Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/_PrrA3GPvQOvu9ln7v1PZqWYv5w.roa
File: _PrrA3GPvQOvu9ln7v1PZqWYv5w.roa (raw, json)
Hash identifier: scqXlK6ymPyX49FQ0atjhkcmoYaIjqXUED0oERCDCzY=
Subject key identifier: FC:FA:EB:03:71:8F:BD:03:AF:BB:D9:67:EE:FD:4F:66:A5:98:BF:9C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0195D1D5BAC3CABDB3998F5A59CB7079004D
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/_PrrA3GPvQOvu9ln7v1PZqWYv5w.roa
Signing time: Wed 26 Mar 2025 09:43:19 +0000
ROA not before: Wed 26 Mar 2025 09:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21267
IP address blocks: 5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a0d:7680::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Mar 2025 15:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:d5:ba:c3:ca:bd:b3:99:8f:5a:59:cb:70:79:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 26 09:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcfaeb03718fbd03afbbd967eefd4f66a598bf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:17:5c:9b:84:c5:30:61:bb:18:50:18:b0:
4f:1d:12:56:71:8c:5b:7d:0f:13:50:75:ef:3a:8b:
05:1d:da:0e:d0:2d:e3:cc:0e:e3:dd:ec:55:3a:fa:
3d:b2:3f:b2:12:e9:5d:ca:e3:fd:14:fd:6c:bb:50:
0c:ae:18:d2:56:14:89:b5:59:20:4d:3a:4e:2b:08:
af:ff:ba:c8:c5:e6:9b:12:c8:df:75:2d:06:db:79:
df:c1:20:31:e3:76:5d:f6:07:7b:a8:e9:c0:cc:46:
83:d3:f2:10:5b:c7:49:42:d6:58:46:57:d3:12:d0:
e2:09:17:6d:25:d3:1b:ff:bf:e6:3a:59:1e:69:ca:
53:ef:73:39:64:35:4d:75:71:b9:bf:6b:23:d5:2a:
f3:ac:94:24:02:a0:0f:9e:e8:c9:96:dd:dd:11:70:
fc:96:80:75:f6:6c:0b:db:a6:1d:1f:51:17:73:2f:
07:a3:09:da:a5:6c:76:dc:e5:09:17:e3:5e:8a:1d:
f2:8e:f6:35:07:db:74:50:4e:c8:6e:af:3f:d5:33:
7e:51:47:02:3e:46:ec:7b:7c:c5:a0:b6:b7:1a:db:
16:63:4d:9f:5e:10:4b:8d:10:62:2a:9a:f0:89:c9:
82:f6:f9:23:dc:89:2b:3e:22:5a:4f:f0:c9:c9:be:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:EB:03:71:8F:BD:03:AF:BB:D9:67:EE:FD:4F:66:A5:98:BF:9C
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/_PrrA3GPvQOvu9ln7v1PZqWYv5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
83.150.252.0/22
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
176.58.0.0/21
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a0d:7680::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:b0:a2:49:84:fd:cc:f5:55:80:61:f9:24:f1:e0:89:82:1c:
62:c4:df:b6:1f:0d:18:74:c9:45:91:2e:89:4a:50:b5:44:a6:
56:e1:35:26:7f:68:32:46:51:57:68:58:85:0d:da:59:19:fe:
d1:91:01:6e:82:b2:86:ec:83:1a:3b:14:92:28:47:fe:4d:f1:
37:2c:ac:67:60:30:dc:99:9a:97:04:be:fe:ba:25:62:d8:55:
d7:d1:ef:b8:ac:66:29:5a:3c:a1:86:ca:96:24:ff:8d:38:28:
e0:82:2a:b8:40:60:2c:bd:c8:32:fa:49:42:dd:f8:7e:2b:f8:
33:66:f6:3f:ec:9a:aa:6c:08:3c:dd:e3:14:cc:b5:f6:e7:4c:
c3:51:0c:9c:31:e4:89:88:8b:ae:d2:9e:99:bd:74:89:88:ee:
d7:74:b7:c6:74:87:fd:11:44:fd:05:d9:63:95:00:60:f0:bd:
dc:cb:9b:3d:53:f5:18:58:f4:d4:22:de:0e:53:5e:d9:f2:9b:
71:7d:1b:40:f5:75:1e:20:79:76:d7:5a:74:39:55:ce:60:e5:
bc:8b:f6:99:0f:77:41:59:a5:8a:09:94:d8:b8:1e:05:63:62:
cc:a8:b8:f0:da:de:d5:4f:ea:4e:3b:c6:33:6f:68:47:be:f5:
c0:17:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:43:51 2025 by rpki-client