Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/sREl-K63HI3T1VoIkRq-DCGwRig.roa
File: sREl-K63HI3T1VoIkRq-DCGwRig.roa (raw, json)
Hash identifier: Q372OzYVlWYdGASa4TzMAeiyuCV07yYggXIpmzWa9n8=
Subject key identifier: B1:11:25:F8:AE:B7:1C:8D:D3:D5:5A:08:91:1A:BE:0C:21:B0:46:28
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 01951E4C2AD5DA12585CAE752E57505F1472
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/sREl-K63HI3T1VoIkRq-DCGwRig.roa
Signing time: Wed 19 Feb 2025 13:01:02 +0000
ROA not before: Wed 19 Feb 2025 13:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 5.134.0.0/21 maxlen: 24
31.14.50.0/23 maxlen: 24
31.193.176.0/21 maxlen: 24
37.72.160.0/21 maxlen: 24
37.148.176.0/21 maxlen: 24
46.21.224.0/20 maxlen: 24
62.182.56.0/21 maxlen: 21
77.73.96.0/21 maxlen: 24
77.241.80.0/20 maxlen: 24
77.241.95.0/24 maxlen: 24
79.174.128.0/21 maxlen: 24
83.217.64.0/19 maxlen: 24
83.217.64.0/20 maxlen: 20
83.217.80.0/20 maxlen: 24
87.238.160.0/21 maxlen: 24
88.151.240.0/21 maxlen: 24
89.36.74.0/23 maxlen: 24
89.42.54.0/23 maxlen: 24
89.44.166.0/23 maxlen: 24
93.115.168.0/23 maxlen: 23
94.176.98.0/23 maxlen: 24
176.62.160.0/20 maxlen: 24
178.208.32.0/19 maxlen: 24
185.2.52.0/22 maxlen: 24
185.18.8.0/22 maxlen: 24
185.76.236.0/22 maxlen: 24
185.86.16.0/22 maxlen: 24
185.111.196.0/22 maxlen: 24
185.162.28.0/22 maxlen: 24
185.175.196.0/22 maxlen: 24
185.190.84.0/22 maxlen: 24
188.93.96.0/21 maxlen: 24
188.93.152.0/21 maxlen: 24
188.208.36.0/23 maxlen: 24
188.211.170.0/23 maxlen: 24
193.111.95.0/24 maxlen: 24
193.239.210.0/23 maxlen: 24
194.26.24.0/24 maxlen: 24
194.150.224.0/23 maxlen: 23
194.150.224.0/24 maxlen: 24
194.150.225.0/24 maxlen: 24
194.165.51.0/24 maxlen: 24
195.13.56.0/23 maxlen: 24
195.13.56.0/24 maxlen: 24
195.47.215.0/24 maxlen: 24
195.234.184.0/24 maxlen: 24
217.19.224.0/20 maxlen: 24
217.19.228.0/22 maxlen: 24
217.19.232.0/23 maxlen: 24
217.19.234.0/23 maxlen: 24
217.21.176.0/20 maxlen: 24
217.21.176.0/21 maxlen: 24
217.21.179.0/24 maxlen: 24
217.21.184.0/22 maxlen: 24
217.21.188.0/22 maxlen: 24
2a00:1c98::/32 maxlen: 64
2a00:1c98:fff0::/44 maxlen: 64
2a00:7000::/32 maxlen: 64
2a02:d08::/32 maxlen: 64
2a03:a800::/32 maxlen: 32
2a07:ca80::/29 maxlen: 64
