Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/c939Wgx6PP251bOzBWo7XxLiyRM.roa
File: c939Wgx6PP251bOzBWo7XxLiyRM.roa (raw, json)
Hash identifier: OMFlqBJ9uybyiZV+7qvOmQGcWX3Z0f4paR20CQnyHkg=
Subject key identifier: 73:DD:FD:5A:0C:7A:3C:FD:B9:D5:B3:B3:05:6A:3B:5F:12:E2:C9:13
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0197C13BAB908B5D95D7553C0A9EE27C6981
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/c939Wgx6PP251bOzBWo7XxLiyRM.roa
Signing time: Mon 30 Jun 2025 14:26:42 +0000
ROA not before: Mon 30 Jun 2025 14:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Jun 2025 22:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:3b:ab:90:8b:5d:95:d7:55:3c:0a:9e:e2:7c:69:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jun 30 14:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ddfd5a0c7a3cfdb9d5b3b3056a3b5f12e2c913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:6f:fe:9b:9a:88:db:0e:be:ed:28:37:45:
1a:3d:96:d5:4b:53:f6:20:d3:5b:94:21:d2:de:e3:
0f:79:42:5f:2d:6d:e6:ce:25:04:ae:da:29:68:8c:
0a:2e:2a:ed:f2:83:43:73:9c:11:18:b0:2e:37:4b:
26:1d:10:15:32:a6:36:c3:c3:b8:ab:7a:07:b2:48:
5c:1e:a5:5a:ed:38:72:3a:c4:2f:0a:97:ad:50:29:
60:92:72:5b:82:4f:ff:8e:1b:06:73:95:8d:84:d8:
17:3d:e8:00:4b:94:36:d3:af:3a:2c:82:ff:9e:71:
f9:fa:43:6e:b8:1f:77:35:87:ea:60:c5:b1:75:23:
10:2a:59:65:ae:ef:8f:21:9f:73:e6:ed:7f:05:08:
85:d8:6b:1f:f5:1e:50:77:52:48:c1:0c:23:2d:4e:
f8:f8:2e:19:15:68:59:b3:1b:70:3b:cb:b2:11:ac:
36:48:e9:aa:8a:ab:72:76:f4:c6:a2:e0:9b:4b:48:
00:f2:3d:e4:e1:92:cd:dd:ec:a9:27:f9:9f:68:d9:
cd:6b:e3:9a:0c:41:1f:e6:3c:ce:b1:ad:e7:9c:a3:
f2:17:f5:38:5c:2d:73:b6:bc:8b:67:be:60:25:07:
69:fa:16:70:7c:6f:88:74:6d:d8:e7:db:cd:16:78:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:FD:5A:0C:7A:3C:FD:B9:D5:B3:B3:05:6A:3B:5F:12:E2:C9:13
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/c939Wgx6PP251bOzBWo7XxLiyRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.20.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
86:60:f3:bf:09:1d:23:3d:59:11:f2:71:a0:07:b7:1d:06:15:
b9:45:df:09:7b:ec:54:3a:52:63:85:86:a6:09:ad:d5:62:04:
e2:6a:90:19:32:55:1b:85:d0:f6:40:49:1e:a7:c7:55:36:21:
eb:85:8b:e4:bf:42:74:b7:b5:b0:68:7d:d6:1f:2d:94:2e:ac:
fa:d5:5e:5a:02:8d:0e:85:e6:de:7b:6d:6d:2a:ee:d2:bf:2f:
af:9e:e1:ae:8a:86:7b:06:41:35:39:75:30:47:67:0c:1b:04:
bf:06:49:12:45:79:1a:57:03:b5:cf:ff:20:4f:87:1c:a4:a4:
ae:81:59:e8:30:19:f6:52:72:3a:e6:b2:31:fc:c1:af:b9:f4:
73:aa:51:7b:8a:34:6e:af:18:49:1b:58:6f:33:0f:02:f5:ba:
d8:3a:b6:f5:65:9d:81:c7:08:1f:a9:fc:bb:3e:21:f0:60:48:
2a:3b:1f:24:d4:0f:c7:52:9c:ae:32:27:11:85:7d:96:7f:b2:
d7:3d:d4:8b:d6:01:28:e6:53:e3:82:97:c0:fc:df:19:52:48:
83:d8:c6:7a:29:ec:e3:5f:ff:87:0a:4a:13:c1:c9:17:b3:3f:
de:78:8c:9d:c3:dc:12:c1:e6:27:4f:28:38:9f:ef:20:97:a4:
16:11:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:50:52 2025 by rpki-client