Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RUMruTyY6RqetlXzELsBAkui6ro.roa
File: RUMruTyY6RqetlXzELsBAkui6ro.roa (raw, json)
Hash identifier: vUwhu/E0b0QU/ls3n9RZztzmaJX8OWlJdYr4b7gcDrg=
Subject key identifier: 45:43:2B:B9:3C:98:E9:1A:9E:B6:55:F3:10:BB:01:02:4B:A2:EA:BA
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019686334B5A714C44068B5A9C44CD6267C1
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RUMruTyY6RqetlXzELsBAkui6ro.roa
Signing time: Wed 30 Apr 2025 10:17:10 +0000
ROA not before: Wed 30 Apr 2025 10:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 05:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:33:4b:5a:71:4c:44:06:8b:5a:9c:44:cd:62:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Apr 30 10:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45432bb93c98e91a9eb655f310bb01024ba2eaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:eb:ce:f5:fd:79:09:a9:db:2f:c4:d9:50:
ce:57:b9:01:58:b2:f1:7b:74:59:23:9c:7f:8a:1d:
2b:ab:bc:1d:09:46:5d:b6:88:9c:df:94:5a:5c:70:
f0:20:a9:5f:56:f0:16:d5:96:73:e9:c7:c5:74:cf:
0c:4d:d4:af:45:cb:1c:56:5d:da:91:54:c1:55:f0:
75:35:19:b9:0b:8f:7f:a7:0a:e4:50:f0:9a:ab:5c:
14:5a:69:05:52:b3:d4:47:15:e0:58:bf:77:87:e8:
3e:dc:c6:82:9b:02:7c:5e:5e:68:30:47:c9:21:34:
c5:fc:91:d1:ff:74:27:d5:11:f3:1d:2c:3f:2c:f9:
a8:eb:ab:20:ef:c6:d4:e0:1c:e8:40:3e:5d:84:13:
aa:fc:2b:54:42:7c:b2:a6:79:cb:92:5d:95:57:d9:
09:28:14:40:f2:83:27:ce:5e:cf:21:ad:3a:26:bb:
18:ad:83:c3:24:1c:fb:ec:39:68:87:c6:ca:7f:65:
b6:ec:be:c0:53:62:3b:cd:92:34:83:c9:57:34:19:
1c:d5:18:a9:d9:81:9e:53:0d:b8:53:1c:1a:4f:b4:
fc:dd:0b:a0:54:6f:d3:03:c2:e4:c7:fb:e4:e0:e9:
51:90:65:54:d8:7b:de:24:88:09:76:56:99:91:7c:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:2B:B9:3C:98:E9:1A:9E:B6:55:F3:10:BB:01:02:4B:A2:EA:BA
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RUMruTyY6RqetlXzELsBAkui6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
56:b0:60:a8:de:4f:62:4c:09:44:38:14:5e:9a:51:a6:27:5a:
ff:f5:0b:82:dc:7a:02:5e:51:9a:92:ca:93:8a:6c:a8:92:07:
b7:de:23:af:bc:4e:f0:de:1d:56:bb:9a:1f:5e:9c:3f:6f:9f:
86:90:c3:c5:76:ff:40:40:11:66:c3:fe:38:41:cf:05:ff:43:
ad:38:00:eb:4d:3b:a5:af:ba:44:2f:d8:de:a3:db:07:df:27:
f5:5d:d0:ad:05:c6:fe:f6:0c:5a:bc:a3:d4:3e:3e:7b:1d:55:
74:fe:d3:cb:63:33:1c:7b:1f:62:f3:f1:f9:9c:8c:15:85:4d:
0d:86:be:1b:4f:80:85:e0:e5:b6:66:0c:ba:57:c8:96:af:a6:
c8:5c:93:6f:50:b6:07:89:5c:83:06:56:c8:0f:5b:19:53:7c:
f2:ab:e3:de:e0:47:c9:14:60:f9:2c:3c:a3:eb:70:e4:b9:66:
76:50:57:0a:98:32:dc:e2:e2:b2:c9:3d:e8:0b:6d:75:52:41:
ec:15:8a:67:95:2f:11:00:f8:32:f6:8d:c8:ec:ab:1f:ee:a8:
08:ea:11:9b:37:ba:1d:85:a2:f4:8e:e2:f8:ea:8e:51:8a:5c:
98:bc:b1:f4:7e:df:e3:d5:a3:b4:9e:04:a9:94:11:78:2e:14:
e2:1f:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:00:45 2025 by rpki-client