Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/M97-hCqw2Vx1eGdNwJtfSJAKIGA.roa
File: M97-hCqw2Vx1eGdNwJtfSJAKIGA.roa (raw, json)
Hash identifier: Y6gDlqV6TEZRb07Puz7AyZSTJ3gdQvxWlFRIW7wJ1u0=
Subject key identifier: 33:DE:FE:84:2A:B0:D9:5C:75:78:67:4D:C0:9B:5F:48:90:0A:20:60
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01942521B517B24EED408501FB66F0D87611
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/M97-hCqw2Vx1eGdNwJtfSJAKIGA.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Mar 2025 10:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b5:17:b2:4e:ed:40:85:01:fb:66:f0:d8:76:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33defe842ab0d95c7578674dc09b5f48900a2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:66:60:eb:c3:74:96:64:79:4e:ef:e6:15:
09:a3:39:b6:65:ea:66:2c:b1:c5:60:fb:29:7b:85:
4c:c0:98:88:92:62:65:e7:51:73:80:bb:17:c6:e5:
0f:f3:39:bb:22:5a:2d:0e:c1:8d:1d:bd:fc:c3:c0:
b8:69:7a:ea:ea:e8:a5:44:5a:aa:06:83:97:6e:11:
a1:76:52:ff:40:41:74:fa:ae:0f:3a:cb:53:51:38:
03:b0:1a:df:38:bc:f8:30:b8:f0:ef:7f:4e:d9:4a:
42:66:43:d7:df:4c:cc:4f:b1:f5:ea:6a:94:76:e3:
ed:43:97:0f:a4:43:07:63:d6:a8:ab:41:2a:f6:7d:
b0:9e:16:20:61:46:df:54:7b:f0:80:2f:f6:cd:51:
b4:66:1e:83:05:83:9f:fa:4a:1c:6b:c6:9f:32:ec:
7b:70:63:cb:ff:e1:8c:38:1c:3a:2b:ff:ae:78:35:
ea:c1:a5:e2:fb:d8:ca:91:16:6f:b8:9b:ea:89:90:
0e:05:8c:dc:fc:8e:37:e1:aa:ab:66:c5:78:d7:9f:
7f:b5:a6:f5:50:cf:63:8d:e5:d0:cc:a7:ab:86:f5:
b7:09:da:ea:25:27:30:00:ee:be:03:49:dc:a6:d3:
15:3b:29:9a:5b:b5:39:cd:4b:af:93:58:79:fe:de:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:FE:84:2A:B0:D9:5C:75:78:67:4D:C0:9B:5F:48:90:0A:20:60
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/M97-hCqw2Vx1eGdNwJtfSJAKIGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e7:69:28:67:69:35:40:be:e5:18:b3:a6:2e:f6:a3:cf:fc:
bf:dd:61:a8:c9:c3:ad:25:e7:59:85:85:f7:97:1d:02:5e:53:
4c:b6:6c:54:67:db:02:35:6a:0e:4a:a9:9f:65:a5:50:45:95:
b7:ee:e1:ab:e7:f5:c7:30:2e:20:8f:02:54:d3:18:24:0b:fd:
91:c2:ea:b4:4e:64:6b:75:7c:a1:1d:f0:b9:bb:72:10:cb:6f:
d1:76:e0:9f:7c:d7:0b:70:0c:c6:24:f3:de:ad:0a:cd:5d:26:
19:9c:23:72:70:05:fc:9c:d4:d1:b8:99:bf:e9:ea:dc:ea:ba:
f4:5b:f4:64:1e:3e:de:03:6f:ee:ff:be:62:48:e0:b3:3a:02:
2b:08:2d:8b:e3:fe:ed:aa:3a:92:66:dc:51:b3:68:6b:75:b7:
2f:e2:77:97:4c:70:db:b7:24:78:77:43:cf:11:f3:e0:6d:0e:
48:c8:a2:77:fe:51:79:fa:f1:cf:7c:f9:a6:33:53:6f:27:18:
12:3a:82:ad:cd:94:2b:9c:f2:9d:d0:53:ae:14:cb:71:52:90:
5e:23:14:38:4a:2b:66:25:6c:f9:eb:54:02:98:e3:a6:7f:d4:
d0:69:8e:52:75:2e:9e:ed:15:0d:f9:8e:6f:46:e5:39:92:e0:
54:b5:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:35:44 2025 by rpki-client