Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OSoSIVYQw_DJN5j5tBnQf3M9uP0.roa
File: OSoSIVYQw_DJN5j5tBnQf3M9uP0.roa (raw, json)
Hash identifier: nL2aByaf9XR6K/h9AgdluT14FKIuRswucTzjVn8H5t8=
Subject key identifier: 39:2A:12:21:56:10:C3:F0:C9:37:98:F9:B4:19:D0:7F:73:3D:B8:FD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197232239C63A7C7DC122C891155ACFA64E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OSoSIVYQw_DJN5j5tBnQf3M9uP0.roa
Signing time: Fri 30 May 2025 21:38:54 +0000
ROA not before: Fri 30 May 2025 21:38:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 13:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:23:22:39:c6:3a:7c:7d:c1:22:c8:91:15:5a:cf:a6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 30 21:38:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392a12215610c3f0c93798f9b419d07f733db8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:94:db:ab:d6:3a:9c:e4:ce:3b:8f:b4:91:
7f:7e:96:e7:0b:1d:3d:e8:f0:4f:bf:22:62:a1:1a:
84:5a:5c:66:0c:69:92:dc:db:c1:16:22:e1:00:78:
cb:48:47:62:df:2d:d3:97:9b:f0:f2:97:ff:b3:29:
db:fb:82:76:36:c2:f9:0c:67:ca:21:db:15:18:ae:
5a:2f:99:40:11:d8:53:c6:4d:70:b2:1a:47:b1:f4:
0a:8e:06:d1:bc:43:fe:7f:61:56:3a:08:e7:e6:ec:
06:17:3f:54:44:ec:86:ba:9d:a8:16:8a:06:0c:84:
65:a2:88:20:e0:98:c9:84:d2:f7:54:a2:f8:b1:cc:
59:1d:01:47:64:14:db:31:dd:59:b4:99:5a:1e:47:
29:1c:c5:d0:19:69:d4:33:f0:62:9a:22:74:61:0a:
0a:89:63:a4:94:86:9a:06:5f:99:bb:98:60:d2:ce:
1f:90:99:83:b4:e6:ff:8e:36:59:aa:05:4a:cc:57:
aa:1f:95:92:7c:21:7f:40:ee:02:1d:1f:1c:7e:0c:
75:ff:5e:53:be:06:e1:54:1d:e2:6f:45:11:69:5e:
0f:78:72:cd:32:22:f5:9a:9c:24:10:62:3d:52:03:
67:7e:26:c2:47:dc:f9:d1:b5:b3:40:68:01:87:28:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:12:21:56:10:C3:F0:C9:37:98:F9:B4:19:D0:7F:73:3D:B8:FD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OSoSIVYQw_DJN5j5tBnQf3M9uP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f6:d6:c7:76:54:2f:22:6f:d6:2e:4b:df:bc:02:a5:1b:f6:
39:37:5d:4b:46:e4:8a:42:61:50:eb:24:9d:c2:bb:d4:86:36:
2f:98:a6:b7:1c:4a:38:68:fd:49:76:6d:6f:4b:fa:d0:fd:be:
7c:04:7a:cb:c0:ed:57:6e:32:09:73:b8:b7:23:55:03:b2:dc:
69:4c:9c:a0:db:d0:06:e7:db:c3:8f:25:f4:85:8c:b2:92:f7:
15:53:d4:72:60:bf:dd:34:aa:77:af:28:1a:fa:d8:69:78:30:
e6:14:f8:be:66:7e:40:d5:46:7d:85:a9:6a:a0:3e:6f:58:1f:
ec:63:4b:d6:92:cb:55:34:c8:ca:35:ca:00:09:00:41:72:8b:
59:eb:27:23:6e:a4:d8:e9:a8:c5:10:99:56:47:e1:21:17:d0:
0d:6e:ac:3e:68:a3:b9:39:18:80:54:28:c1:01:37:b2:11:76:
72:33:f7:f4:f5:0b:4f:ac:82:ad:11:f0:6c:75:d9:4f:ca:0c:
66:b0:0b:fd:3b:fd:90:bc:a9:76:84:15:d9:61:59:0d:3a:96:
c6:f2:d3:86:e3:89:c7:b6:b4:ab:c8:1c:77:f4:38:dc:ce:d1:
75:7d:61:b7:cc:ef:be:da:e8:47:6c:0f:d6:d9:46:a7:57:96:
ba:67:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:04 2025 by rpki-client