Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LtEdF2byV3S0KV16id0qQajWGMY.roa
File: LtEdF2byV3S0KV16id0qQajWGMY.roa (raw, json)
Hash identifier: H1jt9hYwyd1BT6+zQNRmdfqdpllU7bgVglwLAp5kPr8=
Subject key identifier: 2E:D1:1D:17:66:F2:57:74:B4:29:5D:7A:89:DD:2A:41:A8:D6:18:C6
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0194923D6CD08660D8E925B339EA81B05254
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LtEdF2byV3S0KV16id0qQajWGMY.roa
Signing time: Thu 23 Jan 2025 08:18:06 +0000
ROA not before: Thu 23 Jan 2025 08:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/47 maxlen: 47
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/47 maxlen: 47
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/44 maxlen: 44
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:30::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/45 maxlen: 45
2a04:7f80:58::/45 maxlen: 45
2a04:7f80:60::/44 maxlen: 44
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:1000::/40 maxlen: 40
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 12 Feb 2025 10:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:3d:6c:d0:86:60:d8:e9:25:b3:39:ea:81:b0:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 23 08:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ed11d1766f25774b4295d7a89dd2a41a8d618c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:6b:ca:17:85:7c:81:fb:d0:90:04:d4:4d:
ad:62:f6:a1:5e:09:aa:82:97:5c:74:a8:a4:68:25:
db:f9:f0:a1:0f:b8:6b:84:a7:4b:bf:f1:38:31:ec:
2d:42:91:0c:6d:b1:0b:94:a6:7f:60:ab:fe:26:e6:
e2:90:e7:20:72:c6:ce:71:8a:75:92:7c:37:70:f0:
80:5e:b8:27:46:47:ca:b5:7f:c0:a8:79:61:51:0a:
8f:5d:39:a3:07:7b:d7:93:3d:43:40:fa:29:9f:cc:
e3:e5:99:c4:1c:33:43:2c:09:6d:6a:d8:17:04:14:
c7:85:d7:a9:4d:3c:4b:75:b1:da:73:1e:76:19:63:
51:ad:23:7f:6d:7f:7e:38:65:1c:e8:7f:8e:4f:6c:
96:a4:5d:54:a4:44:9b:9e:1e:bd:cd:e7:77:49:05:
bf:6c:1d:a1:c1:2d:70:0f:65:e4:4a:cd:1f:6a:75:
cc:46:8d:9c:4d:e0:9d:03:de:c6:c5:66:c4:34:1c:
a1:30:8e:de:6a:af:6b:b7:18:c3:be:d0:ac:e7:4d:
13:39:de:81:b1:cd:f9:ca:5d:26:58:19:72:0c:35:
96:45:05:c3:e1:bf:32:aa:88:38:bc:81:a3:a5:7c:
6b:82:ff:3a:9f:54:2b:1f:8c:14:c5:4f:9c:80:9f:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:1D:17:66:F2:57:74:B4:29:5D:7A:89:DD:2A:41:A8:D6:18:C6
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LtEdF2byV3S0KV16id0qQajWGMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/24
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
66:52:28:3f:dc:50:59:c1:ea:98:16:a6:d0:5a:8f:49:b8:d0:
d6:94:84:14:b6:5e:7a:79:4e:db:53:e9:8d:95:ad:19:80:de:
e9:ac:b9:e9:a7:9b:9c:a8:db:d9:69:e9:46:f4:2a:51:c3:47:
28:37:85:5b:6e:f7:b0:f8:e7:a9:db:09:c7:0a:a6:9a:c9:4c:
95:ac:d9:25:ae:52:48:ff:6c:c6:31:0c:31:a2:44:03:7d:70:
29:54:8d:6d:90:32:56:17:20:b8:8f:22:a4:e2:93:1b:e1:fc:
52:4b:e7:70:38:c4:9d:ac:be:fc:c3:43:74:16:86:b0:ba:2b:
f4:0f:96:48:d8:fb:a7:65:e4:c0:68:e6:f5:97:1d:82:3e:83:
96:2f:eb:c4:6c:29:66:cd:41:7b:9c:bc:b2:1a:3e:4a:5b:f5:
e8:4c:bd:23:de:81:a4:3c:80:6c:a5:c7:84:b6:15:08:0e:fc:
b1:c6:90:83:a4:3c:bf:bd:e6:0b:66:ba:93:41:aa:f6:75:92:
6c:31:90:3a:b4:b4:c7:83:d8:26:fa:04:76:93:30:3d:5f:a0:
85:3c:e6:f9:84:37:fa:cd:58:c7:28:34:ab:2d:0e:2c:02:23:
49:37:12:a8:ff:6d:e7:f1:b7:5f:96:af:86:c0:9a:eb:11:63:
99:6b:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:07 2025 by rpki-client