Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zSAEdpcd0-hAktRVuNDIcW4l7jc.roa
File: zSAEdpcd0-hAktRVuNDIcW4l7jc.roa (raw, json)
Hash identifier: C67DxW/7qGzOob9akcW6h71hiyKdHhIKFqFo1eZZWys=
Subject key identifier: CD:20:04:76:97:1D:D3:E8:40:92:D4:55:B8:D0:C8:71:6E:25:EE:37
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0190E0784F2432B65C62DAB5D6CE2A70AC98
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zSAEdpcd0-hAktRVuNDIcW4l7jc.roa
Signing time: Tue 23 Jul 2024 16:41:39 +0000
ROA not before: Tue 23 Jul 2024 16:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.184.0/23 maxlen: 23
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:78:4f:24:32:b6:5c:62:da:b5:d6:ce:2a:70:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 23 16:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd200476971dd3e84092d455b8d0c8716e25ee37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:83:dd:53:b9:d5:28:89:89:89:40:70:91:
aa:05:7d:30:b3:a8:2e:69:25:da:48:d6:2f:bd:8f:
fb:8d:0f:4b:01:93:55:ba:b2:9a:cd:69:32:a5:9b:
19:50:6a:24:c0:81:41:a8:ad:45:c1:88:45:7c:82:
86:87:87:7c:ae:4c:66:97:86:7d:29:ea:f9:66:3c:
e2:6b:f0:fa:78:29:12:95:a1:ce:13:c7:57:c4:63:
7d:12:6d:52:ab:b1:fa:2d:61:33:cb:ac:f5:d0:3f:
c7:20:b1:4c:6b:04:ce:81:d9:eb:8f:3e:31:04:7f:
f3:32:9b:e6:1f:f3:63:2c:0e:ce:c9:07:96:1e:1b:
d5:02:93:f4:d4:85:c0:8a:87:26:5f:91:58:d3:31:
8a:6d:db:25:1a:07:83:d3:a2:f9:16:a7:2e:a5:91:
63:51:d4:17:57:64:3e:ca:f5:3e:05:e8:b1:cc:9b:
59:fd:59:0c:27:b9:93:13:ec:9f:45:f7:88:d9:5d:
12:c3:b4:81:1f:1b:5e:6f:70:d9:d6:b1:35:a0:c7:
29:fa:f6:2a:a3:48:ce:11:7b:0d:be:68:51:7c:8f:
da:6a:d6:e9:0b:89:97:fa:e8:1e:8a:2b:1a:0b:2c:
39:34:c3:a8:1e:9e:4f:55:b2:b8:fb:3c:9f:0b:b6:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:04:76:97:1D:D3:E8:40:92:D4:55:B8:D0:C8:71:6E:25:EE:37
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zSAEdpcd0-hAktRVuNDIcW4l7jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.180.0/23
46.229.96.0/20
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.68.0/22
90.157.78.0-90.157.83.255
90.157.109.0-90.157.110.255
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0/24
94.31.158.0/23
94.31.176.0/24
94.31.184.0/23
94.31.193.0-94.31.196.255
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.221.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0/24
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.137.0/24
188.73.139.0/24
188.73.141.0/24
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.156.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.40.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
88:47:4e:03:d3:78:8e:68:a1:1e:a1:c5:68:a2:cd:43:39:1d:
