Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ZoSlYg-RIJSnsGCJTw154wxV_TA.roa
File: ZoSlYg-RIJSnsGCJTw154wxV_TA.roa (raw, json)
Hash identifier: csPE7EULKKfSJexQTjTRWsz7i5r+z0DkSXISQpVVKOc=
Subject key identifier: 66:84:A5:62:0F:91:20:94:A7:B0:60:89:4F:0D:79:E3:0C:55:FD:30
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0196F24BC506960081BFB8FEF774F8D79ACD
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ZoSlYg-RIJSnsGCJTw154wxV_TA.roa
Signing time: Wed 21 May 2025 10:02:53 +0000
ROA not before: Wed 21 May 2025 10:02:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.187.33.0/24 maxlen: 24
37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.136.0/24 maxlen: 24
83.172.138.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 14:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:4b:c5:06:96:00:81:bf:b8:fe:f7:74:f8:d7:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 21 10:02:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6684a5620f912094a7b060894f0d79e30c55fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:aa:f7:97:54:de:f4:d9:b1:79:4a:4c:69:
14:8a:52:de:c3:9e:da:28:04:8d:a5:ae:3d:86:cf:
7d:71:7e:4d:0d:9d:da:75:e6:3f:05:70:bc:8a:44:
aa:df:c2:7f:97:e3:04:c0:8f:00:e9:f0:d8:fb:b6:
b3:97:ae:2f:79:b8:0a:05:07:bb:23:a4:13:30:9c:
52:24:5f:2f:18:4f:d5:b8:a0:2b:c9:98:21:ca:4d:
c3:a6:36:e8:a9:91:53:e2:3c:a2:8d:f1:e0:c0:0a:
06:24:1b:ed:b6:c7:ba:a4:e7:90:33:18:72:4a:60:
15:3e:85:61:0a:0a:1e:71:a5:3a:60:89:85:62:cf:
cf:68:fc:91:c1:78:42:98:88:85:89:34:bd:39:1f:
f1:39:8e:fb:08:bd:67:6e:10:be:ea:5f:03:b4:7d:
a3:8f:9d:eb:60:d5:48:97:c1:88:50:17:54:c8:33:
ae:41:41:72:53:20:94:94:9c:49:f2:0d:5b:8e:71:
30:32:22:31:a8:08:15:9a:b2:e2:0f:f6:e6:45:3b:
f1:fa:5f:bc:ea:1f:d0:4b:fe:87:ba:b5:f1:c1:de:
7c:88:dc:88:bf:fc:dc:82:79:03:45:b9:17:d2:1e:
3c:5f:1f:ed:af:c0:f2:7d:cc:54:63:7d:eb:41:c1:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:84:A5:62:0F:91:20:94:A7:B0:60:89:4F:0D:79:E3:0C:55:FD:30
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ZoSlYg-RIJSnsGCJTw154wxV_TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.33.0/24
37.235.48.0/24
37.235.51.0/24
45.153.127.0/24
46.183.187.0/24
83.172.134.0-83.172.136.255
83.172.138.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.214.32.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:358::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
97:af:5c:a6:6b:40:a6:3f:50:23:c9:87:44:9e:6b:fc:54:e9:
d1:7d:7d:75:43:33:68:ad:f3:0d:af:f1:08:67:c1:63:c8:84:
8e:27:a4:06:d7:72:40:79:6a:44:67:aa:9d:99:a4:4a:b8:8c:
fd:81:a1:f0:fd:5e:33:76:6f:da:93:a5:11:db:79:d2:85:1b:
28:53:03:16:17:6f:06:96:cb:ce:68:29:cc:d2:31:ba:cc:ef:
e6:be:17:e7:c9:38:bc:93:b5:d3:dc:2a:2f:89:04:2d:d6:73:
78:3a:a4:48:ba:fa:6b:73:d0:21:91:86:79:ac:93:f1:d8:8e:
b0:a4:6b:30:52:71:42:0e:34:17:5e:f2:5c:3e:14:47:64:4d:
a7:d4:c7:c7:31:09:d5:c9:14:88:17:32:8f:b5:27:fc:39:48:
3c:51:e3:98:cd:6c:5e:e6:f2:67:d4:38:c2:a1:de:e7:72:2d:
2c:d2:ee:7d:06:58:9c:c6:a2:e0:52:c2:4c:9c:c8:49:a6:01:
68:1d:04:66:12:98:6a:ee:f5:ca:7b:7a:90:d7:7d:5c:b7:65:
30:15:97:30:da:67:89:3f:9c:2d:01:b6:67:2f:2a:ba:9b:53:
ae:43:3c:84:17:2f:06:60:8a:73:78:6a:89:77:56:18:94:09:
e5:93:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:10 2025 by rpki-client