Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/lAKfF5vG6rklMT2edlXHrlIkKjg.roa
File: lAKfF5vG6rklMT2edlXHrlIkKjg.roa (raw, json)
Hash identifier: cCXBhYALuUwwpcHAIT2lWGP3UFeQhOgJod3zwbG5cWY=
Subject key identifier: 94:02:9F:17:9B:C6:EA:B9:25:31:3D:9E:76:55:C7:AE:52:24:2A:38
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 0197BFD3921211337953FBE69458B44FF960
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/lAKfF5vG6rklMT2edlXHrlIkKjg.roa
Signing time: Mon 30 Jun 2025 07:53:23 +0000
ROA not before: Mon 30 Jun 2025 07:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8193
IP address blocks: 5.133.120.0/22 maxlen: 22
45.150.24.0/22 maxlen: 22
83.222.6.0/23 maxlen: 23
84.54.64.0/19 maxlen: 19
84.54.66.0/23 maxlen: 23
84.54.70.0/23 maxlen: 23
84.54.70.0/24 maxlen: 24
84.54.71.0/24 maxlen: 24
84.54.72.0/23 maxlen: 23
84.54.72.0/24 maxlen: 24
84.54.73.0/24 maxlen: 24
84.54.76.0/23 maxlen: 23
84.54.78.0/23 maxlen: 23
84.54.80.0/23 maxlen: 23
84.54.84.0/23 maxlen: 23
84.54.86.0/23 maxlen: 23
84.54.90.0/23 maxlen: 23
84.54.92.0/23 maxlen: 23
84.54.94.0/23 maxlen: 23
84.54.96.0/20 maxlen: 20
84.54.103.0/24 maxlen: 24
84.54.104.0/24 maxlen: 24
84.54.115.0/24 maxlen: 24
84.54.116.0/23 maxlen: 23
84.54.118.0/23 maxlen: 23
84.54.118.0/24 maxlen: 24
84.54.120.0/23 maxlen: 23
84.54.122.0/23 maxlen: 23
86.62.0.0/22 maxlen: 22
86.62.1.0/24 maxlen: 24
89.104.102.0/24 maxlen: 24
89.223.3.0/24 maxlen: 24
89.249.60.0/22 maxlen: 22
89.249.62.0/24 maxlen: 24
89.249.63.0/24 maxlen: 24
90.156.160.0/24 maxlen: 24
90.156.161.0/24 maxlen: 24
90.156.162.0/24 maxlen: 24
90.156.163.0/24 maxlen: 24
90.156.164.0/24 maxlen: 24
90.156.165.0/24 maxlen: 24
90.156.166.0/24 maxlen: 24
90.156.167.0/24 maxlen: 24
90.156.192.0/21 maxlen: 21
93.188.80.0/21 maxlen: 21
93.188.84.0/22 maxlen: 22
94.230.228.0/22 maxlen: 22
94.230.228.0/24 maxlen: 24
94.230.229.0/24 maxlen: 24
94.230.230.0/24 maxlen: 24
94.230.231.0/24 maxlen: 24
94.230.232.0/24 maxlen: 24
109.94.174.0/24 maxlen: 24
109.94.175.0/24 maxlen: 24
185.4.160.0/22 maxlen: 22
185.203.236.0/22 maxlen: 22
185.203.236.0/24 maxlen: 24
185.203.237.0/24 maxlen: 24
194.93.24.0/22 maxlen: 22
198.163.192.0/20 maxlen: 20
198.163.192.0/23 maxlen: 23
198.163.192.0/24 maxlen: 24
198.163.193.0/24 maxlen: 24
198.163.194.0/23 maxlen: 23
198.163.194.0/24 maxlen: 24
198.163.195.0/24 maxlen: 24
198.163.196.0/24 maxlen: 24
198.163.197.0/24 maxlen: 24
198.163.198.0/24 maxlen: 24
198.163.199.0/24 maxlen: 24
198.163.200.0/24 maxlen: 24
198.163.201.0/24 maxlen: 24
198.163.202.0/24 maxlen: 24
