Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YiWH8zf-xZuaKxruq9jyV51Etek.roa
File: YiWH8zf-xZuaKxruq9jyV51Etek.roa (raw, json)
Hash identifier: yY5sc+W0ijlbNvxjk95KawsKS7zUVdgTrmiXyNDLQF0=
Subject key identifier: 62:25:87:F3:37:FE:C5:9B:9A:2B:1A:EE:AB:D8:F2:57:9D:44:B5:E9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196AE3C9EC1AA7F4CE9D72B0E4D1E929B67
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YiWH8zf-xZuaKxruq9jyV51Etek.roa
Signing time: Thu 08 May 2025 04:52:10 +0000
ROA not before: Thu 08 May 2025 04:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
77.83.37.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:342::/32 maxlen: 32
2a09:346::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 May 2025 12:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:3c:9e:c1:aa:7f:4c:e9:d7:2b:0e:4d:1e:92:9b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 8 04:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=622587f337fec59b9a2b1aeeabd8f2579d44b5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:6e:b9:14:97:78:7e:a2:6a:bf:35:11:05:
fd:de:72:5a:61:88:41:57:c6:14:2d:55:68:d0:da:
8f:f7:f3:23:9a:d2:3e:c0:73:d5:1b:ba:3b:b2:8a:
55:e3:f4:81:3c:37:a0:a0:f6:f8:f6:91:1d:51:c3:
0f:98:0e:e9:f4:c8:d6:46:ed:08:92:2b:45:3d:34:
d4:80:df:37:d9:6d:86:6c:61:01:2b:ac:c1:0f:b4:
a2:5c:05:92:6c:55:02:bb:b5:42:66:dc:20:fb:40:
88:d8:46:46:1b:d8:d6:a2:52:10:ff:b3:20:e3:09:
61:dc:09:e5:c5:a0:5e:a0:b4:f1:ca:8a:e5:15:cd:
84:1f:98:b2:10:d5:49:b9:be:5d:66:98:9b:9d:18:
1a:ea:de:22:8e:71:44:46:8b:ba:3e:d3:1b:1f:59:
56:bb:74:09:08:27:73:ce:d5:1c:1c:55:fb:cd:48:
d7:b7:11:f8:4e:22:ac:14:8a:ef:9d:85:aa:51:c3:
99:c8:92:16:d2:ef:89:9d:65:30:e4:34:b3:12:12:
76:57:50:91:eb:6b:7f:b6:22:2f:1e:6f:db:39:29:
d2:6a:2e:7a:c4:da:69:d1:4c:a6:ca:ed:2f:c1:e6:
ae:34:fc:70:99:27:2d:ab:bb:3e:6c:b6:8e:2f:1f:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:87:F3:37:FE:C5:9B:9A:2B:1A:EE:AB:D8:F2:57:9D:44:B5:E9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YiWH8zf-xZuaKxruq9jyV51Etek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.88.136.0/24
45.94.171.0/24
45.132.180.0/24
45.132.182.0/23
77.83.37.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.62.24.0/24
195.177.92.0/22
195.211.189.0-195.211.191.255
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:342::/32
2a09:346::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
31:35:f1:08:23:b7:e8:b1:90:f6:56:77:34:5d:5a:f7:37:0e:
