Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-wz-43wTCzaxNC3-F672LYXCJfk.roa
File: 1-wz-43wTCzaxNC3-F672LYXCJfk.roa (raw, json)
Hash identifier: ckfmcW+IEYqwGhRm86kOHtq6/Bxhsu9U58+r+4F2Brs=
Subject key identifier: FB:0C:FE:E3:7C:13:0B:36:B1:34:2D:FE:17:AE:F6:2D:85:C2:25:F9
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019661B281EFD2A8DE06E10646A1E2D14E0A
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-wz-43wTCzaxNC3-F672LYXCJfk.roa
Signing time: Wed 23 Apr 2025 08:10:10 +0000
ROA not before: Wed 23 Apr 2025 08:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
77.94.175.0/24 maxlen: 24
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.150.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.135.92.0/24 maxlen: 24
213.135.95.0/24 maxlen: 24
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Apr 2025 14:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:b2:81:ef:d2:a8:de:06:e1:06:46:a1:e2:d1:4e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 23 08:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0cfee37c130b36b1342dfe17aef62d85c225f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:8a:f9:87:8c:18:48:2c:0e:be:c4:88:70:
d2:7f:65:56:63:48:cb:94:69:94:18:c3:70:2b:64:
5b:4c:f6:ef:a6:31:ec:d5:10:01:7c:82:27:e6:1e:
24:2b:de:e2:6d:b2:b6:d6:1f:ac:55:d0:a4:78:3b:
b1:d6:89:9a:8d:32:65:a9:8b:4f:c2:fc:dd:c0:89:
ed:34:bd:91:a5:e4:26:79:0e:ad:14:b4:61:e4:48:
f9:11:5b:1b:a1:b6:11:f7:b8:aa:9a:f0:4b:68:b1:
ac:92:5c:c9:86:93:48:4c:43:a3:30:56:44:a7:89:
bc:86:74:63:b2:83:06:da:ad:d2:1c:80:8e:62:03:
a5:93:b9:cc:4a:2b:d2:6f:1b:3b:e3:45:b4:1d:71:
81:be:3d:14:a2:95:b7:de:6b:e9:cd:8e:86:fe:2d:
3a:e4:41:33:d4:b8:ae:ee:1e:86:cc:b4:ea:06:7e:
43:e6:d8:78:38:93:22:c3:19:70:c5:37:83:88:58:
86:5c:1f:bb:db:cc:b6:6d:18:a4:22:35:ff:f4:db:
51:5d:ce:55:39:20:f7:a5:16:97:f0:94:c3:2f:7e:
51:83:ac:2c:ec:40:0c:4a:d3:5c:53:b3:33:c0:8f:
93:46:0d:06:2e:ae:88:d8:9a:22:3a:53:3b:ee:03:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:FE:E3:7C:13:0B:36:B1:34:2D:FE:17:AE:F6:2D:85:C2:25:F9
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-wz-43wTCzaxNC3-F672LYXCJfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.82.0-213.135.92.255
213.135.95.0/24
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
5a:33:13:47:a7:69:cd:c5:d3:77:c0:7c:91:8a:d5:a3:45:1b:
7f:fc:f9:3f:f6:87:22:8a:2c:4e:61:ab:7c:63:81:bf:8a:a0:
e8:43:28:cc:df:06:83:95:e0:b4:b8:97:2d:6e:91:dc:23:89:
df:c0:57:61:ee:ba:84:97:45:50:3a:9f:00:3e:51:c8:a8:a5:
cc:af:3e:6f:f8:dd:e9:fa:ca:85:d1:87:3c:c0:74:2e:56:52:
c5:86:c2:13:50:c8:9b:24:9a:1e:f2:64:db:09:7f:68:df:8b:
a5:16:c3:de:df:2c:64:a9:dd:95:25:5b:64:1f:4b:8f:28:ee:
0a:e5:a4:a5:11:d1:bf:64:46:11:6b:5a:22:f3:3d:15:81:46:
63:ff:99:be:08:df:45:17:4a:a5:de:71:e0:32:d7:1c:2a:56:
d4:70:c9:5f:99:e2:8a:78:ad:b1:b7:7f:69:0e:4f:9f:e2:d9:
9b:0a:58:2f:83:75:99:c5:6b:84:60:9c:15:d9:f7:45:2a:aa:
02:3e:14:1d:d0:88:e9:a3:a9:4c:6c:63:39:df:3f:de:f7:d4:
57:02:a3:2d:51:b6:dd:d0:06:5b:c0:52:93:ea:5d:3f:d7:a3:
f5:9a:bb:64:39:ba:fc:10:fc:8c:26:e0:b4:f1:23:9b:f3:c0:
ed:af:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:30:38 2025 by rpki-client