198.163.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 08:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:d3:92:12:11:33:79:53:fb:e6:94:58:b4:4f:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jun 30 07:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94029f179bc6eab925313d9e7655c7ae52242a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:94:29:c9:3c:e2:bf:c2:67:76:a2:96:ad:
00:d3:9e:98:27:94:1b:3c:09:5e:d6:c7:50:ef:fa:
c4:b6:87:6f:37:9d:f4:47:13:d9:f8:80:6f:fa:52:
5f:c7:6c:9d:03:8b:70:d4:dc:21:dd:da:9d:3f:af:
46:d0:52:21:58:d9:64:44:25:b0:a7:7f:d4:a6:46:
d9:95:d5:ab:2d:66:b3:bb:92:91:a7:72:fd:b1:f9:
30:4a:b0:0b:7c:a5:75:62:94:70:7c:da:93:7c:21:
ac:75:e5:f1:bc:79:1a:b6:29:01:a4:df:85:66:5d:
0e:7e:4e:c2:ef:65:bf:d2:9f:54:96:13:a4:ed:16:
76:2d:1f:9b:1f:58:cb:9c:32:e2:a6:77:9e:90:68:
fc:bc:6b:68:89:57:75:53:41:74:f5:f7:76:a9:d4:
ec:94:27:28:3d:44:c7:55:69:02:cb:9f:76:44:9c:
47:8e:ba:5a:c8:62:42:5c:b2:10:d2:cd:91:1b:2a:
00:87:47:4e:26:d8:a8:3a:1d:b5:19:27:6d:95:bb:
c2:b3:bb:8c:13:77:d0:9b:65:ca:b5:2b:ac:88:35:
04:f0:4b:52:47:1b:bc:25:45:f2:40:5e:04:7f:2b:
fe:b9:2c:37:13:5b:52:2a:fb:90:3b:a0:1b:98:de:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:9F:17:9B:C6:EA:B9:25:31:3D:9E:76:55:C7:AE:52:24:2A:38
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/lAKfF5vG6rklMT2edlXHrlIkKjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.120.0/22
45.150.24.0/22
83.222.6.0/23
84.54.64.0-84.54.111.255
84.54.115.0-84.54.123.255
86.62.0.0/22
89.104.102.0/24
89.223.3.0/24
89.249.60.0/22
90.156.160.0/21
90.156.192.0/21
93.188.80.0/21
94.230.228.0-94.230.232.255
109.94.174.0/23
185.4.160.0/22
185.203.236.0/22
194.93.24.0/22
198.163.192.0/20
Signature Algorithm: sha256WithRSAEncryption
62:91:cc:15:d8:73:69:f5:05:bc:4a:25:47:c6:07:9d:2e:81:
95:54:d0:ae:ac:da:c2:ba:8c:aa:29:44:8c:64:a1:bf:6b:ba:
a2:4d:93:db:24:1e:86:7a:b8:59:9a:cc:b4:1e:d6:72:93:00:
68:af:24:4b:cf:f3:2a:c5:33:f2:18:42:85:d2:bd:62:0e:71:
e4:e7:ab:6a:39:ac:2d:31:80:17:c3:42:5b:41:29:8f:67:96:
44:5e:bb:2e:83:c5:68:03:93:0c:b5:71:0c:b1:f4:5a:17:8c:
c8:2e:30:f6:89:50:e2:fe:17:48:56:35:38:ca:ce:9e:c4:17:
24:aa:42:5c:78:fc:8c:4d:eb:08:6f:22:b4:6d:8d:19:82:b3:
6d:20:a9:3b:73:f4:db:c8:08:d8:c3:9a:89:fa:39:c4:8d:1c:
f0:d8:9a:40:bc:87:42:f0:18:07:a3:14:f3:51:7c:35:96:45:
a2:be:69:e7:12:24:bb:9d:5b:17:9e:ea:04:10:e3:7b:3d:61:
ef:0d:1f:53:1b:75:ee:b1:ba:25:32:14:8d:f6:98:b6:56:36:
72:94:2d:2f:0d:95:e2:00:3b:e2:49:1c:61:c7:5a:de:95:61:
e5:41:4a:4d:42:1c:5a:a9:d7:e2:ca:3d:65:bb:e8:81:7d:15:
6d:e3:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:58 2025 by rpki-client