Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/rqZa8-YvvNJ99JR_WYzXjslhAgQ.roa
File: rqZa8-YvvNJ99JR_WYzXjslhAgQ.roa (raw, json)
Hash identifier: Z4n2jFh4CDAjZ3WpayCC3X9/6IxUKiiDMvFmhGkyKBQ=
Subject key identifier: AE:A6:5A:F3:E6:2F:BC:D2:7D:F4:94:7F:59:8C:D7:8E:C9:61:02:04
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C49412F61D1F7D063CC9FB3BCF852
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/rqZa8-YvvNJ99JR_WYzXjslhAgQ.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49100
IP address blocks: 5.202.0.0/16 maxlen: 24
5.202.16.0/23 maxlen: 23
5.202.22.0/23 maxlen: 23
5.202.57.0/24 maxlen: 24
5.202.76.0/24 maxlen: 24
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
5.202.166.0/23 maxlen: 23
5.202.208.0/20 maxlen: 20
5.202.240.0/21 maxlen: 21
77.237.160.0/19 maxlen: 19
85.9.64.0/18 maxlen: 18
85.9.68.0/24 maxlen: 24
85.9.76.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
109.125.160.0/19 maxlen: 19
109.125.160.0/23 maxlen: 23
109.125.162.0/23 maxlen: 23
109.125.164.0/23 maxlen: 23
109.125.168.0/21 maxlen: 21
109.125.176.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.184.0/22 maxlen: 22
109.125.187.0/24 maxlen: 24
109.125.188.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
109.125.191.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
109.232.7.0/24 maxlen: 24
185.72.24.0/22 maxlen: 22
185.72.27.0/24 maxlen: 24
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
185.103.128.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
185.126.40.0/22 maxlen: 22
185.131.28.0/22 maxlen: 22
185.131.30.0/23 maxlen: 23
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
185.177.232.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
188.253.32.0/19 maxlen: 24
188.253.64.0/19 maxlen: 24
193.32.80.0/23 maxlen: 23
194.33.122.0/23 maxlen: 23
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:41:2f:61:d1:f7:d0:63:cc:9f:b3:bc:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea65af3e62fbcd27df4947f598cd78ec9610204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:96:44:58:42:e2:a0:a2:9d:26:d6:7c:10:
c9:68:fc:19:9c:05:ce:d0:c0:25:15:0a:a6:9f:32:
82:f6:0e:1b:0c:d1:e7:71:18:d0:ec:c6:d7:82:a6:
66:ae:5e:53:5d:f0:40:e3:e2:74:d2:3f:45:b4:ff:
25:3f:8e:e2:1b:f1:fc:ff:88:1c:db:37:8f:33:98:
5f:d7:4c:1c:d2:48:04:71:ea:80:ff:bd:bc:88:0e:
2b:41:d6:bf:aa:c6:c4:de:18:f5:d1:0c:33:84:c2:
b6:2e:32:17:30:77:bc:e7:0c:14:3a:bd:38:60:40:
90:4e:ba:08:c0:1b:34:36:4a:96:80:41:f9:53:65:
49:08:3c:c1:28:4b:e0:4d:b2:ad:d9:d0:61:78:68:
a3:7d:52:bf:b7:4b:d4:b7:17:55:5d:7d:17:b6:fa:
2e:c8:a0:fa:58:f3:16:03:64:51:18:0a:6c:c0:c7:
30:3c:db:65:ac:cd:95:d4:44:af:71:39:36:07:b6:
de:59:a1:df:ce:89:f4:59:ab:a0:71:72:11:2b:b4:
11:7b:5f:79:01:91:40:3e:79:63:fa:b0:33:98:b3:
2d:0f:5b:01:a8:67:e3:76:0a:b5:91:83:78:6d:f4:
02:10:aa:f4:3f:42:ab:f4:4e:3e:60:53:47:c2:03:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:5A:F3:E6:2F:BC:D2:7D:F4:94:7F:59:8C:D7:8E:C9:61:02:04
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/rqZa8-YvvNJ99JR_WYzXjslhAgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
25:1d:ef:eb:cf:b0:74:16:c7:78:30:ff:74:81:d5:68:f0:d5:
6c:35:94:dd:64:05:42:11:92:7d:e9:fc:9f:cc:b6:cc:19:08:
ca:85:da:7e:2b:3d:22:dc:66:5f:70:6f:6b:a7:d2:36:65:c7:
28:df:7d:e9:f2:07:41:ff:05:aa:72:1d:61:bf:87:de:bc:2d:
df:ac:82:20:05:3c:a3:60:ab:98:a6:7c:78:e8:c2:dd:ce:79:
42:8a:c5:b0:62:d2:d6:4e:75:81:b3:f1:92:9b:2d:94:a9:b2:
7f:63:24:7c:77:dd:bc:8f:f7:16:d3:8e:ec:f4:aa:f3:31:d2:
f7:6c:5d:d9:bd:fe:fa:ad:c1:a3:ca:22:d0:e6:ad:77:ec:e3:
71:2c:35:15:1e:1d:b9:ff:1e:2a:18:20:ef:d5:42:1d:01:66:
e0:5f:b5:f9:24:5d:9f:c7:a7:f8:2a:4d:4c:45:c3:91:ea:95:
71:95:00:61:ec:00:cd:d3:07:00:a5:4c:bc:1e:df:09:f1:6c:
8f:0b:d9:64:14:c5:26:cf:8b:7c:04:83:8d:ef:f3:fb:b5:18:
33:fa:54:e7:ee:c8:0a:ba:60:17:3c:0f:06:cb:90:e4:06:5a:
6b:9c:d8:79:9f:53:9a:0b:cf:78:f7:98:7e:36:3e:b8:fe:f2:
1e:32:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:51:52 2025 by rpki-client