Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ynJRJItzqUaX6LTfQZROVvX3L1E.roa
File: ynJRJItzqUaX6LTfQZROVvX3L1E.roa (raw, json)
Hash identifier: OmSEMBhqcGW0nC4P0+E+99SkZYlcx02vd8WJo1oB0oc=
Subject key identifier: CA:72:51:24:8B:73:A9:46:97:E8:B4:DF:41:94:4E:56:F5:F7:2F:51
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0190075C667DE7392561F229C5045CC81031
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ynJRJItzqUaX6LTfQZROVvX3L1E.roa
Signing time: Tue 11 Jun 2024 12:53:34 +0000
ROA not before: Tue 11 Jun 2024 12:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8648
IP address blocks: 5.11.48.0/21 maxlen: 24
5.44.96.0/20 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
45.87.136.0/22 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
81.88.27.0/24 maxlen: 24
81.88.32.0/20 maxlen: 24
82.141.0.0/18 maxlen: 24
84.254.120.0/24 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.96.0/19 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
91.226.88.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.64.0/21 maxlen: 24
141.101.32.0/21 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.168.0/21 maxlen: 24
185.3.232.0/22 maxlen: 24
185.32.116.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.51.8.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.80.0/23 maxlen: 24
185.84.82.0/24 maxlen: 24
185.117.248.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
185.211.60.0/22 maxlen: 24
188.64.40.0/21 maxlen: 24
188.64.40.0/22 maxlen: 24
188.64.44.0/23 maxlen: 24
192.162.84.0/22 maxlen: 24
193.22.255.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
193.38.156.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.34.82.0/23 maxlen: 24
195.42.120.0/23 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
195.225.133.0/24 maxlen: 24
212.110.96.0/19 maxlen: 24
213.146.96.0/19 maxlen: 24
2001:880::/32 maxlen: 32
2a00:12c0::/29 maxlen: 48
2a00:5300::/32 maxlen: 48
2a00:fa40::/32 maxlen: 48
2a01:64c0::/32 maxlen: 48
2a01:aee0::/32 maxlen: 48
2a02:248::/32 maxlen: 48
2a02:a60::/32 maxlen: 48
2a02:2b80::/32 maxlen: 48
2a04:4cc0::/29 maxlen: 48
2a04:ff40::/29 maxlen: 48
2a0b:2a40::/29 maxlen: 48
2a0b:6340::/29 maxlen: 48
2a0d:6940::/29 maxlen: 48
2a0e:fe80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 13:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:5c:66:7d:e7:39:25:61:f2:29:c5:04:5c:c8:10:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jun 11 12:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca7251248b73a94697e8b4df41944e56f5f72f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:26:7b:ac:9f:74:30:e7:a6:75:e5:74:2c:
b9:1e:26:20:37:66:31:0f:a0:37:e3:bf:79:36:ec:
e6:2f:19:22:da:a4:5a:21:a0:43:08:9c:ec:02:29:
48:52:c5:0b:d6:06:72:41:90:32:2f:67:ea:2f:9b:
28:85:73:f6:25:a4:dc:1d:1d:8c:d8:38:51:41:1b:
55:d8:ac:76:af:a4:f6:5a:0a:74:11:48:44:a7:11:
d5:d5:00:01:fd:ed:d9:be:3f:30:a3:b0:58:f9:a4:
d1:a3:1d:1c:0e:11:57:f0:29:c0:5f:3f:90:6e:a6:
5b:b7:91:88:ff:04:72:12:39:9c:18:2b:31:55:41:
c4:dd:7d:2b:a3:66:32:5c:0f:3b:87:29:68:b3:fa:
3d:8d:a7:6e:fd:1e:2e:5b:bf:12:58:9a:ad:1b:3f:
fa:5f:4b:a7:9d:61:40:d5:ea:2b:f8:11:2b:14:55:
a1:13:18:3b:dd:e6:f0:81:05:86:08:1c:d9:2a:05:
cc:ea:ad:98:7c:90:ab:ef:c7:63:33:5f:67:54:a8:
48:29:2f:a6:3f:f1:d7:3a:c8:cf:d3:00:e5:e8:68:
47:24:ed:25:94:f7:cb:78:61:e6:64:6d:32:bd:6b:
2a:d4:f3:a5:b6:4f:57:86:f8:e2:d1:ec:c6:c9:2a:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:51:24:8B:73:A9:46:97:E8:B4:DF:41:94:4E:56:F5:F7:2F:51
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ynJRJItzqUaX6LTfQZROVvX3L1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
37.228.152.0/21
45.87.136.0/22
46.243.88.0/21
77.75.248.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
85.158.176.0/21
89.22.96.0/19
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.39.220.0/22
185.51.8.0/22
185.61.40.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
188.64.40.0/21
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a00:12c0::/29
2a00:5300::/32
2a00:fa40::/32
2a01:64c0::/32
2a01:aee0::/32
2a02:248::/32
2a02:a60::/32
2a02:2b80::/32
2a04:4cc0::/29
2a04:ff40::/29
2a0b:2a40::/29
2a0b:6340::/29
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:12:ca:46:99:1d:b9:4b:66:ed:69:eb:97:51:9e:43:ec:7f:
e8:24:de:5a:d0:5b:9b:d0:d8:f3:55:97:85:a2:71:9b:10:23:
06:f4:04:84:51:89:19:1d:e3:11:4e:16:21:d8:9d:62:c1:c7:
f5:51:44:2a:a9:2f:91:d4:48:9a:26:94:12:2d:12:08:06:92:
25:cd:d2:62:42:98:27:0d:e6:93:78:83:28:c7:c6:90:b1:b8:
f8:23:18:af:50:02:d7:49:c0:9e:2a:b7:de:89:ef:61:04:15:
5e:0d:b4:38:51:fe:a1:e1:db:2f:4b:be:7e:79:fc:10:cc:b9:
ef:c0:26:77:a4:40:1b:d3:96:9c:3a:c9:34:5a:32:d2:8a:05:
fa:33:c3:6a:7c:a3:f5:c1:20:43:bf:be:72:06:2e:6b:9b:25:
23:f2:34:9b:2b:58:ab:7c:ac:db:4a:4b:38:d3:5e:26:01:57:
c5:86:55:b2:f3:c9:aa:63:a4:5d:00:ae:93:ea:c0:f9:2c:79:
75:cb:62:4e:b1:26:c5:98:ff:1c:fd:3f:2e:80:3f:56:04:b8:
2d:11:99:53:05:32:01:cc:b3:89:1a:d2:b3:ec:bd:74:df:06:
c2:2a:00:50:58:8e:2a:c9:fc:3d:75:08:7a:6a:4b:30:c9:cd:
62:1c:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:52 2025 by rpki-client