Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/2k9qSn9pAzqOV1dUMWzP-1Zplc8.roa
File: 2k9qSn9pAzqOV1dUMWzP-1Zplc8.roa (raw, json)
Hash identifier: CO4gakpuo2zvmEtoYSTa1ZNmH2gDosE4TiwAfXjw+xo=
Subject key identifier: DA:4F:6A:4A:7F:69:03:3A:8E:57:57:54:31:6C:CF:FB:56:69:95:CF
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0195A86C4B53861067A9A13D49A6E346597D
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/2k9qSn9pAzqOV1dUMWzP-1Zplc8.roa
Signing time: Tue 18 Mar 2025 08:43:44 +0000
ROA not before: Tue 18 Mar 2025 08:43:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.69.172.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
85.9.192.0/19 maxlen: 19
85.9.200.0/21 maxlen: 21
85.9.208.0/21 maxlen: 21
85.9.216.0/22 maxlen: 22
85.9.220.0/22 maxlen: 22
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
213.163.192.0/20 maxlen: 20
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3546::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Mar 2025 22:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:6c:4b:53:86:10:67:a9:a1:3d:49:a6:e3:46:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Mar 18 08:43:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da4f6a4a7f69033a8e575754316ccffb566995cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:52:df:57:d1:34:8f:7f:e6:e1:b9:f6:e2:
2f:d2:f5:2f:4f:3f:65:fc:ad:44:35:50:42:3e:e0:
7e:06:6d:cb:e0:6f:ae:56:a0:a7:67:e2:4f:5a:b9:
0b:7f:1e:73:4a:7d:2b:0b:39:5e:41:b1:29:a1:11:
e5:b9:0d:52:52:33:51:cf:a0:d4:37:c8:df:ef:48:
22:15:e5:dc:4e:0a:95:4b:b9:15:58:d9:a2:09:6e:
10:0b:9d:ea:c3:8f:42:6c:d5:92:80:22:d6:3e:de:
ae:7e:12:f9:28:e4:94:db:2c:1f:d1:75:f2:be:3d:
77:1b:09:5b:76:40:b0:b9:8b:91:1b:b7:00:86:79:
61:d4:3e:f5:de:3c:be:d9:cf:f6:80:cb:7a:14:45:
0d:6a:ac:c2:53:91:c9:11:ac:0c:63:f1:c3:03:70:
ce:60:1d:75:89:55:96:ad:c3:56:dc:ae:4f:41:9d:
93:01:27:56:51:6c:96:ec:a3:88:bd:d8:98:72:30:
a6:ef:d1:49:70:08:c1:67:d7:79:e7:69:60:ef:4e:
0a:2d:8a:63:51:a0:dd:b2:cd:88:a1:b7:8d:03:85:
ef:26:69:9c:a8:e5:a9:8b:d9:c3:30:15:84:01:e4:
49:81:33:5f:63:e1:02:4a:a6:ef:1b:6c:81:b6:6a:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:6A:4A:7F:69:03:3A:8E:57:57:54:31:6C:CF:FB:56:69:95:CF
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/2k9qSn9pAzqOV1dUMWzP-1Zplc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
83.136.248.0/21
85.9.192.0/19
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
213.163.192.0/20
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:76:5f:00:21:76:c2:65:37:c4:c1:1f:ef:8d:74:1d:96:22:
4e:cb:9a:33:fc:4b:ea:99:16:72:be:14:09:73:e7:b7:20:ca:
39:57:bc:e3:dc:b1:79:c6:84:6b:ab:c9:7e:c3:72:5c:90:63:
86:b8:59:61:98:a6:25:69:6b:3b:e7:fd:0d:c9:74:22:37:7e:
3e:40:f4:e4:7f:e9:f5:3e:40:f1:1d:44:15:08:db:f8:1d:a2:
7c:f4:dd:c6:82:9b:08:55:1c:65:0f:89:6a:b5:34:45:72:b4:
90:f8:ee:85:7c:f0:2d:fe:08:c4:27:b1:fd:1d:c7:a9:00:6e:
ce:e8:73:ae:11:65:ff:40:bf:c1:bb:d1:3e:6c:e6:8b:6d:f2:
ce:42:4f:d6:26:cc:eb:68:58:3d:9f:38:60:de:75:54:8a:67:
24:b4:f8:08:de:76:22:cb:37:34:a2:ed:a5:48:0e:9d:04:db:
af:6c:60:d2:52:09:92:32:b1:ab:47:bb:da:25:81:bf:a3:9c:
49:cc:9e:53:b3:7e:fd:6a:74:a3:5c:b4:f9:f0:a7:35:48:cf:
9f:c7:6a:3a:c2:6e:30:06:6b:11:05:e6:45:a0:a1:d2:2e:2f:
57:af:ca:31:68:da:ce:2e:fc:f6:0b:87:7e:96:01:12:4c:86:
86:fb:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:26:54 2025 by rpki-client