Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Q36f12hw9-U2Pj7nxh5vZDafDlw.roa
File: Q36f12hw9-U2Pj7nxh5vZDafDlw.roa (raw, json)
Hash identifier: g94rxx+Ee/J0c6ur1dt+Ai6E0GVohPW3ZKGe/uamgx4=
Subject key identifier: 43:7E:9F:D7:68:70:F7:E5:36:3E:3E:E7:C6:1E:6F:64:36:9F:0E:5C
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0193C941F22BF25280941F0D1F90F4BF1887
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Q36f12hw9-U2Pj7nxh5vZDafDlw.roa
Signing time: Sun 15 Dec 2024 07:39:22 +0000
ROA not before: Sun 15 Dec 2024 07:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/44 maxlen: 44
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c9:41:f2:2b:f2:52:80:94:1f:0d:1f:90:f4:bf:18:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Dec 15 07:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=437e9fd76870f7e5363e3ee7c61e6f64369f0e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:6b:5b:81:ab:d3:44:6f:37:7a:80:20:46:
cb:4f:b9:9c:e3:ca:83:bc:52:e9:a2:ce:60:35:65:
57:88:12:19:bd:09:d2:c0:44:ea:7f:03:03:d2:62:
35:18:68:c5:55:33:3a:c8:9a:f3:26:22:f0:3b:d1:
06:ac:3c:fb:ac:2b:6d:0b:d4:7d:ac:9c:d3:04:5c:
49:88:e2:cb:1c:23:70:f8:76:48:c4:3c:7a:7d:3f:
3c:13:51:17:79:a0:69:a8:75:1e:a3:55:d5:72:aa:
f4:ca:27:de:bc:4b:88:96:1e:7e:cd:1d:15:69:e9:
47:27:32:dd:6f:00:0c:a8:5a:62:47:c1:e4:84:eb:
40:92:54:33:27:76:7a:cf:2a:da:39:15:2f:c4:60:
de:ee:49:66:da:9b:96:01:04:df:aa:56:c9:bc:94:
b4:d9:45:d9:73:97:a4:52:ac:c9:2a:b9:cd:df:e5:
ee:28:4c:e7:6a:74:76:fb:56:80:96:61:6f:6e:10:
88:49:f6:33:4f:f2:49:6d:b1:37:af:67:c7:68:a3:
3d:b3:26:d0:9c:c4:74:d8:a3:a3:bf:4b:62:99:6e:
3c:9d:c7:7c:39:63:3d:93:da:49:b5:3b:bb:75:58:
10:69:85:ef:af:3a:c9:74:22:7a:07:d4:e0:f5:78:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:9F:D7:68:70:F7:E5:36:3E:3E:E7:C6:1E:6F:64:36:9F:0E:5C
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Q36f12hw9-U2Pj7nxh5vZDafDlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
6a:28:cc:9e:3b:14:96:5f:ba:d5:82:95:a8:99:f0:1e:2f:80:
d4:98:d1:2c:ea:5f:9c:52:b2:69:2d:9d:ca:47:a0:3f:81:16:
7f:36:05:d9:a3:4c:33:a0:68:ef:97:ec:20:03:42:58:e2:7b:
94:be:43:fc:f2:de:33:43:47:a5:fe:79:a9:a0:6d:4f:d4:0a:
31:c3:f0:15:1e:57:9a:e2:57:3d:01:75:46:80:3c:97:0d:7b:
9d:64:06:7a:ef:55:bb:6d:19:9a:fe:5a:fe:06:2f:46:f7:71:
a8:35:34:52:3b:80:27:0d:da:de:35:a1:51:e9:6e:d4:93:1b:
d5:c1:d6:6a:be:f4:47:35:ef:34:59:f4:fb:a3:af:34:bf:c6:
1c:0a:c5:57:e0:34:63:b6:50:0e:cc:d2:0a:b4:46:2b:cb:74:
2a:4a:4e:bd:17:90:65:d9:56:33:32:66:56:c6:af:b0:e2:e0:
88:36:5e:6f:b2:7c:1c:a3:a9:f4:83:b4:3e:85:b3:ea:0f:c0:
7e:1a:a2:9b:49:11:08:65:1b:f6:42:74:1b:9e:1e:bc:5a:f6:
25:20:0c:91:59:36:36:2b:d6:ca:43:4d:64:65:05:4c:ff:37:
8c:36:d0:bb:71:62:e3:4a:03:77:b1:36:49:11:51:e1:15:0c:
c3:52:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:52 2025 by rpki-client