d7:f3:37:ea:fc:82:38:89:c1:c6:83:3a:08:cf:6a:95:9d:ee:
d3:be:fc:38:b4:35:0d:2f:39:2f:59:79:0f:3c:e1:8b:c4:50:
74:db:ab:ab:0f:f5:15:e9:57:49:c9:8d:6d:66:94:2c:14:e3:
e3:c9:34:db:a1:a8:ed:2c:7e:9a:58:2f:5c:c7:5c:73:65:0a:
b4:9d:ac:4f:ac:02:86:73:ab:7f:2e:70:d6:a7:15:2d:d0:19:
b8:59:8d:33:f1:1b:f0:9e:ac:1b:05:68:f5:c7:de:6c:f3:bb:
f1:7d:a1:97:1f:67:88:1a:b2:93:d9:f2:3a:13:1d:bf:aa:a9:
34:b9:69:2e:5c:98:14:83:05:1e:8c:98:b9:85:04:2c:df:53:
7a:fc:2c:6b:87:4a:2d:59:5e:73:7f:69:f1:6f:f1:c8:1a:e9:
12:da:2f:43:3c:5a:54:15:82:a3:60:b5:64:3b:c2:90:66:6d:
2f:16:a6:71:a7:f2:6e:b4:48:9f:bf:c0:08:71:10:d0:ae:1c:
65:83:4a:65:e0:9d:77:b5:1e:0e:ba:12:a8:be:13:ce:5f:d3:
97:40:bf:48:5d:17:1d:ed:93:47:b5:8a:76:ce:b4:99:78:4a:
38:73:6b:6d
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAZauPJ7Bqn9M6dcrDk0ekptnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwNTA4MDQ1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjI1ODdmMzM3ZmVjNTliOWEyYjFhZWVhYmQ4ZjI1NzlkNDRiNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVtuuRSXeH6iar81EQX93nJaYYhB
V8YULVVo0NqP9/MjmtI+wHPVG7o7sopV4/SBPDegoPb49pEdUcMPmA7p9MjWRu0I
kitFPTTUgN832W2GbGEBK6zBD7SiXAWSbFUCu7VCZtwg+0CI2EZGG9jWolIQ/7Mg
4wlh3AnlxaBeoLTxyorlFc2EH5iyENVJub5dZpibnRga6t4ijnFERou6PtMbH1lW
u3QJCCdzztUcHFX7zUjXtxH4TiKsFIrvnYWqUcOZyJIW0u+JnWUw5DSzEhJ2V1CR
62t/tiIvHm/bOSnSai56xNpp0Uymyu0vweauNPxwmSctq7s+bLaOLx9FeQIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFGIlh/M3/sWbmisa7qvY8ledRLXpMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvWWlXSDh6Zi14WnVhS3hydXE5anlWNTFFdGVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCBlQQCAAEwgY4D
BAAFtVQDBAAFtVcDBAAtCR0wDAMEAC0NvQMEAC0NvgMEAC1YiAMEAC1eqwMEAC2E
tAMEAS2EtgMEAE1TJQMEAJITfQMEAbkr+AMEALkr+wMEAbnIPgMEAMEe8AMEAcEe
8gMEAME5KwMEAMLyYAMEAcLyYgMEAMM+GAMEAsOxXDAMAwQAw9O9AwQGw9OAMHYE
AgACMHADBQAqAXEgAwUDKgeSAAMFACoJA0ADBQAqCQNCAwUAKgkDRgMFACoJxEAD
BQAqDF1AAwUDKgylgAMFAyoQ38ADBQAqEPrAAwUDKhEFgAMFACoRFgADBQAqESqA
AwUAKhE5AAMFACoR1oADBQAqEp8AMA0GCSqGSIb3DQEBCwUAA4IBAQAxNfEII7fo
sZD2Vnc0XVr3Nw7X8zfq/II4icHGgzoIz2qVne7Tvvw4tDUNLzkvWXkPPOGLxFB0
26urD/UV6VdJyY1tZpQsFOPjyTTboajtLH6aWC9cx1xzZQq0naxPrAKGc6t/LnDW
pxUt0Bm4WY0z8RvwnqwbBWj1x95s87vxfaGXH2eIGrKT2fI6Ex2/qqk0uWkuXJgU
gwUejJi5hQQs31N6/Cxrh0otWV5zf2nxb/HIGukS2i9DPFpUFYKjYLVkO8KQZm0v
FqZxp/JutEifv8AIcRDQrhxlg0pl4J13tR4OuhKovhPOX9OXQL9IXRcd7ZNHtYp2
zrSZeEo4c2tt
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:44 2025 by rpki-client