Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/XMPW3brdFkPLXmHYMC_I6abwBnw.roa
File: XMPW3brdFkPLXmHYMC_I6abwBnw.roa (raw, json)
Hash identifier: CIj1YGchWf/0kE+F3RQCkan3ORejSmBfqpc93KDi5VQ=
Subject key identifier: 5C:C3:D6:DD:BA:DD:16:43:CB:5E:61:D8:30:2F:C8:E9:A6:F0:06:7C
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 0194258F6AFE8F8375A0B621A01674E8CAC9
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/XMPW3brdFkPLXmHYMC_I6abwBnw.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202196
IP address blocks: 5.57.20.0/23 maxlen: 23
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
37.10.1.0/24 maxlen: 24
37.10.10.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
37.10.24.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/23 maxlen: 23
37.10.44.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
91.195.236.0/24 maxlen: 24
2a01:5041::/32 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5041:2::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5041:2002::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5041:200c::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5041:4eff::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:7001::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5041:ea20::/48 maxlen: 48
2a01:5042::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5042:2000::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5043:7::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5043:2007::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:fe:8f:83:75:a0:b6:21:a0:16:74:e8:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc3d6ddbadd1643cb5e61d8302fc8e9a6f0067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:d2:1c:aa:86:2b:7a:4b:bf:f6:3b:8d:74:
8e:a2:5a:8e:82:0c:2d:b0:b0:9c:29:0c:3e:2c:f8:
52:04:68:ea:12:28:bb:b6:0e:b6:0f:80:17:e5:a9:
55:a1:72:1b:71:9f:08:40:ad:08:1d:e6:38:9b:86:
8f:9c:2e:c4:ee:08:21:3a:a9:4f:ca:f6:0a:47:24:
eb:23:b7:88:59:53:e2:c6:a1:93:a3:80:f7:40:bd:
cb:c2:08:7e:d3:15:68:4b:a4:c9:fd:02:ec:5d:54:
c8:04:62:d9:27:54:a7:34:6d:41:01:d5:6b:f5:ec:
0f:d6:01:61:2d:49:03:70:79:88:49:08:aa:66:3c:
9c:e6:35:1a:47:a6:64:8e:c1:9d:0b:6f:d5:91:1a:
5d:d8:65:84:c4:bd:bd:f7:9a:01:26:c3:fb:bb:34:
36:c9:b8:e9:49:2d:1c:9e:c0:0c:f9:91:74:9b:ff:
a2:8a:14:e6:1b:95:59:7a:a3:f2:39:18:1e:93:96:
5d:ef:fe:c9:aa:08:30:7f:58:37:26:ca:c9:33:34:
aa:61:9d:aa:35:44:b3:c6:f2:57:07:40:57:8e:b6:
0b:8a:e9:37:d5:45:3f:01:a3:2a:a5:25:a0:41:ce:
6d:16:07:ee:43:1d:07:c1:ee:3c:60:8a:5d:8b:cb:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C3:D6:DD:BA:DD:16:43:CB:5E:61:D8:30:2F:C8:E9:A6:F0:06:7C
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/XMPW3brdFkPLXmHYMC_I6abwBnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.10.0/24
37.10.24.0/21
37.10.40.0-37.10.46.255
