Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-XhVFrmL8C7QkrYr-7PcYxMimng.roa
File: 1-XhVFrmL8C7QkrYr-7PcYxMimng.roa (raw, json)
Hash identifier: LWg6OwUCD/GJxguv6U5E8pjLm+4wrr83/YGKZNucnDM=
Subject key identifier: F9:78:55:16:B9:8B:F0:2E:D0:92:B6:2B:FB:B3:DC:63:13:22:9A:78
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01972581392D9645AC1720C06DE8F63E4AC1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-XhVFrmL8C7QkrYr-7PcYxMimng.roa
Signing time: Sat 31 May 2025 08:41:55 +0000
ROA not before: Sat 31 May 2025 08:41:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.130.160.0/22 maxlen: 22
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.137.136.0/23 maxlen: 23
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.184.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.241.122.0/23 maxlen: 23
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 08:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:81:39:2d:96:45:ac:17:20:c0:6d:e8:f6:3e:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 31 08:41:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9785516b98bf02ed092b62bfbb3dc6313229a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:e5:6c:b6:36:d3:20:d6:2c:7e:03:6e:6a:
d3:4a:70:ab:e1:fa:21:1f:ba:8e:b3:1f:32:67:4a:
a1:3b:3a:b3:9a:54:5a:8f:a9:a9:6c:71:ae:46:31:
c2:48:41:0f:0c:17:cb:b4:04:b5:57:22:86:52:2b:
0d:13:98:4f:c7:d1:f8:6c:14:c9:a8:45:cc:4c:24:
b6:97:cd:e7:fc:0a:b5:3a:d9:3d:93:85:01:36:1b:
40:53:b4:ca:36:97:d3:be:53:80:c1:6e:b6:0b:1b:
1b:bb:4e:29:91:fe:8c:56:7c:d5:75:d2:b1:a0:cc:
dc:86:50:db:49:be:50:6f:33:fd:3a:74:76:dc:dc:
42:9a:13:d5:9c:c1:49:40:c6:5b:d1:8e:9f:f6:5c:
e4:7c:10:9a:1c:a4:48:d4:9a:ea:0c:2b:75:53:89:
1e:33:e0:4d:3f:c0:0b:05:88:06:bd:d3:fd:00:db:
d6:b1:b4:b5:15:a0:c7:3d:2b:64:30:b7:e7:cd:1a:
42:a9:72:36:11:4b:7a:85:7d:57:04:eb:4f:e5:99:
d8:df:d5:56:b4:35:74:0a:45:a9:bf:fe:19:ae:1c:
d4:e0:1a:aa:f5:3f:56:11:e0:e4:58:42:86:6e:4f:
1e:1c:f9:f0:12:b3:ba:64:5f:40:d5:d2:1d:e0:a3:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:55:16:B9:8B:F0:2E:D0:92:B6:2B:FB:B3:DC:63:13:22:9A:78
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-XhVFrmL8C7QkrYr-7PcYxMimng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0-31.15.6.255
45.81.104.0/22
45.130.160.0/22
45.133.60.0/22
45.137.12.0/23
45.137.136.0/23
45.137.139.0/24
45.145.135.0/24
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/24
92.118.183.0/24
178.19.40.0-178.19.42.255
185.28.51.0/24
185.229.216.0/22
185.231.184.0/22
