Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/sVjkd3ubTVqriVG_L50EbRhK03k.roa
File: sVjkd3ubTVqriVG_L50EbRhK03k.roa (raw, json)
Hash identifier: xPXplMkjFQNCAdz78f0oYUwxd9RH7OjNkBQum4UDZYE=
Subject key identifier: B1:58:E4:77:7B:9B:4D:5A:AB:89:51:BF:2F:9D:04:6D:18:4A:D3:79
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0194D0B05DFF0811EEDEA289F6493476553E
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/sVjkd3ubTVqriVG_L50EbRhK03k.roa
Signing time: Tue 04 Feb 2025 11:20:06 +0000
ROA not before: Tue 04 Feb 2025 11:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/21 maxlen: 21
5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.69.172.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3546::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 14:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:b0:5d:ff:08:11:ee:de:a2:89:f6:49:34:76:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Feb 4 11:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b158e4777b9b4d5aab8951bf2f9d046d184ad379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:cc:85:5c:ee:36:13:c4:21:c7:90:de:74:
df:7d:47:b0:75:99:11:0f:2a:67:31:0a:5d:ac:f9:
c8:2d:0d:ac:dc:04:f1:da:92:9f:38:4b:99:d5:a9:
85:5d:ce:a3:7d:cf:3b:9e:5e:1d:4c:2b:a9:63:7e:
37:e0:ae:39:ff:b0:f3:b9:46:db:c7:14:55:5e:14:
ce:5b:33:ef:0e:e2:84:7f:5c:a2:81:8f:26:ea:ce:
b0:bf:47:40:d9:e8:99:a5:57:30:bf:f3:ef:2b:02:
9a:be:4d:7c:34:dc:1b:ea:59:fc:7a:24:1c:a0:6c:
a8:51:12:51:04:81:7e:b4:29:8d:40:ec:bb:e3:93:
bb:4e:20:66:2a:7b:b4:d7:3b:30:52:fe:29:d4:c2:
49:30:7f:9b:36:c4:04:78:5b:5d:82:51:8b:2b:29:
28:e6:3c:9a:58:ca:b6:2a:66:ca:2c:0d:f7:ab:37:
97:ad:fb:93:c3:86:7a:15:9a:69:ee:0a:d5:40:58:
8d:5a:ec:ab:35:03:76:09:7f:34:d3:d3:a1:bf:ef:
8e:c2:12:c5:b5:5b:5d:66:79:cd:80:54:0b:df:4c:
76:2b:45:6d:48:73:8c:6b:cd:db:31:de:07:19:83:
89:52:f7:df:e9:cf:67:dd:18:db:0f:4d:dd:98:5c:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:E4:77:7B:9B:4D:5A:AB:89:51:BF:2F:9D:04:6D:18:4A:D3:79
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/sVjkd3ubTVqriVG_L50EbRhK03k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
83.136.248.0/21
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:ac:e2:b4:69:e9:64:4b:c3:42:47:8c:8e:e3:46:91:88:f4:
ce:2d:ed:01:e6:e3:73:71:a8:3c:ab:c0:18:c0:a0:a8:f4:7d:
b8:6f:bd:c8:41:61:15:41:a9:aa:3d:7e:d4:c8:01:af:c9:1c:
98:09:1f:e1:d4:a9:26:45:ef:88:33:fc:10:b3:15:59:6c:1e:
05:5e:10:21:5b:ce:11:ed:da:36:dc:2d:d6:e1:1a:34:f5:60:
16:94:06:3c:57:43:e6:a1:70:51:5e:27:8c:ca:19:a7:64:8b:
d7:79:99:d2:db:eb:39:65:a4:6e:56:a9:4a:55:9b:3f:a2:91:
35:9b:07:00:76:9f:30:fe:f1:78:fd:7b:be:c3:25:07:2a:de:
8a:51:b9:9f:5c:15:12:f0:cd:4e:f4:f7:69:96:fa:5b:62:a0:
83:7f:3b:cb:6e:70:d3:a5:2d:2f:c6:9d:93:e7:44:4b:55:0f:
cd:fd:5c:2b:bf:9e:cd:59:84:fb:07:67:85:64:0a:97:59:ee:
50:55:09:ca:93:01:b1:1f:e8:c7:1f:e8:64:3d:39:b9:b5:b5:
fa:8e:16:3a:c2:c1:5c:e0:70:cd:ff:c0:76:94:cb:db:eb:b8:
3f:1e:b1:24:42:8f:d5:30:3c:86:ea:1f:45:c3:ea:1a:cb:7b:
88:ef:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:26:09 2025 by rpki-client