Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2yRwdCb0LK4pvzbHRPMwLvpx6ew.roa
File: 2yRwdCb0LK4pvzbHRPMwLvpx6ew.roa (raw, json)
Hash identifier: OheC/i8gcDSp21dOd3TljpT3nmo0UOj9g1T9wuyoB+8=
Subject key identifier: DB:24:70:74:26:F4:2C:AE:29:BF:36:C7:44:F3:30:2E:FA:71:E9:EC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01971640807F1AB2BB6920AF6C5FF7224FC7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2yRwdCb0LK4pvzbHRPMwLvpx6ew.roa
Signing time: Wed 28 May 2025 09:36:55 +0000
ROA not before: Wed 28 May 2025 09:36:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.80.0/21 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.49.0/24 maxlen: 24
5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.88.0/22 maxlen: 22
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:40:80:7f:1a:b2:bb:69:20:af:6c:5f:f7:22:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 28 09:36:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db24707426f42cae29bf36c744f3302efa71e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:50:42:c8:fc:42:eb:64:af:d8:90:50:1a:
40:26:20:f2:ed:6a:15:2a:13:4b:05:6c:1b:28:84:
f8:27:c4:e8:72:20:75:d1:a0:02:fc:22:5e:c5:67:
06:f3:78:9b:65:4a:f5:3b:5a:1f:e8:c2:ac:d7:d6:
c8:6e:a5:b8:42:f8:93:47:ae:20:1a:ab:44:1c:cc:
7c:e0:16:bb:cd:a7:97:67:1c:55:2a:cb:af:22:0a:
64:23:43:dc:6e:67:ef:56:51:40:ae:85:89:0d:bd:
c4:91:19:d2:57:aa:a2:2f:b2:b8:cd:fd:38:a7:bc:
ce:fb:8a:7d:1f:3f:8a:c5:65:92:8c:a3:04:d6:ef:
dc:8d:34:06:bd:56:3d:d5:83:bd:08:40:0a:c6:7a:
42:65:b9:02:6d:ad:ed:8a:ea:65:bc:fe:94:8d:4d:
c6:40:69:cd:75:1d:e1:8a:b4:a3:2c:72:3d:f3:6c:
f4:18:c9:70:b6:5c:df:13:ef:2c:5b:7c:12:f7:2a:
ed:95:e7:b5:60:1a:b7:24:5c:61:24:94:14:35:87:
98:48:41:76:b8:ff:81:ed:c6:ec:ed:86:73:7b:3c:
21:e7:4e:12:1e:bc:78:8b:eb:fc:9f:ea:af:b4:97:
76:26:73:0f:17:6b:40:a3:25:8a:18:a1:96:8d:5a:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:70:74:26:F4:2C:AE:29:BF:36:C7:44:F3:30:2E:FA:71:E9:EC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2yRwdCb0LK4pvzbHRPMwLvpx6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.8.80.0/21
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0-5.101.95.255
5.188.44.0/22
5.188.49.0/24
5.188.192.0/22
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.48.0-91.243.61.255
91.243.88.0/22
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
42:0f:3d:9e:73:ea:07:c5:01:a5:72:54:97:ae:3e:56:07:7a:
3f:e3:4b:46:5e:ad:d0:75:34:42:7f:14:e8:96:2a:7e:c5:20:
