Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pzGEqtr4m7_KT7apbfqm_4gm45A.roa
File: pzGEqtr4m7_KT7apbfqm_4gm45A.roa (raw, json)
Hash identifier: QgBqxzvyKgTrDbVeET0ENxBp6nXmGS5j7w95V7rL9q4=
Subject key identifier: A7:31:84:AA:DA:F8:9B:BF:CA:4F:B6:A9:6D:FA:A6:FF:88:26:E3:90
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01962489E89D83B71A2753A6A48BA2A2CCE5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pzGEqtr4m7_KT7apbfqm_4gm45A.roa
Signing time: Fri 11 Apr 2025 11:08:59 +0000
ROA not before: Fri 11 Apr 2025 11:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:89:e8:9d:83:b7:1a:27:53:a6:a4:8b:a2:a2:cc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 11 11:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73184aadaf89bbfca4fb6a96dfaa6ff8826e390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:46:74:f0:c3:cf:9e:a5:9c:ac:65:6a:f2:
91:7e:ea:07:9f:e5:a4:61:41:55:bc:91:8f:c3:5d:
ae:1c:d3:45:40:74:8a:3d:dc:aa:4c:d5:09:61:8e:
d4:b7:46:e2:03:1a:76:5c:38:db:e8:71:63:4e:d7:
58:56:43:5a:ca:09:4a:e4:4b:a3:ce:81:8e:59:a7:
43:ee:f1:72:b2:70:5b:8e:23:84:e4:1c:60:92:65:
02:31:71:5f:cf:d4:f7:15:f1:11:38:fc:68:36:d2:
41:9a:f0:02:b5:2c:b4:98:d2:6d:f3:42:a5:f7:21:
6e:5f:cd:df:58:09:12:b5:9b:8d:7c:41:1d:9d:cd:
72:73:7c:f5:d6:2d:7a:1b:9b:ac:ea:b3:da:75:b1:
96:b2:ff:e2:40:db:9d:fa:ce:05:81:f7:78:c9:df:
fc:97:fc:a0:6e:ad:3c:8f:5b:f2:d7:31:5c:89:b5:
6a:de:55:d8:14:e9:e4:6e:c2:84:90:c2:57:c0:1a:
72:16:51:f7:50:bf:aa:f7:f0:b1:5f:fb:d9:d8:f6:
dd:0f:da:7d:bd:b9:c5:cd:f0:55:4d:67:4d:4c:d7:
75:3e:0d:9a:f2:01:22:a3:22:11:d1:37:3f:ca:b4:
69:79:6e:f1:65:24:ad:d7:69:eb:c1:ce:7f:2f:af:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:84:AA:DA:F8:9B:BF:CA:4F:B6:A9:6D:FA:A6:FF:88:26:E3:90
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pzGEqtr4m7_KT7apbfqm_4gm45A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
65:45:09:1c:32:ba:15:92:7e:3f:3a:14:3a:32:ea:88:6f:10:
38:ec:4b:bc:0a:a0:2e:27:04:fb:f5:90:11:6a:67:20:e5:6d:
39:5d:13:e9:03:e2:e3:1d:d8:81:1b:cf:32:79:51:06:49:ba:
fd:5e:f5:5e:36:14:14:0e:7b:b0:b9:9a:21:86:08:c5:ed:5b:
eb:35:0d:2c:e0:11:cb:08:13:d6:86:07:33:b0:d1:58:a3:28:
60:55:72:fe:6a:f5:c6:66:8f:62:6d:15:b8:6e:67:e2:89:d9:
3e:d5:2a:d4:18:00:2f:58:9e:49:d7:bb:b2:8e:6e:b1:ba:88:
64:0f:53:7d:b4:c1:c2:e7:0f:8d:95:75:78:c1:83:58:9d:21:
69:1b:78:1d:74:06:2a:eb:6f:d6:56:fa:28:23:bd:f7:b0:09:
71:df:d1:f8:1e:d0:2c:f9:02:1b:96:8b:78:00:39:c2:e7:ac:
7b:8a:9c:32:6c:9b:ac:fb:69:d1:fb:1a:0e:46:8b:1b:90:91:
19:c6:74:9c:30:aa:2d:87:41:4e:d8:7b:d3:a0:c5:71:db:fb:
24:d9:4d:20:6d:d7:37:53:0a:06:60:16:ba:e6:f8:82:f1:95:
8d:2a:cc:ee:cb:73:fc:98:fd:42:b0:2f:3d:43:fe:3c:59:fb:
a2:6f:78:ba
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZYkieidg7caJ1OmpIuioszlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwNDExMTEwODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzMxODRhYWRhZjg5YmJmY2E0ZmI2YTk2ZGZhYTZmZjg4MjZlMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8xGdPDDz56lnKxlavKRfuoHn+Wk
YUFVvJGPw12uHNNFQHSKPdyqTNUJYY7Ut0biAxp2XDjb6HFjTtdYVkNayglK5Euj
zoGOWadD7vFysnBbjiOE5BxgkmUCMXFfz9T3FfEROPxoNtJBmvACtSy0mNJt80Kl
9yFuX83fWAkStZuNfEEdnc1yc3z11i16G5us6rPadbGWsv/iQNud+s4Fgfd4yd/8
l/ygbq08j1vy1zFcibVq3lXYFOnkbsKEkMJXwBpyFlH3UL+q9/CxX/vZ2PbdD9p9
vbnFzfBVTWdNTNd1Pg2a8gEioyIR0Tc/yrRpeW7xZSSt12nrwc5/L6+3OQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFKcxhKra+Ju/yk+2qW36pv+IJuOQMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvcHpHRXF0cjRtN19LVDdhcGJmcW1fNGdtNDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB
MgMEBwU1gAMEByU/AAMEAy7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3s
oAMDAE5TAwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AAD
BAVVW4ADBAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgD
BAVZvsADAwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAM
AAMEAMEWZwMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AMEBdQkAAMEBdQyAAMEBdRb
oAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ
4AMEBNkK8AMEBNkS8AMEBNlPIDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZI
hvcNAQELBQADggEBAGVFCRwyuhWSfj86FDoy6ohvEDjsS7wKoC4nBPv1kBFqZyDl
bTldE+kD4uMd2IEbzzJ5UQZJuv1e9V42FBQOe7C5miGGCMXtW+s1DSzgEcsIE9aG
BzOw0VijKGBVcv5q9cZmj2JtFbhuZ+KJ2T7VKtQYAC9YnknXu7KObrG6iGQPU320
wcLnD42VdXjBg1idIWkbeB10Birrb9ZW+igjvfewCXHf0fge0Cz5AhuWi3gAOcLn
rHuKnDJsm6z7adH7Gg5GixuQkRnGdJwwqi2HQU7Ye9OgxXHb+yTZTSBt1zdTCgZg
Frrm+ILxlY0qzO7Lc/yY/UKwLz1D/jxZ+6JveLo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:59 2025 by rpki-client