Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/7t2vH7i0gZVbnDgxLdpVQDFNrJQ.roa
File: 7t2vH7i0gZVbnDgxLdpVQDFNrJQ.roa (raw, json)
Hash identifier: KjKKp0Ohcj7ZbsNXDPKbfKKKgDyEjoom4AFAvDnHfmU=
Subject key identifier: EE:DD:AF:1F:B8:B4:81:95:5B:9C:38:31:2D:DA:55:40:31:4D:AC:94
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0196D484244CD5057EF0AEB771B931815BE1
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/7t2vH7i0gZVbnDgxLdpVQDFNrJQ.roa
Signing time: Thu 15 May 2025 15:15:51 +0000
ROA not before: Thu 15 May 2025 15:15:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 24
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.28.0/22 maxlen: 24
45.8.29.0/24 maxlen: 24
45.8.30.0/24 maxlen: 24
45.9.108.0/22 maxlen: 24
45.9.108.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.9.110.0/24 maxlen: 24
45.9.111.0/24 maxlen: 24
45.10.208.0/22 maxlen: 24
45.10.208.0/23 maxlen: 23
45.10.208.0/24 maxlen: 24
45.10.209.0/24 maxlen: 24
45.10.210.0/24 maxlen: 24
45.13.160.0/22 maxlen: 24
45.13.160.0/24 maxlen: 24
45.66.188.0/22 maxlen: 24
45.66.188.0/24 maxlen: 24
45.66.189.0/24 maxlen: 24
45.66.190.0/24 maxlen: 24
45.66.191.0/24 maxlen: 24
45.80.112.0/22 maxlen: 24
45.80.113.0/24 maxlen: 24
45.80.114.0/23 maxlen: 24
45.87.228.0/22 maxlen: 24
45.87.231.0/24 maxlen: 24
45.93.64.0/22 maxlen: 24
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 24
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 24
45.142.77.0/24 maxlen: 24
45.142.78.0/24 maxlen: 24
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 24
45.147.213.0/24 maxlen: 24
45.147.214.0/24 maxlen: 24
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 24
45.149.68.0/24 maxlen: 24
45.149.69.0/24 maxlen: 24
45.156.168.0/22 maxlen: 24
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 24
45.158.220.0/22 maxlen: 24
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 24
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 24
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 24
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 24
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 24
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/23 maxlen: 24
193.108.46.0/24 maxlen: 24
193.108.96.0/23 maxlen: 24
193.108.96.0/24 maxlen: 24
193.108.97.0/24 maxlen: 24
193.164.222.0/23 maxlen: 24
193.168.4.0/23 maxlen: 24
193.168.4.0/24 maxlen: 24
194.146.84.0/22 maxlen: 24
194.146.84.0/24 maxlen: 24
194.146.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 11:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:84:24:4c:d5:05:7e:f0:ae:b7:71:b9:31:81:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: May 15 15:15:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeddaf1fb8b481955b9c38312dda5540314dac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:e8:7f:a5:56:dc:2d:f4:28:99:0b:43:d5:
b7:2b:d1:1e:bc:36:63:8e:98:fa:a1:e2:79:b3:b5:
64:de:7e:a6:ec:7d:71:fe:ae:46:6d:ec:59:c0:12:
c0:bb:7c:f9:93:16:13:ff:77:cc:1f:0f:ea:32:09:
a4:eb:89:fc:50:c1:cd:14:ef:30:10:2d:ec:a9:33:
f2:c5:f0:0e:95:a1:09:8d:db:02:d2:55:c8:78:a2:
09:95:26:f3:70:87:4f:b3:8c:83:21:d4:b6:b3:33:
f2:b3:3d:48:c7:35:9e:8b:41:a6:a6:06:5f:8b:a1:
bd:79:7c:81:b5:1c:c2:1f:c5:14:30:8b:fb:45:2b:
99:24:32:e0:7f:25:8d:f0:f5:0e:5d:01:31:8e:26:
