Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vU6z4YPkrXwW7_hfKPr9PDdGwxE.roa
File: vU6z4YPkrXwW7_hfKPr9PDdGwxE.roa (raw, json)
Hash identifier: kcCMFxcK1rQM6mwLRYA+7JKIbd7MwihPCRgfHgb73es=
Subject key identifier: BD:4E:B3:E1:83:E4:AD:7C:16:EF:F8:5F:28:FA:FD:3C:37:46:C3:11
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01957F260E2B18ABE9B7957FE3B310BE39F3
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vU6z4YPkrXwW7_hfKPr9PDdGwxE.roa
Signing time: Mon 10 Mar 2025 08:22:35 +0000
ROA not before: Mon 10 Mar 2025 08:22:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.209.186.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.140.128.0/23 maxlen: 23
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Sun 16 Mar 2025 07:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:26:0e:2b:18:ab:e9:b7:95:7f:e3:b3:10:be:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 10 08:22:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4eb3e183e4ad7c16eff85f28fafd3c3746c311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:c9:13:b1:2c:30:b4:ab:b7:c1:db:4d:f8:
f7:44:0a:8a:e2:f6:6f:0a:cc:38:1b:d5:5a:30:36:
3d:ed:2e:38:a2:a8:ca:a8:6c:8b:09:39:f4:e8:89:
2a:53:b4:74:50:1c:06:b1:e5:1c:39:d3:36:a4:ab:
b8:0f:da:e0:e1:6b:69:18:28:e4:af:c4:6d:98:ba:
23:ac:cb:4a:69:de:84:53:43:0f:68:57:27:1c:69:
94:9c:50:4b:65:b6:75:ec:18:56:eb:52:6c:bc:6b:
f6:d5:be:d0:9b:49:43:c0:3c:bc:a2:8d:b4:3e:bf:
7b:32:1c:df:6f:cd:91:3b:ff:91:04:aa:1d:83:6d:
2d:c9:0e:2f:73:87:74:df:6a:13:ba:57:e6:8a:18:
d7:ee:bb:20:9b:12:8f:8f:cb:9c:ff:55:b4:6b:f9:
13:94:bd:63:4d:67:c8:02:d7:b6:4a:f0:38:1d:92:
14:e1:7f:08:65:27:b9:7c:a5:9a:81:e1:b6:ad:c1:
b5:79:16:35:1c:78:75:f6:89:0a:19:ec:c7:4c:9e:
c8:ec:35:b4:99:b3:89:db:3a:18:68:6d:a3:ec:ea:
0d:e6:24:ee:40:d3:ec:7b:fd:a6:dc:57:c5:e7:dd:
3b:ce:08:a1:30:a0:18:d1:10:c0:95:cb:b0:6a:25:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:B3:E1:83:E4:AD:7C:16:EF:F8:5F:28:FA:FD:3C:37:46:C3:11
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/vU6z4YPkrXwW7_hfKPr9PDdGwxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
46.36.97.0/24
89.37.0.0/20
89.43.0.0/20
91.209.183.0-91.209.184.255
91.209.186.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
10:3f:62:7f:54:d0:05:92:b0:b7:a4:92:ca:61:8a:9c:15:37:
b4:75:4b:07:54:bf:28:02:96:82:e0:61:d7:8f:0d:a8:69:6d:
3a:95:a1:a8:f9:b2:12:63:8f:9c:84:52:78:78:e7:38:38:bf:
8f:d3:be:df:41:19:9c:22:39:9b:c3:cd:34:3d:4b:37:8b:27:
e4:7b:e0:4e:ec:b7:cb:9b:99:53:4a:0e:49:80:ac:85:4e:77:
05:9e:dc:9d:01:2b:8f:92:28:4b:92:7d:e8:b4:dd:02:3c:85:
62:36:02:5c:2f:4d:37:6b:37:b8:86:cd:f9:7c:b8:10:c8:aa:
5c:33:be:e3:d3:2b:7d:20:e8:66:8c:64:98:66:48:88:1d:13:
5f:18:ca:87:33:fb:f3:56:13:4a:f8:15:6f:64:3d:94:8b:5b:
41:a9:27:9a:69:c3:2f:93:94:31:64:11:f8:fb:c9:d7:69:c8:
9e:06:88:86:b6:de:34:72:18:65:c7:05:28:49:1c:74:ac:55:
90:f0:c5:42:dc:98:f7:03:da:0a:df:14:e7:ae:ae:7b:46:91:
5d:92:33:c0:b3:35:c6:14:02:07:1f:50:a2:62:df:99:35:c5:
a3:3e:12:69:75:a1:67:00:7e:00:f4:33:f1:80:da:e0:f7:d7:
d9:b0:0c:6b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZV/Jg4rGKvpt5V/47MQvjnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjUwMzEwMDgyMjM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRlYjNlMTgzZTRhZDdjMTZlZmY4NWYyOGZhZmQzYzM3NDZjMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno3JE7EsMLSrt8HbTfj3RAqK4vZv
Csw4G9VaMDY97S44oqjKqGyLCTn06IkqU7R0UBwGseUcOdM2pKu4D9rg4WtpGCjk
r8RtmLojrMtKad6EU0MPaFcnHGmUnFBLZbZ17BhW61JsvGv21b7Qm0lDwDy8oo20
Pr97Mhzfb82RO/+RBKodg20tyQ4vc4d032oTulfmihjX7rsgmxKPj8uc/1W0a/kT
lL1jTWfIAte2SvA4HZIU4X8IZSe5fKWageG2rcG1eRY1HHh19okKGezHTJ7I7DW0
mbOJ2zoYaG2j7OoN5iTuQNPse/2m3FfF5907zgihMKAY0RDAlcuwaiWGpQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFL1Os+GD5K18Fu/4Xyj6/Tw3RsMRMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvdlU2ejRZUGtyWHdXN19oZktQcjlQRGRHd3hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTCBkwQCAAEwgYwDBAYF
yYADBAQlnBADBAAuJGEDBARZJQADBARZKwAwDAMEAFvRtwMEAFvRuAMEAFvRugME
BFxyEAMEBF5lgAMEAGdvRQMEAGdvRwMEAWeE5AMEAWeMgAMEAbkWHgMEArlnVAME
ArmH5AMEArmIZAMEArmiKAMEArmvTAMEArmwIAMEArm23AMEBLzVQDANBAIAAjAH
AwUDKgBcoDANBgkqhkiG9w0BAQsFAAOCAQEAED9if1TQBZKwt6SSymGKnBU3tHVL
B1S/KAKWguBh148NqGltOpWhqPmyEmOPnIRSeHjnODi/j9O+30EZnCI5m8PNND1L
N4sn5HvgTuy3y5uZU0oOSYCshU53BZ7cnQErj5IoS5J96LTdAjyFYjYCXC9NN2s3
uIbN+Xy4EMiqXDO+49MrfSDoZoxkmGZIiB0TXxjKhzP781YTSvgVb2Q9lItbQakn
mmnDL5OUMWQR+PvJ12nIngaIhrbeNHIYZccFKEkcdKxVkPDFQtyY9wPaCt8U566u
e0aRXZIzwLM1xhQCBx9QomLfmTXFoz4SaXWhZwB+APQz8YDa4PfX2bAMaw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 15:00:43 2025 by rpki-client