Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Xr9ZFYjBL-mjPzH4r_OZp0GvJ6c.roa
File: Xr9ZFYjBL-mjPzH4r_OZp0GvJ6c.roa (raw, json)
Hash identifier: f1PSmqIS9miZCEa2gAqioxKMwc9+Vy+QCoAr9i9CnOI=
Subject key identifier: 5E:BF:59:15:88:C1:2F:E9:A3:3F:31:F8:AF:F3:99:A7:41:AF:27:A7
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0193AC04984EC0EAD7AD70A5DDEC811B9716
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Xr9ZFYjBL-mjPzH4r_OZp0GvJ6c.roa
Signing time: Mon 09 Dec 2024 15:23:22 +0000
ROA not before: Mon 09 Dec 2024 15:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 5.158.208.0/21 maxlen: 21
5.158.208.0/23 maxlen: 24
5.158.210.0/24 maxlen: 24
5.158.211.0/24 maxlen: 24
5.158.212.0/24 maxlen: 24
5.158.214.0/24 maxlen: 24
5.158.215.0/24 maxlen: 24
62.73.160.0/19 maxlen: 19
62.73.160.0/24 maxlen: 29
62.73.161.0/24 maxlen: 24
62.73.162.0/23 maxlen: 23
62.73.165.0/24 maxlen: 29
62.73.166.0/24 maxlen: 29
62.73.167.0/24 maxlen: 24
62.73.168.0/24 maxlen: 24
62.73.169.0/24 maxlen: 30
62.73.170.0/24 maxlen: 29
62.73.171.0/24 maxlen: 24
62.73.172.0/23 maxlen: 23
62.73.174.0/24 maxlen: 24
62.73.175.0/24 maxlen: 29
62.73.176.0/23 maxlen: 23
62.73.178.0/24 maxlen: 29
62.73.179.0/24 maxlen: 29
62.73.180.0/24 maxlen: 24
62.73.181.0/24 maxlen: 24
62.73.182.0/24 maxlen: 24
62.73.183.0/24 maxlen: 29
62.73.184.0/24 maxlen: 29
62.73.185.0/24 maxlen: 24
62.73.188.0/24 maxlen: 29
62.73.189.0/24 maxlen: 29
62.73.191.0/24 maxlen: 24
81.19.96.0/20 maxlen: 20
81.20.64.0/20 maxlen: 20
81.20.66.0/25 maxlen: 25
81.20.70.128/25 maxlen: 25
81.25.192.0/20 maxlen: 20
81.93.176.0/20 maxlen: 20
81.93.176.0/24 maxlen: 24
81.93.178.0/23 maxlen: 23
81.93.180.0/24 maxlen: 24
81.93.181.0/27 maxlen: 27
81.93.182.0/24 maxlen: 24
81.93.183.0/24 maxlen: 24
81.93.185.128/26 maxlen: 26
81.93.185.192/27 maxlen: 27
81.93.185.224/28 maxlen: 28
81.93.186.0/23 maxlen: 23
81.93.188.0/24 maxlen: 24
81.93.189.0/24 maxlen: 24
81.93.190.0/24 maxlen: 24
81.93.208.0/20 maxlen: 20
81.93.208.64/27 maxlen: 27
81.93.208.96/27 maxlen: 27
82.112.96.0/19 maxlen: 19
82.112.98.0/27 maxlen: 27
82.112.99.0/24 maxlen: 24
82.112.100.0/24 maxlen: 24
82.112.101.16/28 maxlen: 28
82.112.101.128/26 maxlen: 26
82.112.101.192/29 maxlen: 29
82.112.101.224/27 maxlen: 27
82.112.102.0/27 maxlen: 27
82.112.102.32/29 maxlen: 29
82.112.102.40/29 maxlen: 29
82.112.102.48/28 maxlen: 28
82.112.102.64/27 maxlen: 27
82.112.102.96/28 maxlen: 28
82.112.102.120/29 maxlen: 29
82.112.102.128/26 maxlen: 26
82.112.102.192/26 maxlen: 26
82.112.103.0/24 maxlen: 24
82.112.104.0/27 maxlen: 27
82.112.104.32/27 maxlen: 27
82.112.104.64/26 maxlen: 26
82.112.104.128/25 maxlen: 25
82.112.105.0/24 maxlen: 24
82.112.107.24/30 maxlen: 30
82.112.107.28/30 maxlen: 30
82.112.107.32/30 maxlen: 30
82.112.107.36/30 maxlen: 30
