Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/I5TlAFvNwBAt2ovcSs0fsY1nRK4.roa
File: I5TlAFvNwBAt2ovcSs0fsY1nRK4.roa (raw, json)
Hash identifier: dsDaeIPal57XmlbvIpGRoRAqKURkpq6u0QCXDzTpUTs=
Subject key identifier: 23:94:E5:00:5B:CD:C0:10:2D:DA:8B:DC:4A:CD:1F:B1:8D:67:44:AE
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 0194EB1886240B0FE74C7E943B9FDB4DE832
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/I5TlAFvNwBAt2ovcSs0fsY1nRK4.roa
Signing time: Sun 09 Feb 2025 14:24:00 +0000
ROA not before: Sun 09 Feb 2025 14:24:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57218
IP address blocks: 5.62.192.0/18 maxlen: 18
5.62.192.0/19 maxlen: 19
5.62.224.0/19 maxlen: 19
5.72.0.0/16 maxlen: 16
5.72.0.0/19 maxlen: 19
5.72.32.0/19 maxlen: 19
5.72.64.0/19 maxlen: 19
5.72.96.0/19 maxlen: 19
5.72.128.0/19 maxlen: 19
5.72.160.0/19 maxlen: 19
5.72.192.0/19 maxlen: 19
5.72.224.0/19 maxlen: 19
5.73.0.0/16 maxlen: 16
5.73.0.0/19 maxlen: 19
5.73.32.0/19 maxlen: 19
5.73.64.0/19 maxlen: 19
5.73.96.0/19 maxlen: 19
5.73.128.0/19 maxlen: 19
5.73.160.0/19 maxlen: 19
5.73.192.0/19 maxlen: 19
5.73.224.0/19 maxlen: 19
5.134.128.0/18 maxlen: 18
5.134.128.0/20 maxlen: 22
5.134.128.0/22 maxlen: 22
5.134.132.0/22 maxlen: 22
5.134.136.0/22 maxlen: 22
5.134.140.0/22 maxlen: 22
5.134.144.0/20 maxlen: 22
5.134.144.0/22 maxlen: 22
5.134.148.0/22 maxlen: 22
5.134.152.0/22 maxlen: 22
5.134.156.0/22 maxlen: 22
5.134.160.0/20 maxlen: 20
5.134.160.0/22 maxlen: 22
5.134.164.0/22 maxlen: 22
5.134.168.0/22 maxlen: 22
5.134.172.0/22 maxlen: 22
5.134.176.0/20 maxlen: 20
5.134.176.0/22 maxlen: 22
5.134.180.0/22 maxlen: 22
5.134.184.0/22 maxlen: 22
5.134.191.0/24 maxlen: 24
5.200.96.0/19 maxlen: 19
5.200.96.0/20 maxlen: 20
5.200.112.0/20 maxlen: 20
37.44.56.0/21 maxlen: 21
37.44.56.0/22 maxlen: 22
37.44.60.0/22 maxlen: 22
37.137.0.0/17 maxlen: 21
37.137.0.0/18 maxlen: 21
37.137.0.0/19 maxlen: 19
37.137.32.0/22 maxlen: 22
37.137.36.0/24 maxlen: 24
37.137.38.0/23 maxlen: 23
37.137.40.0/21 maxlen: 21
37.137.48.0/20 maxlen: 20
37.137.64.0/18 maxlen: 18
37.137.128.0/17 maxlen: 17
37.137.128.0/18 maxlen: 18
37.137.192.0/18 maxlen: 18
37.153.176.0/20 maxlen: 20
37.153.176.0/21 maxlen: 21
37.153.184.0/21 maxlen: 21
37.156.48.0/20 maxlen: 20
37.156.48.0/21 maxlen: 21
37.156.56.0/21 maxlen: 21
37.156.152.0/21 maxlen: 21
37.156.152.0/22 maxlen: 22
37.156.156.0/22 maxlen: 22
77.81.192.0/19 maxlen: 19
77.81.192.0/20 maxlen: 20
77.81.208.0/20 maxlen: 20
89.32.0.0/19 maxlen: 19
89.32.0.0/20 maxlen: 20
89.32.16.0/20 maxlen: 20
89.32.96.0/20 maxlen: 20
89.32.96.0/21 maxlen: 21
89.32.104.0/21 maxlen: 21
89.34.32.0/19 maxlen: 19
89.34.32.0/20 maxlen: 20
89.34.32.0/23 maxlen: 23
89.34.32.0/24 maxlen: 24
89.34.33.0/24 maxlen: 24
89.34.48.0/20 maxlen: 20
89.34.128.0/19 maxlen: 19
89.34.128.0/20 maxlen: 20
89.34.144.0/20 maxlen: 20
89.41.192.0/19 maxlen: 19
89.41.192.0/20 maxlen: 20
89.41.208.0/20 maxlen: 20
89.47.64.0/20 maxlen: 20
89.47.64.0/21 maxlen: 21
