Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/j5KGPPlZCllyrGX_ClPQIt03O6M.roa
File: j5KGPPlZCllyrGX_ClPQIt03O6M.roa (raw, json)
Hash identifier: 02BfJjOTOFxejx5+4dDq9+0YKTMzLOqS7ywLdlXaQ3c=
Subject key identifier: 8F:92:86:3C:F9:59:0A:59:72:AC:65:FF:0A:53:D0:22:DD:37:3B:A3
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 0195234B281CD2244547E8C898E00345554D
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/j5KGPPlZCllyrGX_ClPQIt03O6M.roa
Signing time: Thu 20 Feb 2025 12:18:02 +0000
ROA not before: Thu 20 Feb 2025 12:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 5.134.0.0/21 maxlen: 24
31.14.50.0/23 maxlen: 24
31.193.176.0/21 maxlen: 24
37.72.160.0/21 maxlen: 24
37.148.176.0/21 maxlen: 24
46.21.224.0/20 maxlen: 24
62.182.56.0/21 maxlen: 21
77.73.96.0/21 maxlen: 24
77.241.80.0/20 maxlen: 24
77.241.95.0/24 maxlen: 24
79.174.128.0/21 maxlen: 24
83.217.64.0/19 maxlen: 24
87.238.160.0/21 maxlen: 24
88.151.240.0/21 maxlen: 24
89.36.74.0/23 maxlen: 24
89.42.54.0/23 maxlen: 24
89.44.166.0/23 maxlen: 24
93.115.168.0/23 maxlen: 23
94.176.98.0/23 maxlen: 24
176.62.160.0/20 maxlen: 24
178.208.32.0/19 maxlen: 24
185.2.52.0/22 maxlen: 24
185.18.8.0/22 maxlen: 24
185.76.236.0/22 maxlen: 24
185.86.16.0/22 maxlen: 24
185.111.196.0/22 maxlen: 24
185.162.28.0/22 maxlen: 24
185.175.196.0/22 maxlen: 24
185.190.84.0/22 maxlen: 24
188.93.96.0/21 maxlen: 24
188.93.152.0/21 maxlen: 24
188.208.36.0/23 maxlen: 24
188.211.170.0/23 maxlen: 24
193.111.95.0/24 maxlen: 24
193.239.210.0/23 maxlen: 24
194.26.24.0/24 maxlen: 24
194.150.224.0/23 maxlen: 23
194.150.224.0/24 maxlen: 24
194.150.225.0/24 maxlen: 24
194.165.51.0/24 maxlen: 24
195.13.56.0/23 maxlen: 24
195.13.56.0/24 maxlen: 24
195.47.215.0/24 maxlen: 24
195.234.184.0/24 maxlen: 24
217.19.224.0/20 maxlen: 24
217.19.228.0/22 maxlen: 24
217.19.232.0/23 maxlen: 24
217.19.234.0/23 maxlen: 24
217.21.176.0/20 maxlen: 24
217.21.176.0/21 maxlen: 24
217.21.179.0/24 maxlen: 24
217.21.184.0/22 maxlen: 24
217.21.188.0/22 maxlen: 24
2a00:1c98::/32 maxlen: 64
2a00:1c98:fff0::/44 maxlen: 64
2a00:7000::/32 maxlen: 64
2a02:d08::/32 maxlen: 64
2a03:a800::/32 maxlen: 32
2a07:ca80::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 25 Feb 2025 16:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:4b:28:1c:d2:24:45:47:e8:c8:98:e0:03:45:55:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Feb 20 12:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f92863cf9590a5972ac65ff0a53d022dd373ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:05:06:46:5f:03:a5:6c:5b:a4:2a:89:85:
