Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/O1hmTVp7FV6aj7Ymkel6HpJhs8Q.roa
File: O1hmTVp7FV6aj7Ymkel6HpJhs8Q.roa (raw, json)
Hash identifier: eT9z0fO8W4+gz8Rg3DxLSpKEziMb4aToIO+pGGvNR0c=
Subject key identifier: 3B:58:66:4D:5A:7B:15:5E:9A:8F:B6:26:91:E9:7A:1E:92:61:B3:C4
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018FA1FFBD9D9816BC4EEEE60B0082DBDDCB
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/O1hmTVp7FV6aj7Ymkel6HpJhs8Q.roa
Signing time: Wed 22 May 2024 20:30:42 +0000
ROA not before: Wed 22 May 2024 20:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:ff:bd:9d:98:16:bc:4e:ee:e6:0b:00:82:db:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: May 22 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b58664d5a7b155e9a8fb62691e97a1e9261b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:d7:8c:4d:23:90:4a:59:89:a8:64:51:18:
8a:6b:b2:8e:7b:8e:75:40:cc:e9:21:a5:05:69:7b:
8f:fb:58:2d:ee:4d:f2:ec:3e:33:6d:b8:82:d2:f8:
7e:7d:32:96:f2:cd:ae:6f:57:72:92:c5:4a:43:06:
6d:3e:9a:9d:39:30:6b:d9:56:32:37:e5:c3:bd:9b:
60:d3:96:4b:35:2a:9f:03:aa:64:b2:67:e8:f2:cc:
ff:b5:fb:12:40:f3:8c:bb:02:ed:f6:98:97:db:63:
2e:47:cd:4c:54:9d:55:c1:44:4a:e0:9e:e8:81:b8:
5c:c7:43:cd:ff:80:d1:fe:76:06:58:5c:b5:44:8b:
b1:72:a4:bd:d0:96:7f:b5:e9:80:09:0f:30:13:48:
0d:ec:5f:86:ce:13:e4:42:99:68:73:33:c2:47:2c:
6f:57:93:93:8c:30:8c:a2:71:57:fa:32:ca:46:f8:
15:32:98:c7:34:c3:c0:ca:55:ea:f3:1c:e0:40:d9:
7d:14:01:d8:d5:ad:ed:03:e1:bb:07:96:1b:c2:62:
53:bb:05:96:19:8d:7e:e3:17:4b:d3:15:6d:5a:07:
2d:fb:3e:5b:d0:1a:a0:52:1f:78:31:65:c5:3b:9e:
39:0d:26:49:f5:38:e9:2c:13:2b:f6:9c:0e:92:6b:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:66:4D:5A:7B:15:5E:9A:8F:B6:26:91:E9:7A:1E:92:61:B3:C4
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/O1hmTVp7FV6aj7Ymkel6HpJhs8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.111.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:06:b5:7f:66:b4:59:b6:d8:5e:11:b1:41:b6:71:e1:f0:06:
f6:40:2d:93:14:12:6f:1b:07:83:44:89:e2:02:64:a6:52:96:
a0:53:88:f4:59:a2:1f:1e:7d:37:b8:c5:70:e3:ff:58:c7:f8:
8c:8d:5d:9e:b9:0c:07:84:7c:a0:5e:91:78:1b:32:08:84:08:
b1:39:be:43:03:79:75:27:7a:87:4e:9e:39:bf:15:16:a4:9b:
99:2b:d2:07:31:b3:3f:cd:f5:31:0f:d5:94:0e:cc:1d:66:64:
53:01:82:97:aa:35:ac:a0:19:d2:dc:47:22:5b:a1:33:01:e2:
b2:31:23:f0:fc:3d:c3:a8:0b:41:0f:52:5d:11:48:18:19:90:
ec:11:db:af:95:98:a7:51:9d:bb:96:79:8e:e9:ef:82:97:45:
36:08:d1:f3:9d:ae:5e:b3:af:39:6d:92:df:16:19:04:f6:0e:
73:9a:eb:b1:6e:cd:07:aa:79:1e:42:3f:5f:4e:48:d3:19:7d:
ea:4b:d8:fe:9b:db:c5:96:32:0c:e3:54:c4:69:80:97:55:8a:
5c:4c:43:4b:77:c3:df:10:22:7b:72:e3:c8:03:84:e0:95:6b:
2f:5b:df:47:d2:da:4f:5e:52:29:7a:5a:11:92:89:ea:61:78:
78:dc:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:42 2025 by rpki-client