Validation: Failed, certificate revoked on Thu 20 Feb 2025 12:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:4c:2a:d5:da:12:58:5c:ae:75:2e:57:50:5f:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Feb 19 13:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b11125f8aeb71c8dd3d55a08911abe0c21b04628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:66:b5:2e:5e:7b:7f:9f:db:5b:05:fe:3a:
3c:4a:0c:07:f0:07:e4:65:28:d1:cd:7f:ff:96:1c:
bc:33:30:06:a7:32:1f:ef:73:b5:ca:82:eb:10:1c:
66:d6:33:2f:47:e8:03:1e:ff:2c:59:9b:29:1b:17:
5b:ee:b6:2b:6a:77:1a:58:fb:1f:e0:fc:77:20:b3:
b5:81:0e:d5:53:13:66:e8:c6:b2:c6:38:cf:ac:2a:
63:a5:87:1e:ab:e5:3f:86:01:52:f3:09:de:0c:e3:
3b:7c:97:48:9e:0a:9e:55:08:67:28:03:8e:75:bc:
d1:c2:3d:e2:62:c4:13:f0:72:d3:f3:dc:15:6a:c6:
07:ba:4c:e3:0f:ce:9e:e6:c1:36:3a:dc:77:55:65:
0d:11:3f:40:dc:dd:98:fc:16:93:24:4b:c6:29:80:
5f:1b:3d:05:4a:31:3b:b0:d2:5b:79:e5:53:86:a5:
24:6f:a7:3f:6c:0b:76:a1:1e:cc:a0:e0:56:80:a9:
09:87:b1:c0:ad:ce:af:dd:27:c1:ab:5e:d8:c0:90:
6f:16:5b:00:1e:14:9e:74:e3:ba:3f:6f:63:bf:ec:
5d:88:5c:78:57:05:ba:8d:3d:8f:fc:77:d8:11:43:
48:22:84:2a:99:b6:85:49:12:c9:9e:5b:86:66:e8:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:25:F8:AE:B7:1C:8D:D3:D5:5A:08:91:1A:BE:0C:21:B0:46:28
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/sREl-K63HI3T1VoIkRq-DCGwRig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.0.0/21
31.14.50.0/23
31.193.176.0/21
37.72.160.0/21
37.148.176.0/21
46.21.224.0/20
62.182.56.0/21
77.73.96.0/21
77.241.80.0/20
79.174.128.0/21
83.217.64.0/19
87.238.160.0/21
88.151.240.0/21
89.36.74.0/23
89.42.54.0/23
89.44.166.0/23
93.115.168.0/23
94.176.98.0/23
176.62.160.0/20
178.208.32.0/19
185.2.52.0/22
185.18.8.0/22
185.76.236.0/22
185.86.16.0/22
185.111.196.0/22
185.162.28.0/22
185.175.196.0/22
185.190.84.0/22
188.93.96.0/21
188.93.152.0/21
188.208.36.0/23
188.211.170.0/23
193.111.95.0/24
193.239.210.0/23
194.26.24.0/24
194.150.224.0/23
194.165.51.0/24
195.13.56.0/23
195.47.215.0/24
195.234.184.0/24
217.19.224.0/20
217.21.176.0/20
IPv6:
2a00:1c98::/32
2a00:7000::/32
2a02:d08::/32
2a03:a800::/32
2a07:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
96:5b:87:16:52:aa:c9:3a:1e:4b:d9:1e:e5:3d:7e:f7:44:a6:
57:10:b4:e0:0b:17:9e:01:39:52:bf:3c:09:fd:da:99:25:97:
9b:f4:18:81:69:cc:18:fd:a5:4f:81:90:2c:d1:f4:9e:24:95:
2b:e4:12:58:a4:61:f5:bf:7a:b5:89:63:7c:a2:80:51:14:8e:
