Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/X9frxGFWxM1GJk3sgWXUBR1d-2Q.roa
File: X9frxGFWxM1GJk3sgWXUBR1d-2Q.roa (raw, json)
Hash identifier: QIVwSXZaaUpTedq6qgxyJ3CRXo/Wy5af+JfnavN/MZ0=
Subject key identifier: 5F:D7:EB:C4:61:56:C4:CD:46:26:4D:EC:81:65:D4:05:1D:5D:FB:64
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0196C2F35A1899101D2172C080589067D428
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/X9frxGFWxM1GJk3sgWXUBR1d-2Q.roa
Signing time: Mon 12 May 2025 05:24:10 +0000
ROA not before: Mon 12 May 2025 05:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:f3:5a:18:99:10:1d:21:72:c0:80:58:90:67:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: May 12 05:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fd7ebc46156c4cd46264dec8165d4051d5dfb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:4c:52:16:be:08:62:95:35:d3:d3:6b:24:
e4:c0:48:0e:93:ac:a0:7b:7c:71:fb:31:7c:f7:f7:
00:b7:1d:a9:46:11:bf:3a:1f:c2:2d:72:ef:fc:ef:
dc:4f:62:41:c5:e9:be:b7:f9:ad:5e:b4:41:3c:8b:
ae:e9:51:e7:8f:6a:95:be:cb:b0:7c:6b:f7:d8:9d:
81:59:45:8e:5f:4d:66:3c:c4:02:cc:24:33:6a:0e:
36:77:fa:30:75:f2:73:de:80:88:3a:c0:44:94:e7:
6f:f3:1b:81:93:ef:72:15:4c:0c:29:8b:dd:67:b0:
9e:25:7f:60:ba:52:e3:6a:07:ce:39:34:6a:b9:ae:
32:dc:3d:cd:1a:ef:86:e6:0b:18:4d:d8:4a:db:76:
f4:c2:4b:ac:32:0f:09:b2:a1:a1:63:a3:a3:25:b9:
20:40:ac:5c:f2:fb:e7:33:c0:4d:9e:6c:95:13:69:
d6:1a:ea:8b:5b:1c:23:4d:57:8a:8f:96:d6:40:f1:
99:7f:06:55:4b:21:5c:56:c1:93:24:08:ac:bf:24:
c0:6a:a2:f9:90:9e:ce:71:de:ee:61:1b:2d:c8:27:
44:d9:2b:68:9b:d4:67:5c:23:69:5e:e5:8b:0e:0a:
f5:6b:19:af:4a:9d:ed:ef:92:7e:ba:5d:f3:f3:db:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:EB:C4:61:56:C4:CD:46:26:4D:EC:81:65:D4:05:1D:5D:FB:64
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/X9frxGFWxM1GJk3sgWXUBR1d-2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.21.255
85.255.23.0-85.255.31.255
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.180.255
216.252.182.0/23
216.252.185.0-216.252.187.255
216.252.189.0-216.252.190.255
Signature Algorithm: sha256WithRSAEncryption
14:09:e2:69:37:45:dc:0d:24:d1:bd:b8:80:6a:0c:14:96:f2:
ef:11:e4:dd:d0:8b:bb:80:f5:92:59:39:96:cc:c8:89:a9:de:
a7:2b:c7:ce:36:96:7e:21:fc:28:96:95:89:e5:e6:06:68:0d:
bc:22:a3:52:f4:cf:66:46:c7:89:75:92:b1:c6:ef:23:a9:44:
49:7d:35:5d:d1:6d:27:88:f5:b8:52:96:11:e9:19:f8:2f:24:
c8:9b:ff:ab:2d:f0:a8:ad:70:93:f3:81:cd:bf:77:1e:23:b8:
be:95:0e:42:16:e1:1e:6e:23:36:8f:ae:b4:75:5b:5f:b5:08:
d1:07:5d:0d:2d:00:a1:a5:94:03:69:37:d4:47:9a:83:8d:5e:
74:45:2e:33:28:f3:6c:5e:12:4d:d6:c5:8d:44:33:ac:63:1a:
5a:47:f4:9f:79:2c:c8:17:5e:0a:7b:83:d6:b3:0d:e7:df:ed:
db:d3:66:a2:03:0d:d4:1b:a3:8b:ec:49:52:d0:57:5e:b3:55:
c9:f1:49:3f:6b:93:67:29:d1:67:c8:62:8d:ef:41:19:f1:6e:
05:16:72:64:33:c0:69:7a:a7:6e:59:7b:41:6b:23:5c:8d:21:
81:47:08:11:1f:1f:6c:91:6e:aa:f0:38:65:1f:6c:f2:65:69:
21:d6:3b:fd
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZbC81oYmRAdIXLAgFiQZ9QoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm
N2U3NzcwHhcNMjUwNTEyMDUyNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQ3ZWJjNDYxNTZjNGNkNDYyNjRkZWM4MTY1ZDQwNTFkNWRmYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKxMUha+CGKVNdPTayTkwEgOk6yg
e3xx+zF89/cAtx2pRhG/Oh/CLXLv/O/cT2JBxem+t/mtXrRBPIuu6VHnj2qVvsuw
fGv32J2BWUWOX01mPMQCzCQzag42d/owdfJz3oCIOsBElOdv8xuBk+9yFUwMKYvd
Z7CeJX9gulLjagfOOTRqua4y3D3NGu+G5gsYTdhK23b0wkusMg8JsqGhY6OjJbkg
QKxc8vvnM8BNnmyVE2nWGuqLWxwjTVeKj5bWQPGZfwZVSyFcVsGTJAisvyTAaqL5
kJ7Ocd7uYRstyCdE2Stom9RnXCNpXuWLDgr1axmvSp3t75J+ul3z89tDGQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFF/X68RhVsTNRiZN7IFl1AUdXftkMB8GA1UdIwQY
MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt
YzE5OWM3YjRjYWMyLzEvWDlmcnhHRld4TTFHSmszc2dXWFVCUjFkLTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy
LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQBVf8QMAwD
BABV/xMDBAFV/xQwDAMEAFX/FwMEBVX/AAMEArlyeAMEBdHOADAMAwQA2PyxAwQA
2Py0AwQB2Py2MAwDBADY/LkDBALY/LgwDAMEANj8vQMEANj8vjANBgkqhkiG9w0B
AQsFAAOCAQEAFAniaTdF3A0k0b24gGoMFJby7xHk3dCLu4D1klk5lszIianepyvH
zjaWfiH8KJaVieXmBmgNvCKjUvTPZkbHiXWSscbvI6lESX01XdFtJ4j1uFKWEekZ
+C8kyJv/qy3wqK1wk/OBzb93HiO4vpUOQhbhHm4jNo+utHVbX7UI0QddDS0AoaWU
A2k31Eeag41edEUuMyjzbF4STdbFjUQzrGMaWkf0n3ksyBdeCnuD1rMN59/t29Nm
ogMN1Buji+xJUtBXXrNVyfFJP2uTZynRZ8hije9BGfFuBRZyZDPAaXqnbll7QWsj
XI0hgUcIER8fbJFuqvA4ZR9s8mVpIdY7/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:12 2025 by rpki-client