Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yWzvKh0pZ3p2QE4my4qK2miTvSU.roa
File: yWzvKh0pZ3p2QE4my4qK2miTvSU.roa (raw, json)
Hash identifier: MhNIhd9Ssl9fTlAFJNfaQJ9OOzhQARWmsuunVRcRKjg=
Subject key identifier: C9:6C:EF:2A:1D:29:67:7A:76:40:4E:26:CB:8A:8A:DA:68:93:BD:25
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0193B21D3CA518B20C73F24027D3A2E16D06
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yWzvKh0pZ3p2QE4my4qK2miTvSU.roa
Signing time: Tue 10 Dec 2024 19:48:00 +0000
ROA not before: Tue 10 Dec 2024 19:48:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Dec 2024 12:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:1d:3c:a5:18:b2:0c:73:f2:40:27:d3:a2:e1:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Dec 10 19:48:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c96cef2a1d29677a76404e26cb8a8ada6893bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:0d:e9:98:3b:5d:41:81:04:dc:5b:b7:0d:
a8:a3:70:03:07:bf:6e:c4:97:95:0d:7a:0a:b1:3c:
2d:24:3b:64:2c:ae:c1:52:7a:7e:01:74:d5:12:7d:
91:1c:93:ac:c1:7f:e3:2a:da:03:bc:d5:2f:be:af:
d9:a7:12:41:a6:d6:23:b1:7c:8b:d9:6b:8c:0e:76:
1c:83:2d:9c:ae:5d:17:15:75:37:f4:78:45:cc:04:
0d:ec:f1:34:dd:98:b5:80:7a:a8:ab:d8:e8:e1:c5:
5b:9c:d0:28:61:dc:67:c0:e2:92:5f:1b:07:d8:ad:
3d:03:74:ab:ef:a2:5c:6d:e3:14:90:e5:ee:a6:16:
24:3c:c6:d4:04:ea:07:d8:13:c2:a0:6e:30:dd:fe:
0b:98:50:7e:3c:c7:7f:88:d8:af:74:1e:cc:70:41:
cb:c5:5a:99:82:b6:c8:ac:b6:80:46:11:44:29:80:
1e:78:3b:6a:0f:1b:74:42:d0:9a:c9:5b:9f:5c:7f:
77:a4:cd:46:00:62:ce:2e:03:38:e7:0a:6c:9f:67:
a9:1c:45:b8:1c:1b:12:dc:49:e8:41:04:b8:30:de:
c6:92:f0:fb:d5:31:e3:fb:6b:40:ea:a3:4c:57:6e:
07:0f:40:9f:e8:b3:3f:66:0c:6d:55:a3:22:52:9d:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:EF:2A:1D:29:67:7A:76:40:4E:26:CB:8A:8A:DA:68:93:BD:25
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yWzvKh0pZ3p2QE4my4qK2miTvSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/21
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:f9:ca:67:e8:78:68:f5:5f:2c:c6:36:f5:eb:d1:8e:25:5d:
78:af:e9:32:0c:a6:61:30:07:61:7d:67:2e:6d:06:52:35:6f:
ce:11:44:2c:85:98:da:58:3e:74:b4:e1:11:ad:46:5f:21:72:
6c:35:17:b4:43:db:77:d4:ed:0e:71:a1:15:69:c3:48:a6:e0:
f1:91:76:af:61:56:3b:36:28:11:bf:7c:fa:58:80:d6:f0:57:
d6:98:76:d1:5c:21:91:f3:50:8c:53:2a:c1:aa:36:d2:d6:da:
80:6b:9a:f1:4b:d1:13:c6:65:c7:3e:b6:12:ac:3d:fe:6e:02:
00:38:03:9f:b7:1e:c4:66:ce:46:79:58:40:b6:58:eb:d1:18:
2c:b1:09:7e:57:b2:c3:96:ef:0e:b5:dd:bb:f7:bb:0e:27:09:
c0:0b:c6:34:c3:86:f4:49:c9:36:f5:67:d0:6f:04:3e:92:7c:
ed:d1:0a:b1:f2:3a:fd:67:56:12:dd:7a:6b:24:73:3f:87:7b:
c7:e7:29:2a:26:62:13:9d:b8:7c:db:bd:cd:cf:eb:94:b4:6f:
9c:04:e6:b2:bd:46:4d:9e:c0:e7:79:bc:a7:0b:a5:18:ce:aa:
23:56:c7:52:44:21:25:11:a1:0b:25:b9:82:31:5a:31:37:03:
78:e2:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:25:31 2025 by rpki-client