a9:ce:84:90:2d:4f:86:73:99:2d:ec:bb:db:6a:17:
af:6e:1e:6f:7f:ec:c6:70:a7:6b:b1:94:80:98:2b:
c8:77:ed:85:5f:0e:68:5c:18:20:7f:24:4e:a0:ff:
0e:0a:45:86:bd:2a:18:2c:c7:f9:45:3a:6a:eb:79:
c2:9d:f7:f9:90:99:bf:cb:94:c5:67:7b:eb:0b:33:
00:93:60:82:84:e0:d2:fb:c3:f1:1f:cd:b8:44:8c:
f5:c6:60:e9:80:9b:a2:5b:c4:00:3c:fe:00:87:fa:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:AF:1F:B8:B4:81:95:5B:9C:38:31:2D:DA:55:40:31:4D:AC:94
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/7t2vH7i0gZVbnDgxLdpVQDFNrJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.28.0/22
45.9.108.0/22
45.10.208.0/22
45.13.160.0/22
45.66.188.0/22
45.80.112.0/22
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/23
193.108.96.0/23
193.164.222.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:cc:27:e7:fa:12:22:84:e7:b8:e6:9a:a5:88:26:cd:1a:34:
6a:96:d3:cb:b6:5e:6e:03:23:0b:c1:57:9e:0c:c2:65:0e:d0:
b0:e1:be:38:fc:dd:4a:0d:56:e2:88:66:4a:89:b9:6c:8e:e4:
cc:e3:63:3f:27:e9:b6:e9:cb:2d:fc:e2:28:3c:37:2c:c0:c7:
84:57:06:18:77:93:9d:13:9a:50:26:3b:73:f9:19:3b:7b:10:
8e:89:ea:19:ae:d1:e5:ae:73:da:ed:cf:7e:07:53:ab:c6:bf:
5b:6c:a6:39:ea:87:02:55:a8:d8:e2:c3:1e:c5:4f:43:37:0b:
bb:76:d4:fe:f8:7b:a4:1f:7c:2e:e0:94:4c:23:81:c3:f2:fc:
e1:47:65:84:ef:c1:fd:9a:55:89:ae:55:ef:88:6f:18:44:80:
c8:a8:03:32:e8:34:1d:a1:9f:76:e7:c7:25:29:ff:cd:66:44:
39:0b:3a:ff:db:eb:98:72:f4:1d:20:7f:c3:8a:36:ce:17:37:
e3:ad:f3:f0:42:56:a6:ce:e1:d0:9e:94:c7:26:77:9b:38:1a:
30:e0:23:9e:bb:3b:89:2d:9b:d0:7a:17:2a:c6:04:7f:5e:a5:
1c:71:9c:cc:32:bc:6a:08:78:fe:e0:ad:9e:90:f9:4e:c7:8f:
56:31:bd:4d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZbUhCRM1QV+8K63cbkxgVvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk
NGU4YzUwHhcNMjUwNTE1MTUxNTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWRkYWYxZmI4YjQ4MTk1NWI5YzM4MzEyZGRhNTU0MDMxNGRhYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW3of6VW3C30KJkLQ9W3K9EevDZj
jpj6oeJ5s7Vk3n6m7H1x/q5GbexZwBLAu3z5kxYT/3fMHw/qMgmk64n8UMHNFO8w
EC3sqTPyxfAOlaEJjdsC0lXIeKIJlSbzcIdPs4yDIdS2szPysz1IxzWei0GmpgZf
i6G9eXyBtRzCH8UUMIv7RSuZJDLgfyWN8PUOXQExjiapzoSQLU+Gc5kt7Lvbahev
bh5vf+zGcKdrsZSAmCvId+2FXw5oXBggfyROoP8OCkWGvSoYLMf5RTpq63nCnff5
kJm/y5TFZ3vrCzMAk2CChODS+8PxH824RIz1xmDpgJuiW8QAPP4Ah/qCQQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFO7drx+4tIGVW5w4MS3aVUAxTayUMB8GA1UdIwQY
MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et
YWM4NjQ3ZDA1NThhLzEvN3Qydkg3aTBnWlZibkRneExkcFZRREZOckpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh
LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAIC
O2QDBAItCBwDBAItCWwDBAItCtADBAItDaADBAItQrwDBAItUHADBAItV+QDBAIt
XUADBAItg5wDBAItjkwDBAItk9QDBAItlUQDBAItnKgDBAItnNgDBAItntwDBAI+
wLwDBAJTluADBAJV0DgDBAJcdpADBAK5M6QDBADBKg8DBADBKoQDBADBKocDBADB
KpUDBAHBbC4DBAHBbGADBAHBpN4DBAHBqAQDBALCklQwDQYJKoZIhvcNAQELBQAD
ggEBAKnMJ+f6EiKE57jmmqWIJs0aNGqW08u2Xm4DIwvBV54MwmUO0LDhvjj83UoN
VuKIZkqJuWyO5MzjYz8n6bbpyy384ig8NyzAx4RXBhh3k50TmlAmO3P5GTt7EI6J
6hmu0eWuc9rtz34HU6vGv1tspjnqhwJVqNjiwx7FT0M3C7t21P74e6QffC7glEwj
gcPy/OFHZYTvwf2aVYmuVe+IbxhEgMioAzLoNB2hn3bnxyUp/81mRDkLOv/b65hy
9B0gf8OKNs4XN+Ot8/BCVqbO4dCelMcmd5s4GjDgI567O4ktm9B6FyrGBH9epRxx
nMwyvGoIeP7grZ6Q+U7Hj1YxvU0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:13:49 2025 by rpki-client