82.112.107.40/30 maxlen: 30
82.112.107.112/28 maxlen: 28
82.112.108.0/23 maxlen: 23
82.112.110.0/23 maxlen: 24
82.112.112.0/23 maxlen: 24
82.112.114.0/24 maxlen: 24
82.112.116.0/23 maxlen: 24
82.112.120.0/23 maxlen: 24
82.112.123.64/28 maxlen: 28
82.112.123.208/28 maxlen: 28
82.112.124.0/23 maxlen: 24
82.112.126.0/24 maxlen: 24
82.112.127.0/24 maxlen: 24
83.217.224.0/19 maxlen: 19
83.217.224.0/23 maxlen: 23
83.217.228.0/23 maxlen: 24
83.217.230.0/24 maxlen: 24
83.217.234.0/23 maxlen: 24
83.217.236.0/23 maxlen: 24
83.217.237.32/28 maxlen: 28
83.217.239.0/27 maxlen: 27
83.217.239.32/27 maxlen: 27
83.217.239.64/26 maxlen: 26
83.217.239.128/28 maxlen: 28
83.217.240.0/24 maxlen: 24
83.217.241.0/27 maxlen: 27
83.217.241.128/25 maxlen: 25
83.217.242.0/23 maxlen: 24
83.217.244.0/23 maxlen: 24
83.217.246.0/23 maxlen: 24
83.217.248.0/23 maxlen: 24
83.217.250.0/24 maxlen: 24
83.217.251.0/24 maxlen: 24
83.217.251.160/27 maxlen: 27
83.231.128.0/17 maxlen: 17
83.231.183.64/27 maxlen: 27
83.231.233.240/28 maxlen: 28
91.186.160.0/19 maxlen: 19
91.186.176.0/24 maxlen: 24
91.186.176.208/28 maxlen: 28
91.186.177.0/24 maxlen: 24
91.186.177.176/29 maxlen: 29
91.186.177.184/29 maxlen: 29
91.186.178.0/24 maxlen: 24
91.186.179.0/24 maxlen: 24
91.186.180.0/23 maxlen: 24
91.186.182.0/24 maxlen: 24
91.186.183.0/24 maxlen: 24
91.186.186.0/23 maxlen: 23
91.186.188.0/23 maxlen: 24
91.186.190.0/25 maxlen: 25
91.186.190.128/25 maxlen: 25
91.186.191.0/24 maxlen: 24
158.181.56.0/21 maxlen: 21
185.84.16.0/22 maxlen: 22
212.119.0.0/19 maxlen: 19
213.130.32.0/19 maxlen: 19
213.130.49.144/28 maxlen: 28
213.198.0.0/17 maxlen: 17
213.198.0.0/24 maxlen: 24
213.198.1.0/27 maxlen: 27
213.198.1.32/27 maxlen: 27
213.198.2.0/24 maxlen: 24
213.198.3.0/24 maxlen: 24
213.198.4.0/24 maxlen: 24
213.198.8.0/23 maxlen: 24
213.198.26.0/29 maxlen: 29
213.198.26.8/29 maxlen: 29
213.198.26.16/29 maxlen: 29
213.198.28.0/24 maxlen: 24
213.198.30.0/24 maxlen: 24
213.198.31.0/24 maxlen: 24
213.198.54.0/23 maxlen: 24
213.198.65.0/24 maxlen: 24
213.198.70.0/24 maxlen: 24
213.198.71.0/24 maxlen: 24
213.198.73.128/25 maxlen: 25
213.198.74.0/24 maxlen: 24
213.198.75.0/24 maxlen: 24
213.198.78.0/24 maxlen: 24
213.198.79.0/24 maxlen: 24
213.198.82.0/25 maxlen: 25
213.198.83.0/25 maxlen: 25
213.198.84.0/24 maxlen: 24
213.198.85.0/24 maxlen: 24
213.198.86.0/26 maxlen: 26
213.198.86.64/26 maxlen: 26
213.198.86.128/27 maxlen: 27
213.198.86.160/27 maxlen: 27
213.198.86.192/26 maxlen: 26
213.198.88.0/24 maxlen: 24
213.198.90.0/24 maxlen: 24
213.198.91.0/24 maxlen: 24
213.198.93.0/24 maxlen: 24
213.198.94.96/27 maxlen: 27
213.198.95.64/26 maxlen: 26
213.198.96.0/24 maxlen: 24
213.198.97.0/24 maxlen: 24
213.198.98.0/24 maxlen: 24
213.198.99.0/24 maxlen: 24
2001:728::/32 maxlen: 32
2001:728:c00::/38 maxlen: 64
