Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sG5NWQ_iY2Bb_ft0qTnbqQ2x5kE.roa
File: sG5NWQ_iY2Bb_ft0qTnbqQ2x5kE.roa (raw, json)
Hash identifier: kH9I9yLey1hXTynyax5fQ6P5uX7vNb/PoG9R4Qykk7Y=
Subject key identifier: B0:6E:4D:59:0F:E2:63:60:5B:FD:FB:74:A9:39:DB:A9:0D:B1:E6:41
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0196F33624B9BD972C125BFA9AB87AD13AE7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sG5NWQ_iY2Bb_ft0qTnbqQ2x5kE.roa
Signing time: Wed 21 May 2025 14:18:53 +0000
ROA not before: Wed 21 May 2025 14:18:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.185.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
78.31.205.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
94.154.178.0/24 maxlen: 24
103.130.176.0/24 maxlen: 24
103.130.177.0/24 maxlen: 24
103.210.13.0/24 maxlen: 24
103.210.14.0/24 maxlen: 24
103.210.15.0/24 maxlen: 24
103.216.196.0/24 maxlen: 24
103.216.198.0/24 maxlen: 24
104.232.36.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
185.198.90.0/24 maxlen: 24
185.198.91.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
185.205.204.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
192.145.70.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
2a0a:8f40:3::/48 maxlen: 48
2a0a:8f40:7::/48 maxlen: 48
2a0a:8f40:8::/48 maxlen: 48
2a0a:8f40:9::/48 maxlen: 48
2a0a:8f40:a::/48 maxlen: 48
2a0a:8f40:b::/48 maxlen: 48
2a0a:8f40:c::/48 maxlen: 48
2a0a:8f40:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 21:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:36:24:b9:bd:97:2c:12:5b:fa:9a:b8:7a:d1:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 21 14:18:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b06e4d590fe263605bfdfb74a939dba90db1e641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:7b:7f:38:86:8f:78:6d:a6:6c:ae:60:15:
b9:91:64:a6:5f:67:24:43:92:9c:55:de:0c:c6:3a:
69:1a:9f:11:26:47:b2:b4:0b:02:56:dd:ef:29:91:
0e:45:51:92:db:33:6a:4a:6a:fe:45:a6:54:e1:eb:
35:f5:60:25:56:41:57:80:0d:25:a6:4d:95:c7:35:
eb:8c:5b:bb:40:37:6c:65:32:b6:92:6d:42:b5:53:
77:fc:62:d1:0f:ed:a0:7d:50:c9:4a:b2:4b:fe:0b:
14:28:f3:57:1d:d1:79:f4:67:b2:6f:95:30:1a:33:
fc:a9:58:37:4e:ab:5f:35:52:84:c0:b9:23:75:3f:
77:db:58:bb:ba:6f:4c:96:ea:f4:53:34:df:0d:e6:
f4:4c:5a:b7:f6:c1:69:2c:96:19:12:7f:2a:a2:f7:
8d:82:53:eb:d9:85:bf:9d:4b:52:e2:07:f8:d3:2b:
5c:be:10:aa:2a:e2:8e:fc:5d:be:d1:f3:28:96:f7:
8a:1e:af:15:66:c9:8c:e5:96:02:fd:7a:51:7d:b2:
98:90:8a:f7:4a:41:58:3e:ba:a7:1b:20:ac:85:01:
bb:11:92:b9:38:10:fa:f8:b1:c7:ba:a0:48:53:81:
12:8a:52:ae:c1:13:05:9b:38:8e:1b:ce:f1:f0:34:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:4D:59:0F:E2:63:60:5B:FD:FB:74:A9:39:DB:A9:0D:B1:E6:41
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/sG5NWQ_iY2Bb_ft0qTnbqQ2x5kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
5.182.196.0/23
78.31.205.0/24
79.98.183.0/24
92.249.29.0/24
94.154.171.0/24
