Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/A_45Vj7tW_XULAtGHlaeREP-mNQ.roa
File: A_45Vj7tW_XULAtGHlaeREP-mNQ.roa (raw, json)
Hash identifier: m93PLurSJm9wwfsEURezLbKFeGdJPJhP+PF6I0bCVoM=
Subject key identifier: 03:FE:39:56:3E:ED:5B:F5:D4:2C:0B:46:1E:56:9E:44:43:FE:98:D4
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0194452FA964195427DDB54481A6C724897D
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/A_45Vj7tW_XULAtGHlaeREP-mNQ.roa
Signing time: Wed 08 Jan 2025 09:12:18 +0000
ROA not before: Wed 08 Jan 2025 09:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/44 maxlen: 44
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:1000::/40 maxlen: 40
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:2f:a9:64:19:54:27:dd:b5:44:81:a6:c7:24:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 8 09:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03fe39563eed5bf5d42c0b461e569e4443fe98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:e7:68:4d:26:f2:7b:ff:67:17:8c:f5:9e:
a4:97:04:88:83:f0:3c:63:47:95:06:64:1f:7e:8b:
2c:c1:1d:64:32:8d:52:53:2a:50:ec:5b:14:f4:f0:
e6:6d:c7:6d:38:6f:42:bc:d2:ed:3d:c6:c8:a6:69:
86:48:8b:45:a5:86:72:e9:ff:8a:a9:04:f4:23:95:
f7:ee:4f:e5:84:98:aa:23:c6:94:f6:89:1b:18:3c:
c7:c3:26:9c:c5:46:ac:1c:83:6c:30:f1:07:ea:4f:
58:be:fd:9e:0c:37:70:3c:76:e2:17:9a:ce:1e:6e:
68:e7:1a:7d:79:e7:93:f5:b2:28:cb:c8:f2:24:74:
a3:ab:20:49:93:c2:4f:74:37:e0:92:82:ab:91:0e:
78:a4:1c:66:69:01:7a:b5:cc:e7:f5:c2:04:40:b7:
4f:52:07:19:80:c9:55:e7:ab:54:a9:47:43:bb:ad:
6e:38:b4:d1:16:47:7f:94:ba:4e:c1:37:f7:20:48:
37:06:07:76:fe:14:14:bc:31:5a:f9:0a:46:ea:61:
6c:ff:90:2f:59:32:a5:cf:cc:d9:e3:80:57:df:69:
c2:d2:b5:90:fb:ee:fc:f7:59:08:fe:de:53:85:fd:
96:69:b8:6a:f8:01:92:5e:be:ee:a2:26:8d:33:78:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:39:56:3E:ED:5B:F5:D4:2C:0B:46:1E:56:9E:44:43:FE:98:D4
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/A_45Vj7tW_XULAtGHlaeREP-mNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:6c:76:f9:3a:90:1d:04:74:06:06:62:21:02:a6:c4:cc:9d:
f3:e0:d9:71:b2:67:d8:1e:81:a1:88:2a:e6:73:e4:d4:02:f6:
d0:a1:5d:2b:64:3a:f7:27:fd:29:b8:75:c5:9b:18:c7:04:f3:
b0:36:21:13:53:71:24:e5:a8:e0:1e:20:10:e6:08:7f:a0:60:
b7:06:e7:fb:12:8d:30:51:d6:02:fa:f9:d8:ed:60:56:83:e5:
b4:91:c6:d7:d0:98:78:b4:ca:b1:69:57:1b:d7:00:7e:6f:92:
b9:a0:fb:77:fe:58:04:f6:9d:11:25:ad:f4:8b:ee:62:2c:66:
a4:f0:f5:28:73:4a:14:18:a6:18:3e:08:81:9a:a4:7b:51:49:
a0:37:ae:3a:19:bc:3e:57:5e:df:3e:90:36:10:8f:22:ed:a6:
63:eb:95:01:fe:f6:8c:6b:86:a2:e0:f2:0f:53:81:5b:72:c2:
2b:89:d0:7f:85:32:eb:17:21:aa:db:58:4c:e7:89:01:45:a9:
2e:6e:05:26:3c:61:65:e0:68:27:69:07:56:01:3b:0e:44:74:
93:c4:4f:83:6c:f0:92:7c:03:66:66:29:b6:fe:2c:28:c6:d2:
64:32:df:c1:2e:ae:ea:c4:a7:5f:29:b9:29:f9:e5:71:41:0e:
1d:20:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:09:17 2025 by rpki-client