Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/L_WXJvTQqUgr8plOuOusHDFGnRk.roa
File: L_WXJvTQqUgr8plOuOusHDFGnRk.roa (raw, json)
Hash identifier: imWt/yiEXRF4fkI/lhzHWWMhTs9rvwW94ATOTBlI/Rw=
Subject key identifier: 2F:F5:97:26:F4:D0:A9:48:2B:F2:99:4E:B8:EB:AC:1C:31:46:9D:19
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01942444F8D6A7ED2A2322C79847D0155D4A
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/L_WXJvTQqUgr8plOuOusHDFGnRk.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 02 Feb 2025 20:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f8:d6:a7:ed:2a:23:22:c7:98:47:d0:15:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff59726f4d0a9482bf2994eb8ebac1c31469d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:45:da:8b:c4:ff:7c:55:7d:47:41:14:b8:
8f:fa:f5:ef:5d:c3:50:46:25:3e:14:43:9b:30:45:
85:2e:26:55:aa:98:82:7a:41:41:32:31:15:ca:a5:
73:16:0d:ca:e5:d3:d7:32:3e:49:a3:5a:33:7d:58:
22:9d:c6:c1:31:f3:ca:f9:cb:4b:5e:4b:db:24:86:
f3:51:a0:24:80:ed:d4:86:c7:43:21:94:3c:d4:2a:
81:e7:33:b6:98:55:31:54:32:f4:f4:ec:01:78:88:
e3:8c:0a:ed:b2:71:1b:77:2d:57:7a:fe:07:70:b0:
4f:8e:85:b6:d7:05:cc:60:7e:0f:b8:29:e7:59:15:
4a:e2:7b:f3:58:7b:3f:32:72:d3:17:59:36:15:f5:
c0:d7:98:2b:2b:5f:65:12:1e:fc:5f:c9:76:19:aa:
b0:bc:76:b4:74:14:76:15:b8:69:59:c4:8f:a4:1a:
53:a9:98:02:9a:3a:9f:d4:5f:16:87:a9:92:34:18:
e8:17:d6:5c:37:0b:c6:fb:54:a3:fa:5d:84:95:45:
9d:bd:a4:2c:89:c7:22:e0:e7:16:c4:c3:2c:71:78:
17:36:cf:55:4a:7c:a8:b5:2e:43:fc:76:58:92:ca:
5a:d3:37:38:61:0a:a1:c0:cd:cf:07:15:7b:be:b0:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:97:26:F4:D0:A9:48:2B:F2:99:4E:B8:EB:AC:1C:31:46:9D:19
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/L_WXJvTQqUgr8plOuOusHDFGnRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
81:22:1b:e2:78:9b:e4:ea:e4:36:93:39:25:5c:58:bf:79:77:
18:23:6c:0b:24:21:79:64:9f:e1:00:88:e0:87:41:11:58:d8:
54:1f:bd:c3:55:b0:8b:0d:9a:77:41:04:22:be:79:2a:14:9a:
12:1a:06:e5:93:58:42:ab:a5:86:4f:f6:4c:d2:20:8e:61:58:
e0:96:13:66:26:0c:1c:a4:9c:4b:63:0d:f8:66:61:fb:85:97:
69:23:04:43:ac:e6:d9:14:e2:b9:da:12:52:b1:f4:b3:94:60:
aa:ac:14:73:33:38:39:d1:ce:5d:bb:9c:06:30:66:13:2a:9c:
73:d0:59:f6:ed:28:45:04:6c:7a:b5:bd:98:b5:ec:eb:5e:0a:
be:2f:3f:b7:eb:7b:38:8d:87:d7:02:75:b7:ea:de:a5:2b:4e:
7e:6e:9c:59:40:31:62:92:ea:d0:d7:ea:43:f1:5c:9e:ed:4c:
1e:4e:9d:40:31:c2:0c:e4:45:c4:38:78:ec:26:3b:66:e8:55:
8a:c9:56:60:ec:5e:77:08:13:a3:42:2e:c5:8e:80:77:d8:a4:
3d:38:45:41:f4:65:2f:93:74:34:8c:3b:ca:c4:a3:9d:cc:ae:
d9:6f:e0:94:96:c7:dc:ef:78:6f:c3:db:bb:6e:0f:82:5b:ed:
34:49:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:42 2025 by rpki-client