Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/lSG3khUGRfOzBIM6hPj4VcXIIpk.roa
File: lSG3khUGRfOzBIM6hPj4VcXIIpk.roa (raw, json)
Hash identifier: VuMQD66s3lYTgEYSa3JUl7psTmwG1NgTfORy/LdVb5I=
Subject key identifier: 95:21:B7:92:15:06:45:F3:B3:04:83:3A:84:F8:F8:55:C5:C8:22:99
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0196D26DC11A494AC99CAB0EF49A55E50279
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/lSG3khUGRfOzBIM6hPj4VcXIIpk.roa
Signing time: Thu 15 May 2025 05:32:10 +0000
ROA not before: Thu 15 May 2025 05:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 06:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:6d:c1:1a:49:4a:c9:9c:ab:0e:f4:9a:55:e5:02:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: May 15 05:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9521b792150645f3b304833a84f8f855c5c82299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:8b:77:fb:50:e0:ef:7a:ad:5c:52:22:29:
4d:e0:09:ed:22:a3:fa:89:0d:eb:f4:ab:53:43:f6:
98:a8:3c:df:57:03:52:a0:99:18:04:a4:f7:c8:9e:
1b:f9:35:9e:3e:fc:0a:90:48:8b:e6:39:44:f5:bf:
cb:57:e9:39:54:95:dc:18:79:54:a8:53:f0:65:56:
99:7b:8e:61:bd:af:67:c0:97:77:24:5f:63:66:e7:
31:cf:65:94:7a:7d:95:ec:a1:58:b6:44:00:b6:81:
ca:1e:56:a7:44:90:6c:d6:5b:cb:84:a8:f9:b1:98:
26:b1:69:d5:51:9c:2d:98:7b:51:fc:ce:d6:6e:a5:
df:bc:2c:5b:fb:4d:4f:ca:71:25:b6:2b:e8:c4:61:
0d:af:9b:3d:a6:40:46:ae:73:03:01:88:a4:94:d8:
20:e9:36:95:0a:ee:4c:07:c8:4b:49:cf:12:ee:0f:
b9:fa:2a:e8:fa:4a:1f:66:2c:61:68:f9:8b:9c:b9:
11:e1:43:b4:5e:c8:ff:c2:bf:b7:bf:1e:ad:6b:da:
6e:05:68:df:ea:25:be:57:43:3d:9c:81:f6:70:b4:
cc:43:37:51:2a:38:0b:c6:3d:bb:1d:87:79:7f:dd:
ed:80:6e:73:99:48:ca:08:1c:2e:c4:bb:32:15:d4:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:B7:92:15:06:45:F3:B3:04:83:3A:84:F8:F8:55:C5:C8:22:99
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/lSG3khUGRfOzBIM6hPj4VcXIIpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
51:38:5c:5d:82:97:91:ef:a5:0d:c2:66:a1:29:72:40:fa:9e:
d1:d8:07:64:1e:6e:1d:8a:1f:1c:9d:dc:83:54:af:aa:0b:50:
db:9a:29:c5:8c:56:5d:84:ea:2d:b7:82:4a:d3:60:7b:dc:a2:
34:c5:60:c9:94:a5:dd:f0:ed:03:27:b2:ce:1c:84:0e:1b:af:
f3:ee:53:7f:57:5c:39:f6:a7:e2:b1:bf:7b:d3:41:6f:91:5c:
f8:dc:ab:90:97:5b:79:f9:29:54:c7:df:17:51:8b:66:86:b6:
be:b8:d9:74:6f:fd:88:b1:c0:92:ce:7a:b9:be:0d:1a:e2:a6:
09:8a:92:be:a5:eb:d5:f2:fd:00:46:9c:6c:48:8a:3a:b3:0e:
28:df:4d:f1:94:02:fd:bf:dd:74:22:59:d2:dc:44:27:58:1e:
c0:d6:5f:7c:ab:41:3e:c9:1e:49:7c:9d:49:d8:07:7d:34:22:
39:19:15:59:1f:be:a0:6a:aa:f6:f7:25:0a:a2:01:01:d4:34:
0e:31:02:57:d0:a5:ed:83:f2:81:0d:18:ec:6d:52:ed:3c:3f:
60:21:1a:27:62:44:a4:3f:f3:d0:cc:84:6b:54:0b:d1:15:6f:
ce:c2:02:13:34:3f:ff:10:1e:10:a3:8d:24:fe:1f:24:18:e3:
fa:d2:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:19 2025 by rpki-client