89.47.72.0/21 maxlen: 21
89.47.128.0/19 maxlen: 19
89.47.128.0/20 maxlen: 20
89.47.144.0/20 maxlen: 20
91.229.214.0/23 maxlen: 24
91.229.214.0/24 maxlen: 24
91.229.215.0/24 maxlen: 24
92.114.64.0/20 maxlen: 20
92.114.64.0/21 maxlen: 21
92.114.72.0/21 maxlen: 21
93.114.16.0/20 maxlen: 20
93.114.16.0/21 maxlen: 21
93.114.24.0/21 maxlen: 21
94.24.0.0/20 maxlen: 20
94.24.0.0/21 maxlen: 21
94.24.8.0/21 maxlen: 21
94.24.16.0/21 maxlen: 21
94.24.16.0/22 maxlen: 22
94.24.20.0/22 maxlen: 22
94.24.80.0/20 maxlen: 20
94.24.80.0/21 maxlen: 21
94.24.88.0/21 maxlen: 21
94.24.96.0/21 maxlen: 21
94.24.96.0/22 maxlen: 22
94.24.100.0/22 maxlen: 22
95.162.0.0/16 maxlen: 17
95.162.0.0/17 maxlen: 17
95.162.0.0/19 maxlen: 19
95.162.0.0/20 maxlen: 20
95.162.16.0/20 maxlen: 20
95.162.32.0/19 maxlen: 19
95.162.32.0/20 maxlen: 20
95.162.48.0/20 maxlen: 20
95.162.64.0/19 maxlen: 19
95.162.64.0/20 maxlen: 20
95.162.80.0/20 maxlen: 20
95.162.96.0/19 maxlen: 19
95.162.96.0/20 maxlen: 20
95.162.112.0/20 maxlen: 20
95.162.128.0/17 maxlen: 17
95.162.128.0/19 maxlen: 21
95.162.128.0/20 maxlen: 21
95.162.128.0/21 maxlen: 21
95.162.144.0/20 maxlen: 21
95.162.152.0/21 maxlen: 21
95.162.160.0/19 maxlen: 21
95.162.160.0/20 maxlen: 21
95.162.160.0/21 maxlen: 21
95.162.168.0/21 maxlen: 21
95.162.176.0/20 maxlen: 21
95.162.176.0/21 maxlen: 21
95.162.192.0/19 maxlen: 19
95.162.192.0/20 maxlen: 20
95.162.208.0/20 maxlen: 20
95.162.224.0/19 maxlen: 24
95.162.224.0/20 maxlen: 20
95.162.224.0/22 maxlen: 22
95.162.228.0/22 maxlen: 22
95.162.232.0/22 maxlen: 22
95.162.236.0/22 maxlen: 22
95.162.240.0/20 maxlen: 20
95.162.248.0/24 maxlen: 24
185.24.136.0/23 maxlen: 23
185.24.136.0/24 maxlen: 24
185.24.137.0/24 maxlen: 24
185.24.228.0/22 maxlen: 22
185.24.228.0/23 maxlen: 23
185.24.230.0/23 maxlen: 23
188.208.64.0/19 maxlen: 19
188.208.64.0/20 maxlen: 20
188.208.80.0/20 maxlen: 20
188.208.144.0/20 maxlen: 20
188.208.144.0/21 maxlen: 21
188.208.152.0/21 maxlen: 21
188.208.156.0/24 maxlen: 24
188.208.160.0/19 maxlen: 19
188.208.160.0/20 maxlen: 20
188.208.176.0/20 maxlen: 20
188.208.224.0/19 maxlen: 19
188.208.224.0/20 maxlen: 20
188.208.240.0/20 maxlen: 20
188.208.243.0/24 maxlen: 24
188.214.4.0/22 maxlen: 22
188.214.4.0/23 maxlen: 23
188.214.6.0/23 maxlen: 23
188.214.84.0/22 maxlen: 22
188.214.84.0/23 maxlen: 23
188.214.86.0/23 maxlen: 23
188.215.24.0/22 maxlen: 22
188.215.24.0/23 maxlen: 23
188.215.26.0/23 maxlen: 23
188.215.88.0/22 maxlen: 22
188.215.88.0/23 maxlen: 23
188.215.90.0/23 maxlen: 23
213.195.32.0/20 maxlen: 20
213.195.32.0/21 maxlen: 21
213.195.40.0/21 maxlen: 21
213.195.48.0/22 maxlen: 22
213.195.48.0/23 maxlen: 23
213.195.50.0/23 maxlen: 23
2a03:ef40::/128 maxlen: 128
2a03:ef42::/34 maxlen: 34
2a03:ef42:4000::/34 maxlen: 34
2a03:ef42:8000::/34 maxlen: 34
2a03:ef42:c000::/34 maxlen: 34
2a03:ef42:c000::/128 maxlen: 128
2a03:ef42:c000::1/128 maxlen: 128
2a03:ef43::/34 maxlen: 34
2a03:ef43::/43 maxlen: 43
2a03:ef43:3::/48 maxlen: 48
2a03:ef43:3:8000::/49 maxlen: 49
