Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/xcf2y3hVcaX95sHJMVfH3eXHmsM.roa
File: xcf2y3hVcaX95sHJMVfH3eXHmsM.roa (raw, json)
Hash identifier: njVC3B4FSbspqPSiJ/sBd6hn3McM8YMIyqT6gcExIZk=
Subject key identifier: C5:C7:F6:CB:78:55:71:A5:FD:E6:C1:C9:31:57:C7:DD:E5:C7:9A:C3
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0197168AA6CAC850E3A0FC918CC4AD631DBA
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/xcf2y3hVcaX95sHJMVfH3eXHmsM.roa
Signing time: Wed 28 May 2025 10:57:54 +0000
ROA not before: Wed 28 May 2025 10:57:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.155.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
78.154.192.0/18 maxlen: 18
78.154.192.0/20 maxlen: 20
78.154.192.0/24 maxlen: 24
78.154.193.0/24 maxlen: 24
78.154.194.0/24 maxlen: 24
78.154.195.0/24 maxlen: 24
78.154.196.0/24 maxlen: 24
78.154.197.0/24 maxlen: 24
78.154.198.0/24 maxlen: 24
78.154.199.0/24 maxlen: 24
78.154.200.0/24 maxlen: 24
78.154.201.0/24 maxlen: 24
78.154.202.0/24 maxlen: 24
78.154.203.0/24 maxlen: 24
78.154.204.0/24 maxlen: 24
78.154.205.0/24 maxlen: 24
78.154.206.0/24 maxlen: 24
78.154.207.0/24 maxlen: 24
78.154.208.0/20 maxlen: 20
78.154.208.0/24 maxlen: 24
78.154.209.0/24 maxlen: 24
78.154.210.0/24 maxlen: 24
78.154.211.0/24 maxlen: 24
78.154.212.0/24 maxlen: 24
78.154.213.0/24 maxlen: 24
78.154.214.0/24 maxlen: 24
78.154.215.0/24 maxlen: 24
78.154.216.0/24 maxlen: 24
78.154.217.0/24 maxlen: 24
78.154.218.0/24 maxlen: 24
78.154.219.0/24 maxlen: 24
78.154.220.0/24 maxlen: 24
78.154.221.0/24 maxlen: 24
78.154.222.0/24 maxlen: 24
78.154.223.0/24 maxlen: 24
78.154.224.0/20 maxlen: 20
78.154.224.0/24 maxlen: 24
78.154.225.0/24 maxlen: 24
78.154.226.0/24 maxlen: 24
78.154.227.0/24 maxlen: 24
78.154.228.0/24 maxlen: 24
78.154.229.0/24 maxlen: 24
78.154.230.0/24 maxlen: 24
78.154.231.0/24 maxlen: 24
78.154.232.0/24 maxlen: 24
78.154.233.0/24 maxlen: 24
78.154.234.0/24 maxlen: 24
78.154.235.0/24 maxlen: 24
78.154.236.0/24 maxlen: 24
78.154.237.0/24 maxlen: 24
78.154.238.0/24 maxlen: 24
78.154.239.0/24 maxlen: 24
78.154.240.0/20 maxlen: 20
78.154.240.0/24 maxlen: 24
78.154.241.0/24 maxlen: 24
78.154.242.0/24 maxlen: 24
78.154.243.0/24 maxlen: 24
78.154.244.0/24 maxlen: 24
78.154.245.0/24 maxlen: 24
78.154.246.0/24 maxlen: 24
78.154.247.0/24 maxlen: 24
78.154.248.0/24 maxlen: 24
78.154.249.0/24 maxlen: 24
78.154.250.0/24 maxlen: 24
78.154.251.0/24 maxlen: 24
78.154.252.0/24 maxlen: 24
78.154.253.0/24 maxlen: 24
78.154.254.0/24 maxlen: 24
78.154.255.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 05:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:8a:a6:ca:c8:50:e3:a0:fc:91:8c:c4:ad:63:1d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: May 28 10:57:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5c7f6cb785571a5fde6c1c93157c7dde5c79ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:51:11:96:0e:c4:e9:55:cb:bf:d1:d5:63:
a9:0a:7a:11:c2:a2:8b:3f:cd:e4:01:1b:2d:be:57:
c6:8b:ea:58:2f:d1:ea:52:e3:5d:3b:d5:54:89:f9:
51:93:1e:88:98:a5:73:79:c1:59:95:42:c3:c6:40:
