Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/23-slMBx9OaOIFlpOHdhPCZ0oWw.roa
File: 23-slMBx9OaOIFlpOHdhPCZ0oWw.roa (raw, json)
Hash identifier: SNo8iSEH82//A1F/sf8bmn+YyPQwxv+oiORgkDdJFic=
Subject key identifier: DB:7F:AC:94:C0:71:F4:E6:8E:20:59:69:38:77:61:3C:26:74:A1:6C
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01909164C3F9B01C38CD40BE287101A11D36
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/23-slMBx9OaOIFlpOHdhPCZ0oWw.roa
Signing time: Mon 08 Jul 2024 08:10:18 +0000
ROA not before: Mon 08 Jul 2024 08:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 30 Dec 2024 13:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:64:c3:f9:b0:1c:38:cd:40:be:28:71:01:a1:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 8 08:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db7fac94c071f4e68e2059693877613c2674a16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:24:35:f4:aa:14:d1:9a:f8:9c:33:13:06:
e8:4c:ba:17:40:49:10:3f:af:a1:6b:64:6b:f6:b9:
8b:4e:f6:54:31:32:01:46:9e:9f:21:be:65:76:f5:
3d:f9:9e:e8:8e:09:83:da:cc:cf:53:b7:35:49:bc:
91:fc:60:ba:4e:3b:b7:c8:96:fa:cb:e6:f7:b8:1d:
74:21:e7:9b:63:8d:61:ca:24:a5:07:e6:83:33:c9:
a2:9a:f3:25:33:c2:dd:93:92:6f:56:43:1e:7d:20:
cf:10:2b:13:74:a6:4e:f3:f6:9c:27:78:e5:9d:db:
a7:3a:31:a0:dd:8f:37:37:bd:6f:6c:26:38:2f:22:
4c:51:a2:54:ab:24:21:ea:37:ea:32:54:1b:b7:90:
b2:9f:44:72:75:3f:78:cd:16:61:8b:f2:70:96:df:
7f:10:d7:ee:a1:d4:ba:43:bb:4c:25:e7:f4:51:98:
f4:60:b9:5b:c3:08:48:8a:7e:ec:85:e4:df:32:a5:
92:dc:6c:8b:93:67:de:4c:af:f0:96:6f:63:97:8d:
ad:62:6b:56:32:df:4b:b7:8a:cf:ce:8a:43:b0:14:
e2:da:2e:be:bf:01:3a:e4:f4:cd:51:d8:25:e7:5d:
c8:3e:89:e9:48:64:72:9c:bc:f7:bf:7e:ed:9f:2f:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:AC:94:C0:71:F4:E6:8E:20:59:69:38:77:61:3C:26:74:A1:6C
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/23-slMBx9OaOIFlpOHdhPCZ0oWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
89.37.0.0/20
89.43.0.0/20
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
42:5c:94:77:a2:2a:51:79:da:43:1c:5d:76:d8:1b:dd:4e:54:
67:25:15:1f:18:5a:ee:5b:f6:f9:08:2d:bb:53:2b:49:8c:2c:
c3:89:95:e0:35:5e:c0:b3:7c:93:32:d7:dc:d2:a0:17:3e:f5:
14:fd:9b:65:ef:bc:6d:0a:a5:2c:f6:ec:d5:61:ca:44:9d:d5:
1d:74:2c:4c:1d:76:6b:0d:54:9f:70:8c:e1:f1:ec:bd:b7:f0:
ab:01:48:1b:7d:36:b7:b6:bb:1e:6a:74:f6:5d:e5:30:bb:81:
65:97:8d:6d:f1:0b:9d:a4:61:6a:9b:1f:ad:da:61:1f:a3:27:
9a:0a:0b:bc:33:a4:22:a0:55:bf:e3:c7:b1:a6:8a:44:e5:44:
66:70:45:e4:5b:e9:04:f9:3e:f1:e3:bb:76:ee:c8:5a:2e:92:
5c:42:17:da:bc:20:f5:a3:b9:3a:94:9c:fc:8b:6e:a6:80:de:
48:06:62:08:2e:8c:fe:13:d5:e2:08:93:af:5f:d9:7f:03:c0:
af:d1:ae:ea:00:a1:10:1e:15:fc:60:0f:f9:d5:b3:2d:8a:01:
39:8b:30:12:2f:f4:7b:32:93:c5:3a:26:76:11:89:c2:aa:00:
a5:ee:15:2a:e5:b8:79:e1:63:44:71:ca:f6:f9:b0:1d:10:4a:
f7:5c:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:53 2025 by rpki-client