2a03:ef43:c000::/48 maxlen: 48
2a03:ef44::/34 maxlen: 34
Validation: Failed, certificate revoked on Wed 26 Feb 2025 09:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:eb:18:86:24:0b:0f:e7:4c:7e:94:3b:9f:db:4d:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Feb 9 14:24:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2394e5005bcdc0102dda8bdc4acd1fb18d6744ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:fa:e4:04:f7:17:26:23:8f:67:66:ae:05:
61:c8:32:67:18:c4:06:d2:0a:b9:70:49:e3:63:ad:
01:f1:4e:28:f0:4f:4e:5c:75:8e:70:35:92:b6:ea:
b4:44:ec:28:2e:33:b3:53:92:9c:3c:ab:0b:21:56:
24:da:9f:fb:4d:64:a3:1f:2a:87:f5:15:ba:8c:cb:
10:3d:39:f9:8d:66:38:48:2f:4f:3b:4b:cf:e4:32:
41:db:fe:71:1d:bc:e4:24:07:4e:12:78:03:41:11:
d1:2a:bc:42:be:2c:bb:27:5c:ca:de:89:fc:b3:cb:
54:97:8f:a1:01:34:49:13:42:09:e8:ed:27:63:c7:
54:f9:80:89:1b:06:7e:d5:c7:fb:49:86:de:9f:61:
8c:42:fd:8a:fb:4c:44:a8:05:29:2b:c8:bc:0d:d8:
d4:10:8f:89:47:85:ed:13:7b:e0:db:8c:de:41:57:
5e:0e:be:04:a9:41:3c:11:ba:31:eb:56:75:08:2c:
53:d9:c1:3a:d5:59:a3:ac:83:e9:58:46:4e:91:51:
dd:a1:2f:fa:ee:35:f6:9a:43:e9:7d:d3:bd:84:1b:
67:94:e1:f0:0f:40:9c:11:f0:8a:9a:dc:eb:9c:ee:
93:ee:0d:00:2b:c0:d8:ee:7f:a5:61:58:cc:1f:99:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:E5:00:5B:CD:C0:10:2D:DA:8B:DC:4A:CD:1F:B1:8D:67:44:AE
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/I5TlAFvNwBAt2ovcSs0fsY1nRK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.192.0/18
5.72.0.0/15
5.134.128.0/18
5.200.96.0/19
37.44.56.0/21
37.137.0.0/16
37.153.176.0/20
37.156.48.0/20
37.156.152.0/21
77.81.192.0/19
89.32.0.0/19
89.32.96.0/20
89.34.32.0/19
89.34.128.0/19
89.41.192.0/19
89.47.64.0/20
89.47.128.0/19
91.229.214.0/23
92.114.64.0/20
93.114.16.0/20
94.24.0.0-94.24.23.255
94.24.80.0-94.24.103.255
95.162.0.0/16
185.24.136.0/23
185.24.228.0/22
188.208.64.0/19
188.208.144.0-188.208.191.255
188.208.224.0/19
188.214.4.0/22
188.214.84.0/22
188.215.24.0/22
188.215.88.0/22
213.195.32.0-213.195.51.255
IPv6:
2a03:ef40::/128
2a03:ef42::-2a03:ef43:3fff:ffff:ffff:ffff:ffff:ffff
2a03:ef43:c000::/48
2a03:ef44::/34
Signature Algorithm: sha256WithRSAEncryption
1d:32:1d:2d:fa:90:68:fd:81:ec:15:6f:01:a5:96:59:5c:78:
9e:88:0e:1c:50:ef:34:22:b7:8a:b8:89:c7:b7:f7:ca:38:8c:
b3:ee:e8:f3:fc:4f:cd:b9:ae:23:e0:ad:a5:4e:7e:c5:02:5d:
aa:0d:4f:0b:b3:f5:42:b3:4a:62:56:65:61:dd:be:ab:9c:26:
23:2d:85:63:05:75:9a:0a:4b:89:d9:c7:42:c3:3f:aa:f9:27:
85:b0:7b:88:e4:94:20:97:63:49:ab:9e:25:44:7e:0d:38:1e:
10:a8:5e:b6:5d:9e:69:e3:b4:e7:1d:59:75:9f:96:91:1b:e5:
77:9b:c7:a4:88:cc:0e:c5:45:4a:21:97:59:f2:91:2d:70:b0:
f4:2f:6b:e0:26:3c:71:73:ef:25:66:be:52:40:4e:19:47:e7:
07:e1:9c:7a:6e:b7:e6:7b:c8:70:82:7e:e6:f7:95:12:ee:75:
ac:ed:2e:ce:a2:1e:ac:ce:9f:f4:fc:c3:13:e5:f7:2f:7c:4c:
46:d5:60:a0:5d:ca:4e:46:48:e3:46:6c:98:e3:99:fa:02:d9:
91:2f:29:4b:8b:69:73:dc:90:70:ad:1c:01:55:60:b3:53:12:
f7:78:84:9a:01:af:d5:70:e3:ee:42:dc:64:65:22:1a:2b:6f:
93:14:22:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:25 2025 by rpki-client