Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1-R_5S-HoTbJj1vdtDeoFx_dxXYk.roa
File: 1-R_5S-HoTbJj1vdtDeoFx_dxXYk.roa (raw, json)
Hash identifier: EHvR5uyupwNnSXoecE1yVkOoSC/Q4xz0f9J8m2hnzjI=
Subject key identifier: F9:1F:F9:4B:E1:E8:4D:B2:63:D6:F7:6D:0D:EA:05:C7:F7:71:5D:89
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0195B7E986EB57355C906235775FCA662757
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1-R_5S-HoTbJj1vdtDeoFx_dxXYk.roa
Signing time: Fri 21 Mar 2025 08:54:49 +0000
ROA not before: Fri 21 Mar 2025 08:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.248.164.0/22 maxlen: 22
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Sat 19 Apr 2025 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:e9:86:eb:57:35:5c:90:62:35:77:5f:ca:66:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 21 08:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91ff94be1e84db263d6f76d0dea05c7f7715d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:64:7e:ee:98:9f:98:6f:0e:76:ba:e8:27:
00:da:5f:34:fe:99:18:46:65:6d:a0:5d:e6:7d:7d:
bc:4b:20:f2:dd:d0:69:88:91:38:1f:28:38:b7:69:
77:d5:69:12:a7:a5:63:38:00:93:f0:28:b4:a7:93:
6e:2c:8b:dd:54:44:40:c8:37:79:52:df:f9:d8:b1:
18:a4:ab:b8:70:eb:bb:ef:80:bc:3f:c1:bf:8f:61:
fb:cd:fb:d5:e9:1a:91:cd:c9:67:3c:1d:63:65:ec:
90:b2:ac:94:c8:81:95:b6:c5:66:a8:44:51:d8:54:
9f:f3:5d:76:2d:a0:c7:e9:66:0b:99:b2:e5:81:4d:
58:28:14:0b:ad:46:15:d7:3e:ee:36:07:19:73:50:
3e:9e:be:b3:ed:dd:51:6d:0c:18:9c:e0:c3:0e:f7:
6e:db:6e:4b:a3:5c:c9:f7:d4:b6:78:13:60:99:97:
d4:ed:82:d8:b8:45:48:7d:d3:dc:d5:e7:07:a6:ca:
ca:a5:19:74:d2:ef:a4:84:1c:5c:64:db:a9:e6:f0:
27:11:60:b0:ef:3c:4c:b0:04:6a:38:e1:c7:c9:15:
7e:87:72:ff:af:40:3c:4b:f1:d5:95:09:7f:47:ce:
b8:a4:55:be:45:37:3f:aa:32:b6:5e:88:05:d0:6b:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:F9:4B:E1:E8:4D:B2:63:D6:F7:6D:0D:EA:05:C7:F7:71:5D:89
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1-R_5S-HoTbJj1vdtDeoFx_dxXYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.248.164.0/22
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
89.37.0.0/20
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
38:fe:ef:51:d4:98:7f:f7:fc:80:67:b9:83:43:98:4c:b3:f4:
54:9d:62:75:81:3a:33:66:7e:b4:fb:6f:b9:ba:2f:3d:71:1c:
91:a6:0d:ff:7e:30:31:db:87:00:6d:86:b8:8e:49:44:5e:8c:
52:4a:ed:89:10:1e:a3:71:21:b8:22:06:74:c8:f2:ab:3c:d9:
8a:2f:a6:84:2b:48:bc:48:a4:0a:cb:00:d7:b4:17:b5:98:2d:
ae:18:ed:41:74:38:a5:f9:c6:0a:f6:34:b2:38:4d:dd:62:67:
ce:3c:a9:57:47:8a:5c:d3:3b:e7:1b:0b:43:14:01:26:25:f0:
72:fb:d1:ef:be:d9:25:d2:8a:9a:58:c0:21:ca:d0:5a:49:ca:
4a:b3:62:8c:bd:43:fa:3a:49:6e:80:9e:25:8b:9c:1a:31:7d:
32:21:40:14:80:1d:19:f5:b6:a7:9a:9c:43:8f:23:e4:cc:59:
ed:17:c7:15:90:45:25:7b:76:68:78:dc:d6:3b:ad:35:2f:ab:
3c:d4:25:1d:68:b2:e0:eb:d1:b6:ea:70:57:f7:9f:7b:5d:a7:
e7:c1:e5:33:fc:cc:78:c4:94:10:5d:09:26:52:0d:09:3d:e3:
98:0c:ba:ba:e1:05:7f:3d:a6:1f:33:d7:f7:40:f4:b2:2f:25:
fa:c8:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:12:52 2025 by rpki-client