Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZ7QQCle5NlkOBAbuBlxnrIEQEY.roa
File: NZ7QQCle5NlkOBAbuBlxnrIEQEY.roa (raw, json)
Hash identifier: r/bytJ9Y1wKfW4J5GwCgt1NBP8nzIoLdKdjVz0wxh7w=
Subject key identifier: 35:9E:D0:40:29:5E:E4:D9:64:38:10:1B:B8:19:71:9E:B2:04:40:46
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01970C38716CD22B4058662760BAAF13B079
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZ7QQCle5NlkOBAbuBlxnrIEQEY.roa
Signing time: Mon 26 May 2025 10:51:54 +0000
ROA not before: Mon 26 May 2025 10:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.169.0/24 maxlen: 24
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.185.0/24 maxlen: 24
87.224.195.0/24 maxlen: 24
87.224.228.0/24 maxlen: 24
87.224.229.0/24 maxlen: 24
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.3.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.41.0/24 maxlen: 24
90.157.49.0/24 maxlen: 24
90.157.54.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.97.0/24 maxlen: 24
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
90.157.116.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.86.0/24 maxlen: 24
92.54.89.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.94.0/24 maxlen: 24
92.54.116.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.130.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.140.0/24 maxlen: 24
94.31.141.0/24 maxlen: 24
94.31.143.0/24 maxlen: 24
94.31.144.0/24 maxlen: 24
94.31.145.0/24 maxlen: 24
94.31.146.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.155.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.192.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.198.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.201.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.216.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.136.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.146.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.149.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.153.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.159.0/24 maxlen: 24
188.73.162.0/24 maxlen: 24
188.73.165.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.176.0/24 maxlen: 24
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
188.73.188.0/24 maxlen: 24
188.73.191.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.36.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.48.0/24 maxlen: 24
213.142.51.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
213.142.61.0/24 maxlen: 24
213.142.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 09:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:38:71:6c:d2:2b:40:58:66:27:60:ba:af:13:b0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 26 10:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=359ed040295ee4d96438101bb819719eb2044046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:5f:03:1b:16:70:88:c0:ed:f8:0f:09:7a:
4a:41:46:3b:f6:b6:e3:89:b8:d4:b7:9e:ef:0a:70:
f5:f7:dc:eb:61:5f:b6:86:3a:52:7a:a0:d9:26:78:
56:73:40:43:3b:17:62:01:ce:ce:74:64:51:f3:91:
49:07:79:77:3c:47:df:24:79:5a:8b:90:c0:f0:a9:
7d:df:5d:45:f5:ba:bc:12:06:86:61:21:f8:f3:ad:
95:f9:e9:1d:1f:1b:e7:73:23:89:23:4a:ea:a4:42:
b3:82:58:23:dc:3d:42:77:bf:9d:c7:3f:3e:15:2a:
fb:99:a9:7e:78:20:20:bd:91:32:b2:e2:cb:36:f8:
e6:b9:10:6a:d7:b3:ca:7e:05:49:52:2e:45:23:bd:
66:2e:43:11:6a:81:0d:9b:43:9e:55:62:03:3d:92:
b9:5d:63:29:e9:ea:16:77:2d:93:6d:56:ce:48:c4:
31:f6:4b:aa:34:81:cb:2c:a9:6c:2d:c9:e2:cc:8a:
1c:84:91:3b:63:bf:1e:ad:b5:31:32:42:e9:2d:f1:
df:a5:ca:1e:90:67:bf:10:33:a3:be:99:fd:16:a8:
e3:67:5c:57:85:d9:14:59:f2:42:4e:87:9c:96:b8:
8f:ef:92:9b:72:de:06:47:96:45:43:0e:f5:4c:a2:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:D0:40:29:5E:E4:D9:64:38:10:1B:B8:19:71:9E:B2:04:40:46
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZ7QQCle5NlkOBAbuBlxnrIEQEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.169.0/24
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.185.0/24
87.224.195.0/24
87.224.228.0/23
87.224.249.0/24
87.224.251.0/24
90.157.3.0/24
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.41.0/24
90.157.49.0/24
90.157.54.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.97.0/24
90.157.109.0-90.157.110.255
90.157.115.0-90.157.116.255
92.54.69.0/24
92.54.86.0/24
92.54.89.0-92.54.90.255
92.54.94.0/24
92.54.116.0/23
94.31.130.0/24
94.31.134.0-94.31.136.255
94.31.140.0/23
94.31.143.0-94.31.148.255
94.31.151.0/24
94.31.155.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.192.0-94.31.196.255
94.31.198.0/23
94.31.201.0-94.31.202.255
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.216.0/23
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.136.0/23
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/22
188.73.149.0/24
188.73.151.0/24
188.73.153.0-188.73.154.255
188.73.156.0/24
188.73.158.0/23
188.73.162.0/24
188.73.165.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0-188.73.176.255
188.73.183.0/24
188.73.185.0/24
188.73.188.0/24
188.73.191.0/24
213.142.34.0-213.142.37.255
213.142.40.0/23
213.142.48.0/24
213.142.51.0/24
213.142.57.0/24
213.142.61.0-213.142.62.255
Signature Algorithm: sha256WithRSAEncryption
24:64:5b:d0:ae:bc:c8:94:b5:2b:cc:04:aa:35:01:39:e3:58:
94:37:b8:a6:c0:0a:0d:ab:2d:81:bd:4e:d3:48:5e:d2:b6:5e:
e7:fa:9e:39:0a:d5:aa:d0:c4:dd:e3:e9:3b:7f:14:53:dd:51:
3a:86:bf:eb:45:97:8c:0c:4b:e8:d6:ad:d3:7c:81:23:79:51:
a1:85:7a:24:e5:6b:1d:c7:cf:aa:66:0f:20:d1:fd:e9:ba:42:
75:13:83:a8:a2:c8:b3:fa:ff:2d:d5:c4:c9:22:5a:fd:a7:2d:
b3:5a:21:4c:cf:2a:e9:b4:9e:3e:4e:fd:43:f4:40:ba:f5:44:
7e:10:cd:75:3f:8c:94:55:60:5e:f6:5b:b9:93:1a:c6:03:c5:
f5:0c:cc:bc:04:f3:0f:17:b1:33:3b:04:39:9b:49:d2:f3:a7:
55:4c:b5:3f:85:54:62:b9:79:bd:d5:01:54:ae:be:23:fb:e5:
87:96:e4:de:80:f9:52:90:ef:20:f6:66:f0:95:82:5b:c4:03:
f0:28:8e:4c:9b:51:18:14:dd:80:fd:31:30:88:f0:6b:11:88:
47:d4:10:d7:e6:41:9b:59:fc:66:15:36:56:24:13:49:1d:ab:
af:00:e3:9c:60:6e:b6:66:cd:51:74:39:a5:d3:6b:42:fa:ae:
4e:22:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:41:53 2025 by rpki-client