Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/0Ni1ziy_1NEd1IFSkzokeXeWEJE.roa
File: 0Ni1ziy_1NEd1IFSkzokeXeWEJE.roa (raw, json)
Hash identifier: X74gflaSOoAkwUAnLFSJKVaOj5dkz+z6YYoaO8cqSuo=
Subject key identifier: D0:D8:B5:CE:2C:BF:D4:D1:1D:D4:81:52:93:3A:24:79:77:96:10:91
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019417B2274D0A59F06B2A7F910EDCBEB780
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/0Ni1ziy_1NEd1IFSkzokeXeWEJE.roa
Signing time: Mon 30 Dec 2024 13:12:18 +0000
ROA not before: Mon 30 Dec 2024 13:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:b2:27:4d:0a:59:f0:6b:2a:7f:91:0e:dc:be:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Dec 30 13:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d8b5ce2cbfd4d11dd48152933a247977961091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:55:67:bb:94:47:70:f7:24:de:06:63:95:
24:50:e9:45:de:b4:b5:f7:cf:99:27:d9:ed:69:73:
ad:b5:3f:02:9b:7f:75:e0:25:71:4d:f3:12:71:14:
fc:30:6d:5e:18:09:32:69:5d:da:8f:db:8f:09:80:
62:ef:d6:dd:7e:70:58:64:81:28:4a:55:08:87:98:
77:a1:12:c5:70:62:b9:f3:76:ad:17:53:8a:42:0b:
4b:0e:cc:75:bb:97:a8:06:92:10:7e:29:4e:6e:de:
cb:32:61:28:94:48:97:f3:45:df:c7:7f:69:c5:99:
33:b9:c5:71:14:b7:09:66:a6:1a:7f:c5:52:6c:95:
99:30:3e:94:c9:99:9e:57:9a:ce:c8:58:7f:28:2f:
5f:1e:d6:6a:85:95:4c:34:5e:2c:4c:18:02:72:e0:
74:37:06:6c:bd:fe:0d:03:2f:27:0f:64:1a:41:41:
fd:ba:ad:79:c8:c7:86:f1:4b:9c:58:1a:7c:aa:b8:
03:41:39:f6:76:0c:c4:04:c8:97:54:d6:17:49:5b:
31:d4:44:eb:c7:25:d8:67:34:e3:7c:61:23:74:92:
c8:8d:7d:a0:5d:aa:ab:51:e4:6b:ce:2c:e5:03:30:
d4:df:46:6d:70:56:03:db:df:3c:ce:74:7c:29:b0:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:B5:CE:2C:BF:D4:D1:1D:D4:81:52:93:3A:24:79:77:96:10:91
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/0Ni1ziy_1NEd1IFSkzokeXeWEJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
89.37.0.0/20
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:49:cd:a3:55:f5:b2:50:ba:44:dc:21:a8:42:bb:19:af:ea:
ab:f4:3a:d4:18:50:df:97:6d:ec:c2:c7:b6:00:5c:fe:77:d3:
42:ed:46:d8:94:10:32:d3:b4:a2:e0:c5:32:11:a4:0c:4a:6d:
07:be:f9:42:93:f2:74:6b:e6:38:26:d7:83:05:6e:67:5b:fa:
2f:2e:d9:ab:db:67:fd:40:11:22:0b:70:a0:0c:53:ad:0f:83:
a2:e2:05:47:06:77:a8:ba:3a:be:df:27:04:22:d1:dd:4b:1e:
86:48:a7:16:88:c4:f5:3b:0a:50:89:39:57:ec:89:50:7b:50:
c8:7a:03:ad:77:71:2b:b0:f1:34:96:ef:44:cc:00:e8:a8:f8:
83:29:09:c3:34:16:8b:b9:58:5f:10:85:92:5a:4f:d6:94:b7:
63:8c:cf:bd:ae:24:5a:79:ce:61:7c:ab:bc:a9:c4:4f:18:ff:
b1:7a:42:77:fc:67:d2:a7:44:de:dd:83:f1:5a:25:61:c2:5f:
90:28:18:95:b7:68:08:13:d1:f7:f6:b5:e1:50:03:e5:1b:c2:
fa:ad:e3:7e:53:81:99:5e:01:2e:40:3d:2f:5f:5b:69:bb:f8:
38:e0:3d:62:c1:04:62:5c:f0:46:29:7e:54:48:a0:85:5c:c0:
3e:c9:4d:73
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQXsidNClnwayp/kQ7cvreAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjQxMjMwMTMxMjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQ4YjVjZTJjYmZkNGQxMWRkNDgxNTI5MzNhMjQ3OTc3OTYxMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxlVZ7uUR3D3JN4GY5UkUOlF3rS1
98+ZJ9ntaXOttT8Cm3914CVxTfMScRT8MG1eGAkyaV3aj9uPCYBi79bdfnBYZIEo
SlUIh5h3oRLFcGK583atF1OKQgtLDsx1u5eoBpIQfilObt7LMmEolEiX80Xfx39p
xZkzucVxFLcJZqYaf8VSbJWZMD6UyZmeV5rOyFh/KC9fHtZqhZVMNF4sTBgCcuB0
NwZsvf4NAy8nD2QaQUH9uq15yMeG8UucWBp8qrgDQTn2dgzEBMiXVNYXSVsx1ETr
xyXYZzTjfGEjdJLIjX2gXaqrUeRrzizlAzDU30ZtcFYD2988znR8KbA1dwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFNDYtc4sv9TRHdSBUpM6JHl3lhCRMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvME5pMXppeV8xTkVkMUlGU2t6b2tlWGVXRUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0BAIAATBuAwQGBcmA
AwQEJZwQAwQEWSUAAwQEWSsAMAwDBABb0bcDBABb0bgDBABb0boDBARcchADBARe
ZYADBAG5Fh4DBAK5Z1QDBAK5h+QDBAK5iGQDBAK5oigDBAK5r0wDBAK5sCADBAK5
ttwDBAS81UAwDQQCAAIwBwMFAyoAXKAwDQYJKoZIhvcNAQELBQADggEBAF9JzaNV
9bJQukTcIahCuxmv6qv0OtQYUN+XbezCx7YAXP5300LtRtiUEDLTtKLgxTIRpAxK
bQe++UKT8nRr5jgm14MFbmdb+i8u2avbZ/1AESILcKAMU60Pg6LiBUcGd6i6Or7f
JwQi0d1LHoZIpxaIxPU7ClCJOVfsiVB7UMh6A613cSuw8TSW70TMAOio+IMpCcM0
Fou5WF8QhZJaT9aUt2OMz72uJFp5zmF8q7ypxE8Y/7F6Qnf8Z9KnRN7dg/FaJWHC
X5AoGJW3aAgT0ff2teFQA+Ubwvqt435TgZleAS5APS9fW2m7+DjgPWLBBGJc8EYp
flRIoIVcwD7JTXM=
-----END CERTIFICATE-----
Generated at Wed Apr 23 15:40:01 2025 by rpki-client