d2:89:1c:2f:4b:35:00:c2:76:0b:3b:59:d3:ef:9c:aa:32:cf:
63:fc:a7:a0:8c:a6:5b:b8:45:35:92:12:78:c8:2d:3b:30:8e:
3c:94:f3:15:46:a3:64:26:49:3d:22:89:4e:97:0e:a8:e9:7d:
f2:59:37:0f:e1:31:fe:4f:98:c5:25:5c:98:7f:e9:be:56:eb:
d4:20:4f:c0:1a:38:b7:3f:a6:07:cf:b8:9a:ff:15:42:74:a2:
25:5e:ff:ee:cd:12:c8:6f:af:27:75:ea:89:94:50:af:8d:58:
5b:66:ca:39:47:9a:4a:c7:5c:dd:d9:45:1d:07:c3:37:99:7e:
88:04:56:cb:9b:63:0d:18:6b:3c:c9:d2:94:b6:77:5e:f0:ea:
61:32:87:d9:81:07:c0:7d:7c:f7:15:30:99:89:1a:fa:7f:fe:
12:f9:b7:d7:50:15:d0:55:72:e0:67:e4:30:19:78:80:6b:c5:
09:96:99:db:73:24:09:d7:08:bc:7c:ec:d2:01:98:ce:b2:b2:
24:29:12:9f:b4:61:89:e9:53:41:65:9b:c9:84:e3:df:1e:b3:
42:c0:f7:fa
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgISAZcWQIB/GrK7aSCvbF/3Ik/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwNTI4MDkzNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjI0NzA3NDI2ZjQyY2FlMjliZjM2Yzc0NGYzMzAyZWZhNzFlOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtQQsj8Qutkr9iQUBpAJiDy7WoV
KhNLBWwbKIT4J8TociB10aAC/CJexWcG83ibZUr1O1of6MKs19bIbqW4QviTR64g
GqtEHMx84Ba7zaeXZxxVKsuvIgpkI0PcbmfvVlFAroWJDb3EkRnSV6qiL7K4zf04
p7zO+4p9Hz+KxWWSjKME1u/cjTQGvVY91YO9CEAKxnpCZbkCba3tiuplvP6UjU3G
QGnNdR3hirSjLHI982z0GMlwtlzfE+8sW3wS9yrtlee1YBq3JFxhJJQUNYeYSEF2
uP+B7cbs7YZzezwh504SHrx4i+v8n+qvtJd2JnMPF2tAoyWKGKGWjVrwLQIDAQAB
o4IDNTCCAzEwHQYDVR0OBBYEFNskcHQm9CyuKb82x0TzMC76censMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMnlSd2RDYjBMSzRwdnpiSFJQTXdMdnB4NmV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSQYIKwYBBQUHAQcBAf8EggE4MIIBNDCCAR0EAgABMIIB
FTALAwMDBQgDBAAFCBADBAMFCDADBAEFCDwDBAAFCEEDBAMFCFADBAMFZQADBAIF
ZSADBAIFZUAwDAMEAQVlWgMEBQVlQAMEAgW8LAMEAAW8MQMEAgW8wAMEAQW8zAME
AgW80AMEAAW83zAMAwQABbzpAwQCBbzoAwQCBb34AwQCHyy8AwQDH7jAAwQBH7ju
AwQAH7jzAwQAJQkwAwQAJYs1AwQCJYs4AwQBLqECAwQALqEIAwQALqEKAwQBLqEO
AwQCLqEUMAwDBAIuoRwDBAIuoSAwDAMEAi6hLAMEAi6hMDAMAwQEW/MwAwQBW/M8
AwQCW/NYAwQCX9cAMAwDBACSud8DBAOSueADBAK8j+gDBAHDAvAwEQQCAAIwCwMJ
BioAHXgBAAHAMA0GCSqGSIb3DQEBCwUAA4IBAQBCDz2ec+oHxQGlclSXrj5WB3o/
40tGXq3QdTRCfxTolip+xSDSiRwvSzUAwnYLO1nT75yqMs9j/KegjKZbuEU1khJ4
yC07MI48lPMVRqNkJkk9IolOlw6o6X3yWTcP4TH+T5jFJVyYf+m+VuvUIE/AGji3
P6YHz7ia/xVCdKIlXv/uzRLIb68ndeqJlFCvjVhbZso5R5pKx1zd2UUdB8M3mX6I
BFbLm2MNGGs8ydKUtnde8OphMofZgQfAfXz3FTCZiRr6f/4S+bfXUBXQVXLgZ+Qw
GXiAa8UJlpnbcyQJ1wi8fOzSAZjOsrIkKRKftGGJ6VNBZZvJhOPfHrNCwPf6
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:37:16 2025 by rpki-client