0a:4e:05:5e:68:27:b4:9a:85:c7:56:b6:d2:a0:fd:97:e2:97:
d6:02:69:39:e0:96:e3:c3:8f:25:69:e5:35:83:2b:6a:76:13:
48:6e:17:93:72:fb:94:9e:c6:1f:6f:44:e8:0c:41:00:45:f1:
17:38:fb:8b:df:20:25:17:74:1e:1c:11:37:b7:a2:7b:54:07:
66:a2:9c:fa:75:fa:71:bc:ac:c3:73:1b:90:6f:0a:3c:e9:a8:
ce:e1:4c:90:f4:aa:7f:ba:9c:b6:ca:59:66:c8:b3:af:df:05:
c0:9d:56:c9:1a:fc:6b:97:2a:d4:d6:2b:a5:0c:3d:a0:2d:3e:
de:96:f7:88:28:15:b2:8e:7e:44:c1:f9:69:ed:76:20:b6:b1:
1c:a7:65:06:e5:ed:d5:db:7f:79:78:b6:fb:50:ae:5e:3d:95:
cb:2b:f1:3f:f8:a1:f8:7e:aa:7d:a1:4a:91:c1:29:a1:ca:12:
df:ad:46:24
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgISAZUeTCrV2hJYXK51LldQXxRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjUwMjE5MTMwMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTExMjVmOGFlYjcxYzhkZDNkNTVhMDg5MTFhYmUwYzIxYjA0NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVxmtS5ee3+f21sF/jo8SgwH8Afk
ZSjRzX//lhy8MzAGpzIf73O1yoLrEBxm1jMvR+gDHv8sWZspGxdb7rYrancaWPsf
4Px3ILO1gQ7VUxNm6MayxjjPrCpjpYceq+U/hgFS8wneDOM7fJdIngqeVQhnKAOO
dbzRwj3iYsQT8HLT89wVasYHukzjD86e5sE2Otx3VWUNET9A3N2Y/BaTJEvGKYBf
Gz0FSjE7sNJbeeVThqUkb6c/bAt2oR7MoOBWgKkJh7HArc6v3SfBq17YwJBvFlsA
HhSedOO6P29jv+xdiFx4VwW6jT2P/HfYEUNIIoQqmbaFSRLJnluGZujXyQIDAQAB
o4IDMzCCAy8wHQYDVR0OBBYEFLERJfiutxyN09VaCJEavgwhsEYoMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvc1JFbC1LNjNISTNUMVZvSWtScS1EQ0d3UmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRwYIKwYBBQUHAQcBAf8EggE2MIIBMjCCAQMEAgABMIH8
AwQDBYYAAwQBHw4yAwQDH8GwAwQDJUigAwQDJZSwAwQELhXgAwQDPrY4AwQDTUlg
AwQETfFQAwQDT66AAwQFU9lAAwQDV+6gAwQDWJfwAwQBWSRKAwQBWSo2AwQBWSym
AwQBXXOoAwQBXrBiAwQEsD6gAwQFstAgAwQCuQI0AwQCuRIIAwQCuUzsAwQCuVYQ
AwQCuW/EAwQCuaIcAwQCua/EAwQCub5UAwQDvF1gAwQDvF2YAwQBvNAkAwQBvNOq
AwQAwW9fAwQBwe/SAwQAwhoYAwQBwpbgAwQAwqUzAwQBww04AwQAwy/XAwQAw+q4
AwQE2RPgAwQE2RWwMCkEAgACMCMDBQAqAByYAwUAKgBwAAMFACoCDQgDBQAqA6gA
AwUDKgfKgDANBgkqhkiG9w0BAQsFAAOCAQEAlluHFlKqyToeS9ke5T1+90SmVxC0
4AsXngE5Ur88Cf3amSWXm/QYgWnMGP2lT4GQLNH0niSVK+QSWKRh9b96tYljfKKA
URSOCk4FXmgntJqFx1a20qD9l+KX1gJpOeCW48OPJWnlNYMranYTSG4Xk3L7lJ7G
H29E6AxBAEXxFzj7i98gJRd0HhwRN7eie1QHZqKc+nX6cbysw3MbkG8KPOmozuFM
kPSqf7qctspZZsizr98FwJ1WyRr8a5cq1NYrpQw9oC0+3pb3iCgVso5+RMH5ae12
ILaxHKdlBuXt1dt/eXi2+1CuXj2VyyvxP/ih+H6qfaFKkcEpocoS361GJA==
-----END CERTIFICATE-----
Generated at Tue May 6 23:37:34 2025 by rpki-client