11:0e:70:ad:4f:76:0e:2d:c8:fc:ff:e4:54:3e:52:
02:0a:14:71:88:cd:b3:21:8e:d2:84:27:2d:69:1e:
25:5e:2d:94:8b:90:f7:0b:a5:86:70:03:5a:83:b7:
a4:c7:6c:fd:7c:81:8a:b0:84:75:fb:b4:fc:d5:56:
bd:d8:c0:e6:18:fc:9c:fd:38:1b:c1:9a:ac:76:d9:
6e:95:a2:34:52:2c:5e:51:99:dc:5a:df:6c:02:31:
01:06:e0:ab:5b:3e:28:36:34:39:5c:72:78:29:fd:
88:11:5d:f4:a0:7e:d0:1b:96:ce:f2:04:7e:26:fd:
65:d3:fb:28:28:c1:ea:6a:17:a4:a4:66:14:7a:7d:
1e:1d:24:33:f9:b5:6e:83:f4:b2:a3:b2:59:23:2e:
39:44:e9:f3:71:82:45:37:15:57:ad:b0:5e:a8:b9:
49:d6:63:3d:b0:c2:52:33:c6:89:e0:a5:6d:6c:5c:
8a:7d:60:64:7a:dc:86:1b:86:b9:3d:c0:74:b5:05:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:F6:CB:78:55:71:A5:FD:E6:C1:C9:31:57:C7:DD:E5:C7:9A:C3
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/xcf2y3hVcaX95sHJMVfH3eXHmsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.155.0/24
62.150.181.0/24
78.154.192.0/18
195.39.181.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d1:e8:9a:ff:0e:f2:8f:43:01:76:0c:ef:be:30:3a:20:ee:
a8:85:a6:d9:1e:58:5a:24:f7:30:4d:f9:1e:cb:1e:ce:a3:2a:
c9:f7:21:80:22:a9:b1:f4:28:0c:ea:bf:63:eb:a5:d1:b8:9a:
2b:5b:c4:59:37:0c:ed:14:7e:8c:be:1a:41:b4:55:50:3a:69:
c7:0b:61:cc:b8:29:3e:ec:72:52:4c:68:8c:77:0f:8e:d6:30:
d8:47:ea:59:ed:83:35:63:d0:9b:8c:d3:1f:e6:b4:03:20:ae:
de:87:48:9a:b4:f2:a8:9f:72:0e:14:5d:dd:71:42:e6:ff:0a:
a0:e6:a7:ab:bd:42:ed:71:a7:cb:82:76:6a:23:fc:2f:37:de:
9f:52:0a:db:15:9d:6f:61:d2:82:8d:5c:90:c2:3c:c6:7f:7c:
49:1d:a1:d6:51:57:3b:d4:6c:34:94:63:b7:af:10:29:64:60:
2a:30:17:59:ea:bc:1d:71:7f:fe:c6:5d:90:79:58:ca:a7:0e:
83:96:e5:ba:de:17:4d:f3:9e:a7:23:1f:91:65:7f:25:8f:0a:
cc:ef:d5:d2:43:59:b8:ce:a8:9b:44:ee:8d:17:ad:b5:4a:37:
bc:6d:3f:44:4b:18:28:bc:51:8f:2d:b1:e4:22:f4:c4:00:7d:
58:c9:00:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZcWiqbKyFDjoPyRjMStYx26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjUwNTI4MTA1NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM3ZjZjYjc4NTU3MWE1ZmRlNmMxYzkzMTU3YzdkZGU1Yzc5YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2tREZYOxOlVy7/R1WOpCnoRwqKL
P83kARstvlfGi+pYL9HqUuNdO9VUiflRkx6ImKVzecFZlULDxkARDnCtT3YOLcj8
/+RUPlICChRxiM2zIY7ShCctaR4lXi2Ui5D3C6WGcANag7ekx2z9fIGKsIR1+7T8
1Va92MDmGPyc/TgbwZqsdtlulaI0UixeUZncWt9sAjEBBuCrWz4oNjQ5XHJ4Kf2I
EV30oH7QG5bO8gR+Jv1l0/soKMHqahekpGYUen0eHSQz+bVug/Syo7JZIy45ROnz
cYJFNxVXrbBeqLlJ1mM9sMJSM8aJ4KVtbFyKfWBketyGG4a5PcB0tQU8ZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMXH9st4VXGl/ebByTFXx93lx5rDMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEveGNmMnkzaFZjYVg5NXNISk1WZkgzZVhIbXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPpabAwQA
Ppa1AwQGTprAAwQAwye1MA0GCSqGSIb3DQEBCwUAA4IBAQCB0eia/w7yj0MBdgzv
vjA6IO6ohabZHlhaJPcwTfkeyx7OoyrJ9yGAIqmx9CgM6r9j66XRuJorW8RZNwzt
FH6MvhpBtFVQOmnHC2HMuCk+7HJSTGiMdw+O1jDYR+pZ7YM1Y9CbjNMf5rQDIK7e
h0iatPKon3IOFF3dcULm/wqg5qervULtcafLgnZqI/wvN96fUgrbFZ1vYdKCjVyQ
wjzGf3xJHaHWUVc71Gw0lGO3rxApZGAqMBdZ6rwdcX/+xl2QeVjKpw6DluW63hdN
856nIx+RZX8ljwrM79XSQ1m4zqibRO6NF621Sje8bT9ESxgovFGPLbHkIvTEAH1Y
yQAf
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:55:35 2025 by rpki-client