Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5U9Y47qm20glvqadlnFLxGoAz4.roa
File: l5U9Y47qm20glvqadlnFLxGoAz4.roa (raw, json)
Hash identifier: kgHFCQK4EiA5tPy3J3y4BnbNbvcmiaJBA1YMIhncL7g=
Subject key identifier: 97:95:3D:63:8E:EA:9B:6D:20:96:FA:9A:76:59:C5:2F:11:A8:03:3E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01963307A084B8F656479D8175975DD2C82D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5U9Y47qm20glvqadlnFLxGoAz4.roa
Signing time: Mon 14 Apr 2025 06:40:59 +0000
ROA not before: Mon 14 Apr 2025 06:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.169.0/24 maxlen: 24
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.185.0/24 maxlen: 24
87.224.195.0/24 maxlen: 24
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.3.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.41.0/24 maxlen: 24
90.157.49.0/24 maxlen: 24
90.157.54.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.97.0/24 maxlen: 24
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.140.0/24 maxlen: 24
94.31.141.0/24 maxlen: 24
94.31.143.0/24 maxlen: 24
94.31.144.0/24 maxlen: 24
94.31.145.0/24 maxlen: 24
94.31.146.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.192.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.198.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.216.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.136.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.149.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.159.0/24 maxlen: 24
188.73.162.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.48.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:07:a0:84:b8:f6:56:47:9d:81:75:97:5d:d2:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 14 06:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97953d638eea9b6d2096fa9a7659c52f11a8033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:56:b0:fb:29:3a:33:4b:7d:e0:01:ab:60:
24:82:cc:5b:d7:c3:aa:71:33:3c:a7:46:67:91:c6:
69:d6:e6:7d:3f:eb:e1:13:bb:0c:0b:66:37:8f:3d:
5c:42:ec:de:df:74:a9:d9:90:01:80:26:f4:d2:e9:
9e:b0:53:dd:f9:07:da:bd:2e:19:c3:bf:ed:e4:88:
2f:da:da:75:1e:37:5a:9c:28:9f:5a:d1:09:b2:ac:
f6:4b:ae:df:a6:ff:93:ad:97:2d:9a:04:91:0d:ff:
6c:94:68:7e:21:e3:46:a9:bd:4d:78:2a:c2:66:3c:
b7:59:c5:c8:62:cc:90:5d:72:d3:a2:8d:69:96:c0:
1f:e6:b9:25:ba:1b:80:ba:b4:6b:ba:2a:ce:bf:eb:
26:06:c2:49:cc:84:90:a1:da:61:2f:6f:76:31:15:
e9:b0:41:93:fd:82:a6:83:5f:76:da:95:44:12:25:
a7:6f:5c:2e:1c:c0:e5:47:2d:4c:bf:6d:7b:84:d8:
b2:47:91:22:0f:75:48:5a:f3:bd:fd:b7:58:06:5f:
a4:a6:35:9d:3f:fb:a0:91:55:bb:53:92:1a:53:81:
03:44:29:5a:3e:5a:c6:da:59:7b:7c:b7:68:81:9b:
91:5a:b2:84:30:7c:c0:f7:84:e6:12:3e:45:b8:b3:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:3D:63:8E:EA:9B:6D:20:96:FA:9A:76:59:C5:2F:11:A8:03:3E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5U9Y47qm20glvqadlnFLxGoAz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.169.0/24
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.185.0/24
87.224.195.0/24
87.224.249.0/24
87.224.251.0/24
90.157.3.0/24
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.41.0/24
90.157.49.0/24
90.157.54.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.97.0/24
90.157.109.0-90.157.110.255
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.140.0/23
94.31.143.0-94.31.148.255
94.31.151.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.192.0-94.31.196.255