91.195.236.0/24
IPv6:
2a01:5041::-2a01:5042:1:ffff:ffff:ffff:ffff:ffff
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2000::/47
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
89:34:72:0a:4f:e5:22:c0:1b:16:f8:bf:f1:c0:9e:44:37:96:
cf:a3:3f:d7:6d:3f:83:c8:02:0f:ce:64:f0:74:cc:4e:c6:8b:
45:6b:4e:cf:57:8a:53:4a:80:16:5b:4f:49:3b:50:7d:2e:65:
21:c4:d8:ff:b9:58:12:75:7d:c8:b1:10:20:a1:8f:88:5b:5f:
f9:6b:21:34:23:6f:48:0a:cd:35:37:2e:4a:08:2b:83:51:3b:
49:d6:2c:21:3a:a1:e5:53:b0:b5:ce:69:7b:63:b3:81:fa:33:
1a:9f:72:15:e0:24:ca:dc:82:98:be:71:9d:46:18:36:45:fa:
37:1e:9b:5d:e6:cf:4c:30:91:6e:31:5e:68:27:32:bb:4f:e7:
26:73:c0:91:6c:75:5f:35:39:ac:26:6f:f0:2d:dc:c0:b1:27:
b9:71:eb:bc:90:4a:41:1c:13:a3:c0:bb:09:01:c8:31:00:01:
55:dc:2e:17:c8:34:f5:28:6a:e4:02:94:e2:2b:b4:75:f5:c0:
85:a8:a6:b5:3e:fe:ef:51:23:92:13:e8:91:78:6d:58:99:1a:
59:6f:ce:8d:c8:d0:4f:c3:a7:f5:7d:69:ab:b4:b4:e0:3b:7b:
9d:a5:c7:a9:99:7e:99:a9:15:65:1b:f2:3a:11:31:13:c4:70:
fd:c8:38:f0
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAZQlj2r+j4N1oLYhoBZ06MrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk
MTk0NGYwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2MzZDZkZGJhZGQxNjQzY2I1ZTYxZDgzMDJmYzhlOWE2ZjAwNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0bSHKqGK3pLv/Y7jXSOolqOggwt
sLCcKQw+LPhSBGjqEii7tg62D4AX5alVoXIbcZ8IQK0IHeY4m4aPnC7E7gghOqlP
yvYKRyTrI7eIWVPixqGTo4D3QL3Lwgh+0xVoS6TJ/QLsXVTIBGLZJ1SnNG1BAdVr
9ewP1gFhLUkDcHmISQiqZjyc5jUaR6ZkjsGdC2/VkRpd2GWExL2995oBJsP7uzQ2
ybjpSS0cnsAM+ZF0m/+iihTmG5VZeqPyORgek5Zd7/7Jqggwf1g3JsrJMzSqYZ2q
NUSzxvJXB0BXjrYLiuk31UU/AaMqpSWgQc5tFgfuQx0Hwe48YIpdi8v7nQIDAQAB
o4IDMjCCAy4wHQYDVR0OBBYEFFzD1t263RZDy15h2DAvyOmm8AZ8MB8GA1UdIwQY
MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt
NzU4NTVkYjcxNTFmLzEvWE1QVzNicmRGa1BMWG1IWU1DX0k2YWJ3Qm53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm
LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTAyBAIAATAsAwQB
BTkUAwQAJQoBAwQAJQoKAwQDJQoYMAwDBAMlCigDBAAlCi4DBABbw+wwgfoEAgAC
MIHzMBADBQAqAVBBAwcBKgFQQgAAAwcAKgFQQgADAwcAKgFQQgAHAwcAKgFQQgAL
AwcAKgFQQgAOAwcAKgFQQg79AwcAKgFQQg7/AwcBKgFQQiAAAwcAKgFQQiADAwcA
KgFQQiAHAwcAKgFQQiALAwcAKgFQQiAOAwcAKgFQQi79AwcAKgFQQi7/AwcAKgFQ
QwAAAwcAKgFQQwADAwcAKgFQQwAHAwcAKgFQQwALAwcAKgFQQwAOAwcAKgFQQw79
AwcAKgFQQw7/AwcAKgFQQyAAAwcAKgFQQyADAwcAKgFQQyAHAwcAKgFQQy79AwcA
KgFQQy7/MA0GCSqGSIb3DQEBCwUAA4IBAQCJNHIKT+UiwBsW+L/xwJ5EN5bPoz/X
bT+DyAIPzmTwdMxOxotFa07PV4pTSoAWW09JO1B9LmUhxNj/uVgSdX3IsRAgoY+I
W1/5ayE0I29ICs01Ny5KCCuDUTtJ1iwhOqHlU7C1zml7Y7OB+jMan3IV4CTK3IKY
vnGdRhg2Rfo3Hptd5s9MMJFuMV5oJzK7T+cmc8CRbHVfNTmsJm/wLdzAsSe5ceu8
kEpBHBOjwLsJAcgxAAFV3C4XyDT1KGrkApTiK7R19cCFqKa1Pv7vUSOSE+iReG1Y
mRpZb86NyNBPw6f1fWmrtLTgO3udpcepmX6ZqRVlG/I6ETETxHD9yDjw
-----END CERTIFICATE-----
Generated at Tue Apr 15 04:33:34 2025 by rpki-client