d0:bd:eb:67:4a:cf:c0:a7:35:69:3e:21:f2:b9:b9:30:b2:7c:
21:ac:76:bb:e0:9b:ab:41:f3:de:58:2a:98:45:cd:81:d7:ec:
89:a3:f5:b3:04:c9:8b:04:31:70:8c:84:70:9c:d1:cb:5f:1c:
1c:bd:d6:be:b1:fb:a3:9e:c6:c0:21:2b:6d:75:42:78:5e:96:
3e:7a:da:bb:57:03:4d:28:b5:b6:30:74:b4:4a:03:03:b1:21:
2f:91:a9:7e:e7:74:d9:e8:42:11:3c:e5:3e:df:20:15:a9:39:
36:8b:08:a4:cf:59:5b:ec:55:cf:0d:67:9b:c2:e4:89:c7:2c:
23:3b:f3:e7:0c:d3:5f:a6:5f:e6:8a:7d:a2:9e:f9:4d:1d:fb:
92:03:ab:30:3e:f9:41:b7:b9:ca:58:e8:25:5e:f3:52:94:d4:
92:9c:fb:f8:9b:4b:8f:fc:66:40:ce:af:18:f4:e4:54:0c:f9:
b0:45:7c:33:44:0b:ad:f3:1d:b3:4d:98:f8:1b:b8:eb:f9:39:
0d:a7:60:4b:72:30:8f:30:0d:4c:d8:ae:f8:51:d6:36:74:e5:
0a:97:4f:71:46:8c:4c:7a:03:c7:59:40:9d:c8:10:2e:c1:f0:
58:4f:72:65
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISAZDgeE8kMrZcYtq11s4qcKyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNzIzMTY0MTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDIwMDQ3Njk3MWRkM2U4NDA5MmQ0NTViOGQwYzg3MTZlMjVlZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oeD3VO51SiJiYlAcJGqBX0ws6gu
aSXaSNYvvY/7jQ9LAZNVurKazWkypZsZUGokwIFBqK1FwYhFfIKGh4d8rkxml4Z9
Ker5Zjzia/D6eCkSlaHOE8dXxGN9Em1Sq7H6LWEzy6z10D/HILFMawTOgdnrjz4x
BH/zMpvmH/NjLA7OyQeWHhvVApP01IXAiocmX5FY0zGKbdslGgeD06L5FqcupZFj
UdQXV2Q+yvU+BeixzJtZ/VkMJ7mTE+yfRfeI2V0Sw7SBHxteb3DZ1rE1oMcp+vYq
o0jOEXsNvmhRfI/aatbpC4mX+ugeiisaCyw5NMOoHp5PVbK4+zyfC7YWRQIDAQAB
o4IDgzCCA38wHQYDVR0OBBYEFM0gBHaXHdPoQJLUVbjQyHFuJe43MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvelNBRWRwY2QwLWhBa3RSVnVOREljVzRsN2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlwYIKwYBBQUHAQcBAf8EggGGMIIBgjCCAX4EAgABMIIB
dgMEAQWN6gMEAB/AqwMEAR/AtAMEBC7lYAMEAFqdBQMEAFqdEAMEAFqdGAMEAFqd
HgMEAFqdIgMEAFqdOgMEAlqdRDAMAwQBWp1OAwQCWp1QMAwDBABanW0DBABanW4D
BABanXMDBABcNkUDBABcNloDBABcNnUwDAMEAV4fhgMEAF4fiAMEAF4fkwMEAV4f
ngMEAF4fsAMEAV4fuDAMAwQAXh/BAwQAXh/EAwQAXh/KAwQBXh/OAwQAXh/SAwQA
Xh/UAwQAXh/dAwQAXh/iAwQAXh/lAwQAXh/pAwQBXh/wAwQAXh/zAwQBXh/2AwQA
Xh/6AwQAXh/9AwQAXh//AwQDXjPoAwQBvBF0AwQBvBJwAwQAvBJ0AwQAvEmJAwQA
vEmLAwQAvEmNAwQBvEmQAwQAvEmTAwQAvEmXAwQAvEmaAwQAvEmcAwQAvEmeAwQA
vEmoAwQBvEmqAwQAvEm3AwQAvEm5AwQB1Y4iAwQA1Y4oAwQA1Y45MA0GCSqGSIb3
DQEBCwUAA4IBAQCIR04D03iOaKEeocVoos1DOR3QvetnSs/ApzVpPiHyubkwsnwh
rHa74JurQfPeWCqYRc2B1+yJo/WzBMmLBDFwjIRwnNHLXxwcvda+sfujnsbAIStt
dUJ4XpY+etq7VwNNKLW2MHS0SgMDsSEvkal+53TZ6EIRPOU+3yAVqTk2iwikz1lb
7FXPDWebwuSJxywjO/PnDNNfpl/min2invlNHfuSA6swPvlBt7nKWOglXvNSlNSS
nPv4m0uP/GZAzq8Y9ORUDPmwRXwzRAut8x2zTZj4G7jr+TkNp2BLcjCPMA1M2K74
UdY2dOUKl09xRoxMegPHWUCdyBAuwfBYT3Jl
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:58:38 2025 by rpki-client