Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/fcIWzX20PbbT5QsfNq7khod74H4.roa
File: fcIWzX20PbbT5QsfNq7khod74H4.roa (raw, json)
Hash identifier: A1CJHdlOu+fc/Ijl2E+tpYPcpS23qRitir2oTDX29Aw=
Subject key identifier: 7D:C2:16:CD:7D:B4:3D:B6:D3:E5:0B:1F:36:AE:E4:86:87:7B:E0:7E
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01959DEB7960EC45D66D339369A68E6C6C24
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/fcIWzX20PbbT5QsfNq7khod74H4.roa
Signing time: Sun 16 Mar 2025 07:46:49 +0000
ROA not before: Sun 16 Mar 2025 07:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Fri 21 Mar 2025 08:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:eb:79:60:ec:45:d6:6d:33:93:69:a6:8e:6c:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 16 07:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc216cd7db43db6d3e50b1f36aee486877be07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:a3:b9:a1:e3:b3:cd:f8:35:fb:a9:19:45:
e5:08:70:36:f8:5a:60:1c:b3:f2:34:c8:33:9e:41:
1d:b2:37:88:6d:4c:0d:78:0d:4d:25:de:f9:8f:6e:
f4:ca:f8:e3:d2:10:d0:1e:86:18:55:81:de:ac:0c:
cb:38:3f:36:ff:04:7d:6e:e6:70:da:12:fd:2e:2d:
52:10:49:54:d9:5d:91:34:d8:51:b2:9a:a0:e9:6f:
49:77:a9:8c:39:26:33:98:cb:74:12:36:80:f7:dd:
b9:21:45:f1:ee:99:04:bb:e4:52:1d:7a:44:7c:cb:
ed:5e:fc:a2:96:19:28:b1:80:37:79:ce:c8:28:8c:
af:92:7b:33:62:5b:5b:9d:cc:c7:5a:d5:96:2e:c2:
fb:8f:3c:28:83:d4:f6:59:3a:3a:b1:c9:0d:1b:ea:
af:1b:ac:2a:f4:ac:53:57:5a:6a:5c:f8:14:11:21:
99:23:9e:d0:de:f6:a0:59:d8:cc:d7:ee:4f:fe:24:
82:73:67:6c:f1:4f:7d:9a:a0:8f:a2:f0:fa:4e:7f:
10:62:05:29:64:83:c4:89:c5:da:17:c6:61:7d:0c:
58:0b:d8:17:23:b1:73:8a:ad:f9:59:7f:4e:ca:8b:
fe:26:e8:76:37:91:3f:00:2a:f2:25:a4:70:6e:08:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:16:CD:7D:B4:3D:B6:D3:E5:0B:1F:36:AE:E4:86:87:7B:E0:7E
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/fcIWzX20PbbT5QsfNq7khod74H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
46.36.97.0/24
46.36.100.0-46.36.102.255
46.36.105.0-46.36.106.255
89.37.0.0/20
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
07:c1:ff:af:d4:6e:8d:e9:dd:11:9a:da:70:b5:36:24:19:77:
19:bb:c4:1b:72:88:d1:c6:12:4b:d8:da:fe:d6:ef:7b:05:c5:
3d:24:ab:c3:35:de:b2:cb:db:f8:ed:76:80:59:54:fd:c4:ae:
5f:3d:92:74:65:a3:2b:39:ff:17:e5:87:fc:a3:d8:d4:d6:ad:
7b:aa:d2:b0:bd:33:5f:3c:72:df:fc:69:ef:63:31:52:96:b7:
01:d9:d4:c3:37:28:d0:ff:58:26:8e:ef:ad:60:c4:c7:e0:7d:
44:a1:02:c1:3d:02:53:9a:a3:3e:dd:16:84:89:b5:cd:36:15:
5c:d8:82:df:36:11:58:6f:62:a2:ce:05:4c:86:d9:2d:30:7e:
d8:32:99:72:dc:85:6f:5a:de:fe:f2:f8:e2:82:cd:b8:b9:65:
dd:36:51:09:f5:e6:9d:63:49:16:3a:69:f8:32:b2:90:7f:2b:
8b:9d:a8:93:1f:63:73:84:6c:33:45:ce:3f:49:89:c6:fc:0e:
33:eb:a6:a3:fd:17:e4:83:b5:a9:63:5b:0d:a2:28:9f:4f:7d:
37:af:f8:f1:0c:5c:b4:43:ee:66:04:ce:0d:9d:bd:08:fb:89:
82:1b:95:43:4e:fc:24:c1:65:dd:93:33:c6:a6:04:83:68:22:
a5:8e:aa:8c
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZWd63lg7EXWbTOTaaaObGwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjUwMzE2MDc0NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGMyMTZjZDdkYjQzZGI2ZDNlNTBiMWYzNmFlZTQ4Njg3N2JlMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw+juaHjs834NfupGUXlCHA2+Fpg
HLPyNMgznkEdsjeIbUwNeA1NJd75j270yvjj0hDQHoYYVYHerAzLOD82/wR9buZw
2hL9Li1SEElU2V2RNNhRspqg6W9Jd6mMOSYzmMt0EjaA9925IUXx7pkEu+RSHXpE
fMvtXvyilhkosYA3ec7IKIyvknszYltbnczHWtWWLsL7jzwog9T2WTo6sckNG+qv
G6wq9KxTV1pqXPgUESGZI57Q3vagWdjM1+5P/iSCc2ds8U99mqCPovD6Tn8QYgUp
ZIPEicXaF8ZhfQxYC9gXI7Fziq35WX9Oyov+Juh2N5E/ACryJaRwbggxdwIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFH3CFs19tD220+ULHzau5IaHe+B+MB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvZmNJV3pYMjBQYmJUNVFzZk5xN2tob2Q3NEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrwQCAAEwgagDBAYF
yYADBAQlnBADBAAuJGEwDAMEAi4kZAMEAC4kZjAMAwQALiRpAwQALiRqAwQEWSUA
AwQEWSsAMAwDBABb0bcDBABb0bgDBABb0boDBARcchADBAReZYADBABnb0UDBABn
b0cDBAFnhOQDBAFnjIADBAG5Fh4DBAK5Z1QDBAK5h+QDBAK5iGQDBAK5oigDBAK5
r0wDBAK5sCADBAK5ttwDBAS81UAwDQQCAAIwBwMFAyoAXKAwDQYJKoZIhvcNAQEL
BQADggEBAAfB/6/Ubo3p3RGa2nC1NiQZdxm7xBtyiNHGEkvY2v7W73sFxT0kq8M1
3rLL2/jtdoBZVP3Erl89knRloys5/xflh/yj2NTWrXuq0rC9M188ct/8ae9jMVKW
twHZ1MM3KND/WCaO761gxMfgfUShAsE9AlOaoz7dFoSJtc02FVzYgt82EVhvYqLO
BUyG2S0wftgymXLchW9a3v7y+OKCzbi5Zd02UQn15p1jSRY6afgyspB/K4udqJMf
Y3OEbDNFzj9Jicb8DjPrpqP9F+SDtaljWw2iKJ9PfTev+PEMXLRD7mYEzg2dvQj7
iYIblUNO/CTBZd2TM8amBINoIqWOqow=
-----END CERTIFICATE-----
Generated at Wed Apr 23 15:24:26 2025 by rpki-client