185.241.122.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:07:13:eb:25:2d:03:f2:d3:c8:f4:87:70:fd:ab:b8:5a:ad:
99:d9:1a:4e:e5:92:86:1c:e1:e5:67:78:de:2a:14:80:4e:23:
1c:09:84:46:69:91:03:8a:b6:7c:57:70:72:96:b3:dd:bb:fa:
58:52:6c:4a:67:1d:c1:15:9e:35:1e:11:81:07:90:76:c2:30:
2a:a4:14:37:71:35:59:ae:1c:78:d0:61:cd:af:6e:3b:4c:d3:
5f:19:84:b1:ab:f4:72:37:4b:7e:8c:94:88:cf:00:3b:7c:92:
20:c9:4d:6d:91:d9:ca:df:38:bf:e8:3d:67:39:98:7b:2f:d4:
0a:46:68:6a:b9:12:67:04:2a:18:90:8d:b8:51:78:a3:7c:55:
e3:a9:ce:7d:95:db:e4:ef:c3:2c:0a:88:74:b3:f1:30:08:fe:
9f:eb:3c:a2:5c:05:32:fa:5f:e8:6e:ad:ac:78:ed:90:fd:a1:
03:20:7e:95:eb:22:8a:0c:6b:27:c8:97:a5:5f:8f:2a:95:ae:
7d:eb:7c:84:ff:b1:c7:2d:36:54:2a:88:73:24:53:27:f6:fb:
11:76:f7:63:c1:8f:3a:f3:9c:e9:e2:77:68:1b:b9:24:84:9e:
53:73:40:ee:01:e0:c6:04:79:8c:5a:a2:4b:b7:0f:9b:55:9d:
cf:ef:70:14
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZclgTktlkWsFyDAbej2PkrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwNTMxMDg0MTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc4NTUxNmI5OGJmMDJlZDA5MmI2MmJmYmIzZGM2MzEzMjI5YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6vlbLY20yDWLH4DbmrTSnCr4foh
H7qOsx8yZ0qhOzqzmlRaj6mpbHGuRjHCSEEPDBfLtAS1VyKGUisNE5hPx9H4bBTJ
qEXMTCS2l83n/Aq1Otk9k4UBNhtAU7TKNpfTvlOAwW62Cxsbu04pkf6MVnzVddKx
oMzchlDbSb5QbzP9OnR23NxCmhPVnMFJQMZb0Y6f9lzkfBCaHKRI1JrqDCt1U4ke
M+BNP8ALBYgGvdP9ANvWsbS1FaDHPStkMLfnzRpCqXI2EUt6hX1XBOtP5ZnY39VW
tDV0CkWpv/4ZrhzU4Bqq9T9WEeDkWEKGbk8eHPnwErO6ZF9A1dId4KMDkQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFPl4VRa5i/Au0JK2K/uz3GMTIpp4MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvMS1YaFZGcm1MOEM3UWtyWXItN1BjWXhNaW1uZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUz
MS8xL0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBvAYIKwYBBQUHAQcBAf8EgawwgakwgaYEAgABMIGfAwQC
AjvAMAsDAwAfDwMEAB8PBgMEAi1RaAMEAi2CoAMEAi2FPAMEAS2JDAMEAS2JiAME
AC2JiwMEAC2RhwMEAi2WVAMEAi2YjAMEAi2bOAMEAlm+mAMEAFx2tAMEAFx2tzAM
AwQDshMoAwQAshMqAwQAuRwzAwQCueXYAwQCuee4AwQBufF6AwQCufTkAwQCufYM
AwQCwh9oAwQCwiBwMA0GCSqGSIb3DQEBCwUAA4IBAQCtBxPrJS0D8tPI9Idw/au4
Wq2Z2RpO5ZKGHOHlZ3jeKhSATiMcCYRGaZEDirZ8V3BylrPdu/pYUmxKZx3BFZ41
HhGBB5B2wjAqpBQ3cTVZrhx40GHNr247TNNfGYSxq/RyN0t+jJSIzwA7fJIgyU1t
kdnK3zi/6D1nOZh7L9QKRmhquRJnBCoYkI24UXijfFXjqc59ldvk78MsCoh0s/Ew
CP6f6zyiXAUy+l/obq2seO2Q/aEDIH6V6yKKDGsnyJelX48qla5963yE/7HHLTZU
KohzJFMn9vsRdvdjwY8685zp4ndoG7kkhJ5Tc0DuAeDGBHmMWqJLtw+bVZ3P73AU
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:05 2025 by rpki-client