Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dj1Az41cAuCOcNr2P0TT9q6hsBw.roa
File: Dj1Az41cAuCOcNr2P0TT9q6hsBw.roa (raw, json)
Hash identifier: KFmkfah76yn8Rg67AUqnwrUY6MfDduEcPK1n3sxb5xY=
Subject key identifier: 0E:3D:40:CF:8D:5C:02:E0:8E:70:DA:F6:3F:44:D3:F6:AE:A1:B0:1C
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01908D6D72D62E06BF6842F918D4624CCE60
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dj1Az41cAuCOcNr2P0TT9q6hsBw.roa
Signing time: Sun 07 Jul 2024 13:41:18 +0000
ROA not before: Sun 07 Jul 2024 13:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.68.0/22 maxlen: 22
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:6d:72:d6:2e:06:bf:68:42:f9:18:d4:62:4c:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 7 13:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3d40cf8d5c02e08e70daf63f44d3f6aea1b01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:94:ad:57:12:d7:ef:9d:77:ae:8e:0a:28:
80:89:eb:26:c2:9b:a9:68:5e:55:32:ea:3d:b0:46:
4b:b6:d5:f9:58:3c:73:35:f1:b1:b3:64:15:28:bf:
5f:eb:f6:71:21:c5:b6:9b:7e:2d:44:d8:65:f6:c7:
a0:80:27:cb:a0:1d:47:7a:c8:9f:d7:2b:a3:76:0b:
9e:20:b3:7e:e6:71:f5:af:c5:c1:8b:c5:16:6a:e2:
fb:d9:10:a8:83:43:c8:67:63:ae:6b:8e:f0:32:39:
04:88:58:ea:72:f9:71:ea:f8:a7:ab:25:9b:41:a8:
61:4f:e8:e2:da:dc:81:3c:42:d4:d5:54:b3:34:7d:
7c:b4:b3:ba:49:ba:59:f3:84:2a:a0:5a:5e:91:f7:
2d:55:d1:f2:04:8f:0d:c6:42:5c:2d:67:2b:5b:8f:
0b:74:06:99:69:78:cc:70:33:52:a9:5b:fe:58:41:
08:4f:55:4c:50:f6:51:da:65:d3:72:c3:2c:33:a9:
a1:73:7e:a2:c9:f7:42:52:1d:a5:18:3d:21:c4:a1:
93:61:96:dc:ab:4f:a1:b0:90:9c:38:20:56:c0:ca:
bd:c6:40:47:91:8d:a2:68:8e:65:8a:da:e5:47:0e:
97:51:86:61:8d:78:f8:12:53:31:70:dc:c0:6f:96:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:40:CF:8D:5C:02:E0:8E:70:DA:F6:3F:44:D3:F6:AE:A1:B0:1C
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dj1Az41cAuCOcNr2P0TT9q6hsBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
89.37.0.0/20
89.43.0.0/20
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:5f:93:5d:a2:d6:71:36:a5:2a:c6:52:f7:25:e2:67:9a:fa:
60:0a:79:3a:03:6d:be:3d:46:18:c9:f6:b7:d4:20:cc:3d:2a:
94:2d:dc:dc:80:4a:05:58:34:46:bd:b2:40:c0:e6:48:de:59:
c6:89:0d:d8:8f:26:9a:f3:6a:31:d1:98:61:2d:23:00:e3:68:
95:c7:30:83:bb:a4:22:a1:61:f1:20:9d:e0:21:47:2a:63:38:
02:e5:73:28:b3:ce:df:06:26:86:fe:1b:95:f9:9d:74:4b:0f:
d3:f1:b6:fb:fb:08:73:29:61:cb:92:e4:0d:ac:c0:7d:2d:de:
54:24:84:a0:f1:27:f5:47:81:46:c4:62:ec:0b:73:86:60:73:
14:93:94:ad:38:3d:ea:a4:01:20:e3:3d:d4:87:a0:41:e3:ba:
67:19:62:5d:14:2d:8c:04:c1:9e:5d:ae:46:05:d1:00:87:5b:
50:5e:e6:d9:6b:b1:a4:53:42:44:88:7b:c1:b0:2c:83:9a:59:
35:53:08:c7:db:eb:a7:06:f9:ba:e8:55:3c:8e:ab:c7:88:2c:
70:55:62:88:a2:1c:3f:b5:fc:8c:58:ab:bf:4d:77:da:3a:8a:
ef:1c:86:ac:25:3c:15:db:cd:e9:c3:ec:2e:57:e0:ed:90:44:
ed:81:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:12:52 2025 by rpki-client