Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ELEsUg3WydaLH2wnGqO6uBh8zAw.roa
File: ELEsUg3WydaLH2wnGqO6uBh8zAw.roa (raw, json)
Hash identifier: T0gY73WWWY3492cu7+ioxEIblTPFR4OX3eLT1doygUM=
Subject key identifier: 10:B1:2C:52:0D:D6:C9:D6:8B:1F:6C:27:1A:A3:BA:B8:18:7C:CC:0C
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0194C11A7EAF2F2B34181B0A413092236F64
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ELEsUg3WydaLH2wnGqO6uBh8zAw.roa
Signing time: Sat 01 Feb 2025 10:42:06 +0000
ROA not before: Sat 01 Feb 2025 10:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 10 Mar 2025 08:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c1:1a:7e:af:2f:2b:34:18:1b:0a:41:30:92:23:6f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Feb 1 10:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b12c520dd6c9d68b1f6c271aa3bab8187ccc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:2e:c8:8e:df:74:69:f5:c0:6d:e1:23:8c:
20:b9:52:ea:db:dc:b2:75:6e:27:51:f7:80:29:38:
63:ee:6a:12:80:37:d0:27:9a:18:21:97:78:56:0f:
d5:3c:d6:1d:b8:41:06:e9:86:e5:f1:37:2e:7f:3d:
88:f1:02:8f:96:55:d9:f3:24:bb:d5:e5:43:51:1d:
d7:8b:f6:87:25:92:8e:db:92:2b:0d:00:30:91:29:
f1:10:d8:93:ba:27:f4:29:5d:3c:d3:2b:be:69:de:
cd:16:58:f3:61:0d:73:28:87:0b:cb:d7:1f:f5:f0:
2d:17:a5:9d:e7:b2:15:8f:af:b1:de:39:ca:95:1b:
02:40:8f:1c:d6:5a:4b:5a:66:ae:19:7b:79:c8:d4:
56:bd:dd:5a:50:12:62:c8:09:b6:7c:19:8b:7b:0a:
36:16:84:10:3a:a0:94:df:04:1a:94:a2:95:9e:a1:
f1:d9:6a:3d:51:5a:06:4d:eb:29:ed:67:5d:e7:c4:
74:75:c2:94:f3:1b:7e:ed:e3:5c:d5:8b:dd:27:59:
d7:f2:4b:85:48:d5:c1:7d:16:29:d4:33:9d:12:94:
ea:93:24:b8:26:aa:c3:df:09:21:1b:5a:31:b5:31:
56:fc:54:ee:d8:8e:1a:1b:69:38:24:a9:82:50:60:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:2C:52:0D:D6:C9:D6:8B:1F:6C:27:1A:A3:BA:B8:18:7C:CC:0C
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ELEsUg3WydaLH2wnGqO6uBh8zAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
89.37.0.0/20
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
74:f2:1b:d0:02:bb:ab:98:6e:21:e2:7e:67:e2:6a:ef:91:89:
bd:b6:ce:e3:f6:21:af:c0:1e:67:6c:b5:a7:4c:d0:00:cb:2b:
fc:0a:62:39:1c:45:8d:9a:98:e3:d7:fd:b1:61:be:f0:cf:8a:
02:7f:f0:38:68:2c:a5:42:08:d4:99:45:95:17:7e:d9:75:80:
e6:73:93:b1:c8:2a:7a:5d:71:b1:73:39:96:67:9c:b0:93:3e:
b5:a0:75:3a:ce:e9:14:40:da:de:10:57:74:66:59:58:6d:1f:
a2:66:e5:12:45:c9:9f:03:10:1f:c3:db:e4:37:31:7e:04:96:
7b:e3:70:de:84:2a:d5:fa:ee:cd:b6:4a:be:f5:fe:2f:92:9f:
55:7d:57:8c:fc:81:f2:33:40:61:3b:bf:18:f1:f5:90:db:ae:
0a:df:dc:40:2c:c4:5e:25:d9:90:4b:53:89:14:ff:04:1e:91:
11:77:02:10:bf:1f:3b:68:7a:33:8f:b6:26:1c:49:43:92:9e:
d5:6f:a2:ca:f9:b9:cc:bd:b3:c7:27:22:65:4f:89:51:f9:22:
0e:40:3b:d7:a6:a3:d1:b1:1e:1a:d0:f9:03:33:ea:43:69:4e:
32:b3:73:68:fb:89:8c:fa:8e:2d:d6:a4:05:30:99:f4:bc:9d:
98:84:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:05:46 2025 by rpki-client