94.31.198.0/23
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.216.0/23
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.136.0/23
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/23
188.73.147.0/24
188.73.149.0/24
188.73.151.0/24
188.73.154.0/24
188.73.156.0/24
188.73.158.0/23
188.73.162.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.37.0/24
213.142.40.0/23
213.142.48.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
66:49:e8:d1:d5:ad:10:5a:a3:be:64:11:25:6b:0f:cd:52:db:
c8:17:6b:d5:53:78:ae:b5:6f:1f:1f:cd:4d:45:ad:d6:a3:db:
68:d6:7c:d8:f5:a3:d4:f5:33:f8:2d:e7:a7:13:9f:19:70:f0:
95:6b:d7:8e:06:c8:26:3f:60:53:9c:b4:42:2f:01:29:e3:c8:
5a:42:84:69:11:ca:a1:4a:a3:95:7e:5a:bd:e9:45:ea:47:c8:
4e:98:9c:7a:8d:3c:2a:42:22:f0:df:f6:97:f0:f0:a2:eb:e1:
d8:81:f0:d4:a9:74:79:0e:97:55:59:f9:5f:ae:c3:9d:76:7c:
08:1c:c5:a6:74:c9:a6:7e:43:69:52:69:f1:6f:85:f4:4d:62:
56:c7:5d:b0:2d:d9:91:c8:7f:76:e1:0b:05:32:c8:c1:c5:f0:
2e:dc:33:b3:95:60:eb:12:61:2e:17:84:eb:56:4c:74:0a:f8:
99:55:27:2e:92:95:05:19:ed:4c:22:2a:f1:63:30:e0:7c:fc:
e4:10:e3:1b:ac:8a:e8:12:d5:45:cc:0c:80:81:08:f2:0c:90:
33:62:83:2a:45:d4:46:dd:e2:20:b5:df:2a:df:2b:1a:c4:f4:
0a:31:26:26:db:e9:be:a2:23:91:a9:0c:b3:56:f5:7f:0e:64:
eb:b7:52:6c
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgISAZYzB6CEuPZWR52BdZdd0sgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwNDE0MDY0MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzk1M2Q2MzhlZWE5YjZkMjA5NmZhOWE3NjU5YzUyZjExYTgwMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti9WsPspOjNLfeABq2Akgsxb18Oq
cTM8p0ZnkcZp1uZ9P+vhE7sMC2Y3jz1cQuze33Sp2ZABgCb00umesFPd+QfavS4Z
w7/t5Igv2tp1HjdanCifWtEJsqz2S67fpv+TrZctmgSRDf9slGh+IeNGqb1NeCrC
Zjy3WcXIYsyQXXLToo1plsAf5rkluhuAurRruirOv+smBsJJzISQodphL292MRXp
sEGT/YKmg1922pVEEiWnb1wuHMDlRy1Mv217hNiyR5EiD3VIWvO9/bdYBl+kpjWd
P/ugkVW7U5IaU4EDRClaPlrG2ll7fLdogZuRWrKEMHzA94TmEj5FuLN1cQIDAQAB
o4IEOzCCBDcwHQYDVR0OBBYEFJeVPWOO6pttIJb6mnZZxS8RqAM+MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvbDVVOVk0N3FtMjBnbHZxYWRsbkZMeEdvQXo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICTwYIKwYBBQUHAQcBAf8EggI+MIICOjCCAjYEAgABMIIC
LgMEAQWN6gMEAB/AqQMEAB/AqzAMAwQAH8CzAwQBH8C0MAwDBAAfwLsDBAAfwLwD
BAQu5WADBABX4LkDBABX4MMDBABX4PkDBABX4PsDBABanQMDBABanQUDBABanRAD
BABanRgDBABanR4DBABanSIDBABanSkDBABanTEDBABanTYDBABanToDBANanUAw
DAMEAVqdTgMEAlqdUAMEAFqdYTAMAwQAWp1tAwQAWp1uAwQAWp1zAwQAXDZFAwQA
XDZaAwQAXDZ1MAwDBAFeH4YDBABeH4gDBAFeH4wwDAMEAF4fjwMEAF4flAMEAF4f
lwMEAV4fngMEAF4fqwMEAF4fsAMEAV4fsgMEAV4fuDAMAwQGXh/AAwQAXh/EAwQB
Xh/GAwQAXh/KAwQBXh/OAwQAXh/SAwQAXh/UAwQBXh/YAwQAXh/dAwQAXh/gAwQA
Xh/iAwQAXh/lMAwDBABeH+kDBABeH+oDBAFeH/ADBABeH/MDBAFeH/YDBABeH/oD
BABeH/0DBABeH/8DBANeM+gDBAG8EXQDBAG8EnADBAC8EnQDBAC8SYMDBAG8SYgD
BAC8SYswDAMEALxJjQMEALxJjgMEAbxJkAMEALxJkwMEALxJlQMEALxJlwMEALxJ
mgMEALxJnAMEAbxJngMEALxJogMEALxJqAMEAbxJqgMEAbxJrgMEALxJtwMEALxJ
uQMEAdWOIgMEANWOJQMEAdWOKAMEANWOMAMEANWOOTANBgkqhkiG9w0BAQsFAAOC
AQEAZkno0dWtEFqjvmQRJWsPzVLbyBdr1VN4rrVvHx/NTUWt1qPbaNZ82PWj1PUz
+C3npxOfGXDwlWvXjgbIJj9gU5y0Qi8BKePIWkKEaRHKoUqjlX5avelF6kfITpic
eo08KkIi8N/2l/Dwouvh2IHw1Kl0eQ6XVVn5X67DnXZ8CBzFpnTJpn5DaVJp8W+F
9E1iVsddsC3Zkch/duELBTLIwcXwLtwzs5Vg6xJhLheE61ZMdAr4mVUnLpKVBRnt
TCIq8WMw4Hz85BDjG6yK6BLVRcwMgIEI8gyQM2KDKkXURt3iILXfKt8rGsT0CjEm
JtvpvqIjkakMs1b1fw5k67dSbA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:10 2025 by rpki-client