Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Or0xT-_6pmjaXtQyIl7ysvEsqLk.roa
File: Or0xT-_6pmjaXtQyIl7ysvEsqLk.roa (raw, json)
Hash identifier: cQMsSUWlPQoaXRkOVGzVUc2YCn3b5slY4Two/0qI94Q=
Subject key identifier: 3A:BD:31:4F:EF:FA:A6:68:DA:5E:D4:32:22:5E:F2:B2:F1:2C:A8:B9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019701E9E4B24598FA09C9F58701E068F9F0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Or0xT-_6pmjaXtQyIl7ysvEsqLk.roa
Signing time: Sat 24 May 2025 10:49:54 +0000
ROA not before: Sat 24 May 2025 10:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.130.160.0/22 maxlen: 22
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.137.136.0/23 maxlen: 23
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.184.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.241.122.0/23 maxlen: 23
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 07:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:e9:e4:b2:45:98:fa:09:c9:f5:87:01:e0:68:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 10:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3abd314feffaa668da5ed432225ef2b2f12ca8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:8a:8b:37:d7:60:4b:2d:32:c1:20:8c:2d:
ff:32:d2:d2:64:56:93:71:f9:d1:7a:02:47:80:1f:
45:9a:4b:00:80:3b:1b:7a:18:1b:ae:2d:7b:d3:0d:
80:9e:36:d7:49:50:58:6b:3c:da:94:8e:6c:2e:ae:
97:f0:3b:3f:b4:9a:9e:5d:c8:67:92:6e:c8:7e:6b:
5e:36:22:2a:03:3f:c9:c6:9f:c3:64:45:ae:1f:1d:
a6:3a:ec:e9:88:4d:cd:c6:4a:cf:7c:69:c8:3a:53:
39:86:7b:4a:71:c7:c4:60:f5:61:ee:e1:59:5e:8c:
89:dc:28:ab:d4:63:08:38:22:ff:e9:9e:e1:99:af:
64:ca:c2:bd:ba:2d:b6:8b:30:97:dc:5c:e4:97:e6:
91:d2:e0:b2:48:75:ce:e7:58:2a:30:0f:44:2e:54:
e6:1b:72:bc:7c:c9:ee:1b:aa:99:6d:dc:9e:ad:ed:
4f:4d:eb:54:d5:fc:74:00:5d:17:93:ab:58:80:36:
31:3a:61:ee:e6:2a:69:8d:43:33:cc:61:35:8b:5b:
0c:58:7d:a1:f4:3a:8f:8e:b0:d6:fc:72:bf:e3:64:
88:4a:f7:4c:41:c0:76:9d:2a:65:97:3b:89:5d:dc:
bb:0c:25:80:af:7c:e5:a2:4e:1e:0c:e1:d1:6d:0f:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:31:4F:EF:FA:A6:68:DA:5E:D4:32:22:5E:F2:B2:F1:2C:A8:B9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Or0xT-_6pmjaXtQyIl7ysvEsqLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.130.160.0/22
45.133.60.0/22
45.137.12.0/23
45.137.136.0/23
45.137.139.0/24
45.145.135.0/24
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.229.216.0/22
185.231.184.0/22
185.241.122.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:8e:c9:c1:f6:3c:0f:b5:31:2d:1e:2d:8b:e4:d5:61:38:16:
4c:1c:5d:ab:b8:ad:d0:fc:bc:b3:8a:ba:11:ca:68:c0:58:d3:
28:1c:75:0a:0f:af:83:ff:84:af:7a:da:8d:6c:f8:60:6d:3d:
6c:1f:9f:bb:71:94:12:8b:5e:a1:e7:a4:32:b0:17:1b:85:54:
09:eb:61:c2:05:1b:d1:c3:b8:c7:79:61:a2:5d:1b:0b:78:f6:
a0:5c:46:9b:66:ed:4c:55:ad:ca:e8:3f:5a:ed:8f:68:20:87:
78:48:eb:f2:b4:37:54:eb:22:78:29:69:cb:97:b2:c6:57:4b:
96:cf:b1:78:86:2e:06:2b:f6:c8:dc:25:79:1b:d9:11:20:c7:
71:5e:ed:a7:d2:3d:a2:c8:c2:5a:d2:53:0e:fd:58:ae:b6:9f:
67:37:4e:7c:9a:d1:1a:5b:07:ab:08:5b:8d:81:86:59:df:05:
35:48:7e:6e:af:74:7e:6d:92:f4:b5:2d:1d:64:5a:36:87:db:
5b:85:2a:51:5c:6f:ef:e7:6c:ec:0e:c3:a3:f3:e3:f7:06:79:
64:f9:f7:6a:9b:4b:fd:c7:02:94:cc:34:d8:fd:5a:fa:5b:1a:
c2:d4:28:1b:a4:64:9d:f0:94:d5:fb:c5:88:e7:cd:72:2a:3b:
2c:be:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:10 2025 by rpki-client