Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/_uDQxMhwE_kflhMMBBMyDXnJ2wI.roa
File: _uDQxMhwE_kflhMMBBMyDXnJ2wI.roa (raw, json)
Hash identifier: vWCD46Y3cCRKQahQnkN6HyHIPudnDqBDZm3P6Mjg8+A=
Subject key identifier: FE:E0:D0:C4:C8:70:13:F9:1F:96:13:0C:04:13:32:0D:79:C9:DB:02
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01964CFBC472C10DC715F4BB530266154D96
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/_uDQxMhwE_kflhMMBBMyDXnJ2wI.roa
Signing time: Sat 19 Apr 2025 07:38:10 +0000
ROA not before: Sat 19 Apr 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.46.214.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Sun 20 Apr 2025 12:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:fb:c4:72:c1:0d:c7:15:f4:bb:53:02:66:15:4d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Apr 19 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee0d0c4c87013f91f96130c0413320d79c9db02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:4b:90:83:00:a6:43:49:a8:48:c7:97:2c:
c2:f4:1e:97:47:c3:ca:29:f7:f6:b5:25:9e:d4:2d:
a2:c5:4f:cd:ab:f2:c0:12:08:26:97:5f:e2:2f:1a:
8f:77:a7:14:a8:29:03:eb:79:5c:a5:26:29:76:a1:
5c:cf:9a:7a:cb:e0:13:23:8a:40:53:fd:6f:bd:7b:
55:f7:5e:c4:de:67:d2:cc:0b:75:7f:47:28:92:88:
63:85:c8:bf:6a:64:d8:5b:7b:51:1e:fc:60:4a:a7:
50:cf:bb:89:f8:a8:33:c0:98:fd:dc:46:d1:e0:fb:
00:d4:ee:23:e3:6c:10:0a:8a:19:80:13:82:bf:a6:
ff:66:2a:c4:48:d2:dc:14:fd:30:9a:6b:cb:d2:02:
a1:dd:c5:d6:35:df:59:80:8b:e8:7d:1d:2e:4d:5a:
47:10:e8:25:ca:c6:df:5c:97:19:a7:6e:8c:8e:bd:
a4:2c:bc:c8:10:78:5f:2c:8c:85:aa:e5:d7:29:8c:
a9:b8:15:65:32:a6:e5:3b:29:c6:75:4c:c5:c2:62:
20:ba:f9:85:a0:ed:11:8b:88:87:e5:35:4f:db:cc:
30:b7:b9:29:70:42:f7:4f:59:74:9a:03:e6:fb:65:
7a:5d:26:46:79:94:23:17:ff:39:0d:ab:a6:b1:77:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:D0:C4:C8:70:13:F9:1F:96:13:0C:04:13:32:0D:79:C9:DB:02
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/_uDQxMhwE_kflhMMBBMyDXnJ2wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.248.164.0/22
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
193.46.214.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
75:c0:77:7b:26:33:04:33:67:1a:3d:2a:88:be:8b:86:00:86:
43:19:27:5b:18:82:2d:bf:33:a6:2e:ae:da:35:9d:2e:df:cf:
a4:c7:34:92:89:17:a1:c7:e9:6e:d7:4f:47:b1:a5:36:b4:0b:
a2:ee:0e:59:b8:97:53:a8:ea:0d:68:4a:1a:f8:c8:bd:58:a6:
12:f8:dd:2d:27:10:0c:ce:c2:b6:fd:2e:38:fd:55:e9:9a:bd:
37:41:44:8b:09:da:a7:48:fb:e4:8e:93:7b:88:35:08:3f:76:
37:7e:5a:93:ba:73:f1:64:99:ae:6f:ce:be:ad:12:71:ca:24:
92:2a:19:88:d3:bc:48:14:22:bd:ea:63:7a:76:b7:69:6a:18:
a5:9f:e6:ee:95:11:79:33:b9:99:3a:3e:b7:2a:78:f1:13:08:
a9:40:d5:07:ef:b0:a0:69:38:56:c5:07:3c:be:62:4e:b2:fa:
77:25:7a:9f:b2:bd:e6:49:60:04:b6:23:6c:18:c3:71:c1:11:
c4:1f:57:33:e5:91:0c:12:f9:02:9d:48:7f:d1:a0:e6:0c:4c:
4e:05:db:0e:23:07:bb:6a:03:5e:72:da:6a:c2:00:52:2c:71:
a5:70:91:60:21:cc:b5:54:20:6e:06:cf:36:04:4f:c3:54:a7:
59:f0:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:09:25 2025 by rpki-client