Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6Z_Rkw4P924Ggl0PZNreRu1xFRA.roa
File: 6Z_Rkw4P924Ggl0PZNreRu1xFRA.roa (raw, json)
Hash identifier: qEpU+vfa4ENQKNHMALcZdlgo8rAEAOteTGcXFsBjuWM=
Subject key identifier: E9:9F:D1:93:0E:0F:F7:6E:06:82:5D:0F:64:DA:DE:46:ED:71:15:10
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0196DD0EB3ADDEC4A386F60055B6F85BB344
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6Z_Rkw4P924Ggl0PZNreRu1xFRA.roa
Signing time: Sat 17 May 2025 07:04:10 +0000
ROA not before: Sat 17 May 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/24 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/21 maxlen: 24
37.191.81.0/24 maxlen: 24
37.191.82.0/24 maxlen: 24
37.191.83.0/24 maxlen: 24
37.191.84.0/24 maxlen: 24
37.191.85.0/24 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
46.34.184.0/22 maxlen: 22
46.34.188.0/22 maxlen: 22
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: Failed, certificate revoked on Sat 17 May 2025 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:0e:b3:ad:de:c4:a3:86:f6:00:55:b6:f8:5b:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: May 17 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99fd1930e0ff76e06825d0f64dade46ed711510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:82:a7:e2:16:2a:31:72:20:67:b3:6b:3d:
25:2f:d8:43:b2:80:94:e9:06:5b:4d:76:5b:14:b0:
40:70:81:f9:a0:63:c0:b8:13:e1:94:16:c5:0d:51:
64:62:1f:e4:c3:1e:e8:50:db:ea:e2:1b:4a:8a:a9:
34:00:3c:97:f3:44:8f:df:81:ba:7b:df:3d:38:3d:
35:4d:17:b6:7f:c7:23:11:31:72:a3:af:2f:05:ee:
09:78:3c:22:52:2c:15:b3:1c:52:d7:02:de:dc:04:
f5:7e:1f:9c:50:96:9b:85:b7:ff:71:d8:c1:41:4d:
15:ea:2a:67:08:7d:07:c0:db:58:9d:6c:65:76:45:
26:e9:59:d6:7b:85:de:79:d9:55:ed:5c:29:7c:d3:
00:38:14:2a:d3:7a:96:1d:ac:ca:ab:21:38:8a:41:
4e:c1:ec:7a:ae:bb:a4:4e:e8:f4:b8:24:bc:3a:6d:
f6:f1:10:75:d2:9d:c2:f6:9a:73:8e:49:32:09:95:
70:6a:a3:76:a2:35:4e:22:96:63:92:92:1e:8b:b8:
94:ba:29:5b:e2:05:3a:1c:48:14:17:fb:85:16:b4:
37:d5:1a:40:98:43:82:08:0a:eb:17:85:40:7a:8c:
83:6e:71:f7:3e:70:63:5c:c7:53:7e:51:6a:9f:e2:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9F:D1:93:0E:0F:F7:6E:06:82:5D:0F:64:DA:DE:46:ED:71:15:10
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6Z_Rkw4P924Ggl0PZNreRu1xFRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.148.0/24
188.136.158.0/24
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.203.255
188.136.208.0/23
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
64:1a:08:c8:09:2a:26:e3:04:e9:a6:45:46:c3:ef:5e:06:69:
a7:29:eb:8f:71:99:92:eb:5b:e7:d2:5d:bc:c1:0e:12:f5:df:
8a:8d:4e:54:80:9a:92:3f:fc:69:43:d3:ca:1b:59:13:62:69:
f4:ca:81:ca:90:17:d9:6c:0d:4d:5e:ee:ae:7c:2e:00:a6:04:
e8:7e:2f:ec:94:60:05:7e:02:36:ac:38:cb:44:bb:1a:83:a2:
75:e8:72:01:4c:f8:3e:dd:64:3f:0d:e6:34:e0:31:6a:b2:39:
f1:a8:10:f2:d7:49:0e:7c:df:ea:f5:c8:73:9b:b1:04:b5:2a:
dd:ca:87:d9:16:48:a5:1a:25:2d:e0:0c:b0:ab:cd:57:49:5d:
71:c8:1b:bd:31:cc:82:7d:be:33:40:df:41:ef:42:4f:d8:2e:
43:26:a2:15:98:d7:69:5c:0d:90:82:f6:6c:d1:80:98:99:5a:
65:52:55:60:16:dc:ff:b2:57:b4:89:e0:9b:92:f6:f8:83:84:
31:a8:a5:13:5d:0a:16:42:d8:16:12:a8:da:ac:0d:75:52:2c:
cb:a8:64:ad:12:76:40:b8:af:df:a9:3a:21:45:8b:00:51:a0:
5a:8b:0e:f8:0b:0a:7b:13:03:a2:fd:c4:48:1c:68:ba:b9:19:
53:d1:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:46 2025 by rpki-client