Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S9XjN5Z9ZHO724URbv7l0LODTE0.roa
File: S9XjN5Z9ZHO724URbv7l0LODTE0.roa (raw, json)
Hash identifier: IdPvLpxcM2dKsC0aJqCuagn29grbNY2fyl7Z1fUlymg=
Subject key identifier: 4B:D5:E3:37:96:7D:64:73:BB:DB:85:11:6E:FE:E5:D0:B3:83:4C:4D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019680C6C77CE3333D28B021E2098A7ACEB2
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S9XjN5Z9ZHO724URbv7l0LODTE0.roa
Signing time: Tue 29 Apr 2025 09:00:32 +0000
ROA not before: Tue 29 Apr 2025 09:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.68.0/22 maxlen: 22
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Apr 2025 10:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:c7:7c:e3:33:3d:28:b0:21:e2:09:8a:7a:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Apr 29 09:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bd5e337967d6473bbdb85116efee5d0b3834c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:9c:34:93:4f:9e:6b:06:00:10:40:cf:c6:
93:77:ee:d3:98:e8:2a:14:66:ba:66:08:21:37:38:
98:2c:18:b8:09:01:3c:b9:aa:21:bf:bc:60:27:f4:
23:2a:86:f1:d4:19:2c:af:ea:f3:ed:de:6b:4a:b3:
35:fe:6f:71:4f:8e:ab:09:d9:1f:bc:c3:d4:b3:11:
74:a0:17:52:2f:37:8e:20:2c:d1:66:07:16:ba:04:
bd:42:6c:f7:2b:ac:6f:13:f0:6a:6c:a8:9d:6e:df:
67:f5:09:92:5d:5a:33:90:ec:35:29:cb:00:e4:3c:
c5:5c:95:b3:58:b7:63:15:c9:d0:b9:7c:98:55:96:
9b:0c:86:a0:b1:c3:86:e0:27:10:1c:dc:09:3f:31:
2d:5d:fd:96:3d:46:63:46:dd:c2:c8:cf:5a:2b:57:
5d:17:06:71:48:70:47:d9:1f:0f:d7:bf:72:eb:ce:
7c:53:d1:37:f6:58:4d:da:07:a6:8f:0b:5f:b1:e7:
db:8a:ae:c8:78:d8:d4:bd:b0:b4:48:87:1f:fd:84:
c9:ea:b8:1b:1d:92:de:fb:63:8b:f0:cb:6d:8f:a4:
cf:9e:6d:c2:b0:5a:a0:3a:3e:e7:42:7f:71:38:dc:
57:9e:8d:90:fc:15:3b:58:07:11:27:3b:ff:39:7a:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:E3:37:96:7D:64:73:BB:DB:85:11:6E:FE:E5:D0:B3:83:4C:4D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S9XjN5Z9ZHO724URbv7l0LODTE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
26:c8:df:af:36:cb:65:78:80:6b:ee:a7:b2:bf:5a:23:e3:d5:
f1:86:40:ac:73:0e:f8:6f:3d:20:3c:00:ce:2b:99:b5:20:17:
27:41:47:f3:d1:51:ce:0a:d5:9e:1d:e5:0f:52:e0:38:c6:50:
01:ef:1d:b8:8d:e0:c2:d6:8d:1f:69:25:54:0d:b0:7c:9c:cb:
75:98:a3:c5:c7:24:6d:a5:5e:56:f0:d1:88:b8:2b:84:bb:dc:
4b:b7:c0:3b:be:9f:63:3c:56:d8:bd:64:47:28:c0:fb:54:e1:
8c:bb:c7:62:a4:4f:7a:d4:b8:07:bf:71:8f:b8:f9:19:54:bd:
1a:44:cc:55:85:c6:23:4f:c8:a0:1d:ed:a0:f0:9e:10:89:fc:
d6:8c:23:39:fc:36:b1:8d:30:68:d7:0b:1a:8a:de:78:41:33:
a4:72:b3:e4:65:bd:2b:50:6a:0a:13:74:c6:7d:e8:70:a3:42:
d1:e1:30:73:05:e4:cf:94:26:61:7d:7a:51:e4:34:2a:69:1a:
f7:17:c4:e2:31:04:20:7e:92:7b:e8:bd:74:79:fd:30:40:5a:
e9:d4:15:65:5d:dc:90:02:0b:3e:1b:cb:1f:7a:6b:04:1c:f4:
0b:bd:b8:a4:6d:9b:86:04:a1:d7:59:27:3c:ed:91:38:fb:b5:
f1:c8:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:39 2025 by rpki-client