94.154.178.0/24
103.130.176.0/23
103.210.13.0-103.210.15.255
103.216.196.0/24
103.216.198.0/24
104.232.36.0/24
147.78.207.0/24
162.218.93.0/24
185.52.138.0/23
185.161.190.0/24
185.187.214.0/23
185.198.89.0-185.198.91.255
185.201.42.0/24
185.205.204.0/24
185.208.152.0-185.208.154.255
185.230.121.0/24
185.253.120.0/23
192.145.70.0/24
212.60.13.0/24
IPv6:
2a0a:8f40:3::/48
2a0a:8f40:7::-2a0a:8f40:c:ffff:ffff:ffff:ffff:ffff
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:1c:da:56:03:3b:da:92:26:eb:b9:8a:46:c9:90:c1:8a:a2:
a6:e9:ef:84:5d:18:1a:cf:5a:38:db:c1:b9:b7:46:01:74:49:
09:11:57:fa:c6:38:1e:81:92:ba:2c:bf:87:e0:37:3f:71:c6:
8c:74:ab:c0:03:23:41:b1:eb:ca:d5:1c:43:ba:cb:b2:c5:01:
92:99:59:2f:01:30:32:ff:4c:2b:83:11:a3:97:1b:f9:73:38:
55:dc:60:7e:c6:9f:fc:ec:cd:2a:b2:59:f1:df:06:b8:27:74:
c6:e3:21:49:9f:95:31:b4:40:0e:4d:a9:12:b2:2c:48:50:67:
a1:39:2b:5c:1b:91:3f:6b:28:ff:43:fa:71:6f:93:98:94:bc:
7e:29:73:79:e7:78:46:9b:2f:5a:33:80:47:13:39:5f:e8:1f:
d0:7b:35:40:2a:6a:8c:c9:bc:77:44:92:00:45:2d:b4:fc:3f:
00:3f:aa:d1:41:10:10:ad:3b:f6:65:d8:1e:10:6c:df:b6:f0:
96:89:8c:c5:8c:16:89:4e:4f:f0:ff:f4:ef:da:64:00:12:1f:
39:1a:10:1b:43:26:f7:de:41:7f:ba:1a:af:8f:f2:9e:f0:5c:
33:90:ee:7b:12:90:d7:17:58:0c:b7:e7:7a:07:92:12:2b:3e:
8a:d3:78:7a
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgISAZbzNiS5vZcsElv6mrh60TrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwNTIxMTQxODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDZlNGQ1OTBmZTI2MzYwNWJmZGZiNzRhOTM5ZGJhOTBkYjFlNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KZ7fziGj3htpmyuYBW5kWSmX2ck
Q5KcVd4MxjppGp8RJkeytAsCVt3vKZEORVGS2zNqSmr+RaZU4es19WAlVkFXgA0l
pk2VxzXrjFu7QDdsZTK2km1CtVN3/GLRD+2gfVDJSrJL/gsUKPNXHdF59Geyb5Uw
GjP8qVg3TqtfNVKEwLkjdT9321i7um9Mlur0UzTfDeb0TFq39sFpLJYZEn8qoveN
glPr2YW/nUtS4gf40ytcvhCqKuKO/F2+0fMolveKHq8VZsmM5ZYC/XpRfbKYkIr3
SkFYPrqnGyCshQG7EZK5OBD6+LHHuqBIU4ESilKuwRMFmziOG87x8DSRmwIDAQAB
o4IC5DCCAuAwHQYDVR0OBBYEFLBuTVkP4mNgW/37dKk526kNseZBMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvc0c1TldRX2lZMkJiX2Z0MHFUbmJxUTJ4NWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH5BggrBgEFBQcBBwEB/wSB6TCB5jCBtQQCAAEwga4DBAAF
trkDBAEFtsQDBABOH80DBABPYrcDBABc+R0DBABemqsDBABemrIDBAFngrAwDAME
AGfSDQMEBGfSAAMEAGfYxAMEAGfYxgMEAGjoJAMEAJNOzwMEAKLaXQMEAbk0igME
ALmhvgMEAbm71jAMAwQAucZZAwQCucZYAwQAuckqAwQAuc3MMAwDBAO50JgDBAC5
0JoDBAC55nkDBAG5/XgDBADAkUYDBADUPA0wLAQCAAIwJgMHACoKj0AAAzASAwcA
KgqPQAAHAwcAKgqPQAAMAwcAKgqPQAAcMA0GCSqGSIb3DQEBCwUAA4IBAQAuHNpW
AzvakibruYpGyZDBiqKm6e+EXRgaz1o428G5t0YBdEkJEVf6xjgegZK6LL+H4Dc/
ccaMdKvAAyNBsevK1RxDusuyxQGSmVkvATAy/0wrgxGjlxv5czhV3GB+xp/87M0q
slnx3wa4J3TG4yFJn5UxtEAOTakSsixIUGehOStcG5E/ayj/Q/pxb5OYlLx+KXN5
53hGmy9aM4BHEzlf6B/QezVAKmqMybx3RJIARS20/D8AP6rRQRAQrTv2ZdgeEGzf
tvCWiYzFjBaJTk/w//Tv2mQAEh85GhAbQyb33kF/uhqvj/Ke8FwzkO57EpDXF1gM
t+d6B5ISKz6K03h6
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:38 2025 by rpki-client