44:f6:5c:f6:9d:89:e5:6c:21:b4:f6:2b:bc:b3:5a:
a8:5d:6e:7d:ee:d9:c4:7b:34:5f:a7:79:68:af:e7:
8a:cf:a5:9c:ab:8e:4d:99:90:e8:04:61:3e:0b:49:
34:af:73:e6:85:80:0d:88:25:fb:69:db:71:0e:16:
b3:f4:85:ea:90:c8:de:f4:7d:44:a4:f2:67:9f:28:
b7:87:50:c7:9a:2b:dc:61:f9:32:11:41:a4:10:ed:
29:51:26:49:c2:fb:01:96:ca:9e:3a:7f:d2:73:74:
f8:7b:87:99:4a:91:55:68:53:ab:82:b6:3f:4d:b7:
87:b9:59:65:4c:df:7c:1d:01:8d:5a:7d:b4:e8:de:
9e:22:f7:f9:d9:83:b9:f2:44:c8:61:20:ac:f5:c9:
1d:c3:0e:dc:7b:b4:93:c9:f9:7b:24:10:45:ea:78:
84:b3:87:1b:4c:97:c3:0d:2b:00:db:f3:3c:5b:89:
13:66:dc:e3:82:ac:ee:fe:f3:9c:b4:ab:8e:86:39:
eb:f2:ad:51:e3:18:ae:55:c0:4a:e9:d7:46:a8:67:
6f:ba:83:14:1c:88:c2:28:d0:8c:17:8e:73:16:4e:
02:1d:b2:0d:e9:bf:11:57:ab:3c:96:30:ff:ac:c7:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:86:3C:F9:59:0A:59:72:AC:65:FF:0A:53:D0:22:DD:37:3B:A3
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/j5KGPPlZCllyrGX_ClPQIt03O6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.0.0/21
31.14.50.0/23
31.193.176.0/21
37.72.160.0/21
37.148.176.0/21
46.21.224.0/20
62.182.56.0/21
77.73.96.0/21
77.241.80.0/20
79.174.128.0/21
83.217.64.0/19
87.238.160.0/21
88.151.240.0/21
89.36.74.0/23
89.42.54.0/23
89.44.166.0/23
93.115.168.0/23
94.176.98.0/23
176.62.160.0/20
178.208.32.0/19
185.2.52.0/22
185.18.8.0/22
185.76.236.0/22
185.86.16.0/22
185.111.196.0/22
185.162.28.0/22
185.175.196.0/22
185.190.84.0/22
188.93.96.0/21
188.93.152.0/21
188.208.36.0/23
188.211.170.0/23
193.111.95.0/24
193.239.210.0/23
194.26.24.0/24
194.150.224.0/23
194.165.51.0/24
195.13.56.0/23
195.47.215.0/24
195.234.184.0/24
217.19.224.0/20
217.21.176.0/20
IPv6:
2a00:1c98::/32
2a00:7000::/32
2a02:d08::/32
2a03:a800::/32
2a07:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
1a:81:5c:44:21:94:a4:13:f5:57:01:6c:ee:ca:b7:27:c6:9b:
a1:2a:ae:ee:37:4a:71:a9:fa:11:46:e6:e4:b1:5b:8c:0f:64:
23:d3:64:9e:0f:22:81:63:db:0a:d4:83:1a:59:26:49:da:7f:
34:1d:ec:60:11:81:e7:da:d1:77:eb:7d:2f:bf:41:df:01:46:
af:0f:af:ee:db:7b:2f:50:ba:34:87:9e:f8:32:40:f0:ef:60:
56:69:cf:ba:fe:79:b6:bf:e0:8e:dc:ed:f1:b5:16:4b:ed:0b:
8d:83:ca:6e:0f:90:2c:11:07:57:eb:bd:71:7f:59:2b:c1:aa:
e5:89:87:d3:76:f0:21:89:9a:88:70:58:1e:72:2f:c9:ea:ba:
46:91:7b:db:06:b3:fe:a6:ca:22:35:1e:5c:21:a4:91:46:b3:
c3:61:d1:50:5f:02:af:e7:b5:62:a4:fc:24:c3:d5:4e:6c:46:
14:84:20:b1:fc:48:91:1c:8a:93:e3:92:8c:3d:7e:83:dd:1d:
a4:81:dc:fc:f9:31:6b:b8:dc:74:c9:33:3d:04:1c:d2:37:a0:
0e:85:20:10:37:09:f3:46:26:69:62:d9:40:71:d3:8b:0a:f9:
44:8e:d6:15:fc:a9:87:9c:9e:ef:4d:d7:20:a2:fd:cb:72:b6:
21:7b:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:21:15 2025 by rpki-client