:16:75:6d:d2:6c:
71:0b:89:66:f8:a2:66:be:a9:d8:c8:e1:bf:ed:f5:
ec:22:86:7e:8c:33:9c:ea:8e:24:84:a9:cd:34:28:
5d:5f:07:d6:82:ae:14:4b:bc:fa:48:a6:27:91:1c:
4b:e4:10:a8:68:b3:6f:51:68:9a:c9:72:4e:fd:b2:
e7:4c:9d:35:ef:1e:52:f1:f0:97:db:f9:f3:95:2e:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:35:30:C2:1B:AF:16:74:02:93:D9:29:9C:73:FB:02:3C:1A:29
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/1I01MMIbrxZ0ApPZKZxz-wI8Gik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
84.8.64.0/20
84.8.88.0/23
84.8.96.0-84.8.159.255
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.5.0.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.206.0-130.110.214.255
130.110.216.0/24
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
141.253.96.0/19
141.253.192.0/19
145.241.112.0/20
145.241.144.0-145.241.175.255
145.241.178.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
05:05:c0:9e:b9:9a:f3:b4:b4:6a:11:92:53:82:22:f4:d3:3c:
f0:bf:6a:9d:03:db:10:39:3c:e8:ac:50:74:31:40:c4:a1:e4:
ea:b7:29:81:04:a7:b0:2c:05:80:f9:87:a0:51:bb:ba:99:09:
e0:21:e1:ef:11:43:92:46:95:b7:02:6b:82:11:44:dc:84:d9:
61:7e:4b:71:51:e4:7c:86:59:6e:ee:00:15:aa:f3:20:80:6c:
da:f7:30:e3:fc:e6:07:ea:c8:95:03:0e:2d:ab:ca:a6:3e:93:
0c:4b:f6:e0:d4:88:d1:5a:94:81:14:89:bb:ff:d1:0e:8b:6d:
d5:90:8b:35:df:61:80:19:f4:48:e0:7f:c2:82:96:b8:e7:1c:
70:cd:44:5b:46:70:d1:85:00:2c:61:c3:08:03:df:42:4d:36:
34:07:68:ea:5a:56:12:8f:e4:4e:fe:be:ab:97:ec:41:53:66:
6b:1f:33:ca:ab:0c:fc:ac:5b:1d:bd:ab:33:5a:6f:e8:92:16:
75:a8:42:aa:f4:6e:9b:3c:c9:5c:1e:a4:28:76:26:43:d0:40:
9d:61:96:4a:fe:23:71:64:e5:6f:f7:5e:3d:60:3a:a7:8e:65:
98:ae:fc:10:32:06:1a:da:41:2d:18:ab:70:dc:b5:fa:31:86:
43:62:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:03:55 2025 by rpki-client