2001:728:1010:300::/56 maxlen: 64
2001:728:2400::/38 maxlen: 64
2001:728:2806::/48 maxlen: 64
2001:728:2807::/48 maxlen: 64
2001:728:2808::/48 maxlen: 64
2001:728:2809::/48 maxlen: 64
2001:728:2c00::/38 maxlen: 64
2001:728:4000::/38 maxlen: 64
2001:728:4400::/38 maxlen: 64
Validation: Failed, certificate revoked on Tue 10 Dec 2024 21:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:04:98:4e:c0:ea:d7:ad:70:a5:dd:ec:81:1b:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Dec 9 15:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ebf591588c12fe9a33f31f8aff399a741af27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:ec:39:73:b6:4d:38:2c:18:e2:c0:62:64:
cf:74:33:62:44:60:ea:e0:fb:57:f1:6e:73:80:f1:
27:18:e1:2c:79:0d:a6:e9:d1:5e:97:6c:52:3b:72:
7f:78:25:79:d1:7d:69:7a:90:6d:58:73:32:9a:6d:
53:60:e0:8f:cc:7c:9b:d4:3a:7f:27:57:9c:01:82:
a9:24:de:0a:bc:2a:7e:04:b6:ff:1e:b7:98:74:4c:
bc:2a:59:f3:3e:65:3e:ef:70:b2:0a:aa:7b:6b:68:
c2:cd:62:08:f5:a5:13:f0:7e:fc:66:11:f5:8a:64:
bc:2d:c4:d0:1b:0c:6f:8d:6f:f9:36:2b:3a:5f:73:
86:72:3b:11:47:a6:66:cc:8b:6b:43:85:09:00:a6:
7f:18:e5:0f:c3:a4:f6:a1:fe:04:ee:e2:89:d3:dd:
48:c8:1d:b8:39:54:28:f8:c0:7f:d0:07:31:28:98:
51:89:4b:c7:c2:87:40:de:0e:e8:54:31:db:16:b8:
92:06:bc:85:6e:b0:0b:3b:b6:9f:91:c0:72:da:60:
e9:75:a2:1c:aa:08:08:de:4a:ee:63:0c:2a:3e:ae:
a1:24:f0:f7:fd:5e:26:c6:ae:9b:53:51:2e:8f:05:
65:29:5e:7f:43:fa:a9:53:7a:4f:41:8a:8f:44:00:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:59:15:88:C1:2F:E9:A3:3F:31:F8:AF:F3:99:A7:41:AF:27:A7
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Xr9ZFYjBL-mjPzH4r_OZp0GvJ6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.208.0/21
62.73.160.0/19
81.19.96.0/20
81.20.64.0/20
81.25.192.0/20
81.93.176.0/20
81.93.208.0/20
82.112.96.0/19
83.217.224.0/19
83.231.128.0/17
91.186.160.0/19
158.181.56.0/21
185.84.16.0/22
212.119.0.0/19
213.130.32.0/19
213.198.0.0/17
IPv6:
2001:728::/32
Signature Algorithm: sha256WithRSAEncryption
32:b3:86:e5:63:ef:16:0e:f8:d4:08:3b:08:06:da:f0:b0:cb:
b1:75:c4:0b:27:bf:9e:d3:31:d4:87:cf:19:bd:b5:82:27:89:
ac:1d:dd:e7:c7:7f:68:86:0f:3b:a3:fe:37:b2:f4:9e:ca:3c:
b4:47:07:cd:19:bb:5b:e8:8b:19:74:42:d4:00:3e:e2:09:ae:
82:f6:71:80:98:ae:76:ef:7e:c8:90:dd:66:cd:34:29:f8:a7:
01:1b:0b:85:18:07:48:44:d5:33:75:45:a7:2e:3a:c1:43:c7:
26:fd:8a:7c:1b:8b:51:00:60:f4:2f:c9:1d:6c:88:ea:47:54:
0b:8c:8a:f7:06:52:38:c2:ca:0c:d6:94:26:f2:7f:08:59:d4:
6e:34:3a:cf:19:87:f6:c0:d1:cb:94:b3:e2:87:2a:5d:3e:a9:
d2:b1:01:79:2f:2b:0e:c4:c7:53:dd:8b:c2:c3:1d:f9:b6:85:
aa:ba:66:b5:22:a0:14:7c:46:a4:78:f6:35:7f:a6:8d:21:75:
d9:95:c7:53:2b:80:95:a4:70:d3:a7:b5:68:cc:c2:f3:b9:e3:
16:33:62:22:08:45:7d:b2:25:d0:d8:c3:7c:15:e3:d5:c6:ea:
e7:d4:68:46:62:a5:38:9f:8a:66:cc:c4:ea:34:a1:30:91:7f:
fa:e5:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:31:46 2025 by rpki-client