Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/meoubuqSqInUL9SNZ-TTpU5IaCk.roa
File: meoubuqSqInUL9SNZ-TTpU5IaCk.roa (raw, json)
Hash identifier: IHSjGpA7xROT2QiAYiKbsjTHzeXjEsRgHisajEVIfPw=
Subject key identifier: 99:EA:2E:6E:EA:92:A8:89:D4:2F:D4:8D:67:E4:D3:A5:4E:48:68:29
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019421444B69887D00229F10EA055EA10601
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/meoubuqSqInUL9SNZ-TTpU5IaCk.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
213.133.96.0/19 maxlen: 24
213.239.192.0/18 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 10:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4b:69:88:7d:00:22:9f:10:ea:05:5e:a1:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ea2e6eea92a889d42fd48d67e4d3a54e486829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:9b:0b:17:ad:6b:ce:e9:43:92:11:9b:c2:
d4:e3:a1:68:33:f3:58:43:99:29:84:71:aa:29:31:
e0:07:f6:cf:f7:28:76:8f:12:68:ff:b3:23:71:05:
0d:d4:bc:52:bf:5e:f3:a9:2b:dc:41:6d:1d:6b:aa:
f4:a2:4b:86:e8:25:40:59:d0:a1:9d:fc:7a:65:51:
43:86:7b:db:74:36:4b:5c:f8:93:a5:0b:d7:ad:9d:
86:13:96:83:09:45:21:9a:23:3a:6e:63:df:d4:2b:
99:bd:4b:ff:89:2e:6c:a4:2a:26:87:f5:bd:c3:ce:
66:03:7e:51:b1:aa:cb:88:58:ed:73:ce:f5:a5:85:
b6:b3:1b:9b:de:de:f5:c1:ea:b9:2c:0a:34:96:42:
49:a5:b2:f5:f1:5b:50:73:1a:cf:0a:e2:41:0d:37:
4e:a4:4e:f5:aa:81:db:29:1e:b1:6e:7c:73:ed:16:
e0:69:7b:96:df:60:f0:3c:48:97:f9:29:ef:76:62:
e6:a2:5b:33:4c:8f:68:b0:ed:70:47:b2:81:84:16:
76:a2:93:75:a8:a8:6d:c6:4d:ad:cf:27:fb:27:79:
bc:63:27:fc:c4:2e:89:d9:5d:ee:aa:33:84:c0:1c:
e9:c6:c8:96:2f:b7:ec:68:cf:75:24:77:50:c5:70:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:2E:6E:EA:92:A8:89:D4:2F:D4:8D:67:E4:D3:A5:4E:48:68:29
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/meoubuqSqInUL9SNZ-TTpU5IaCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
46:e8:fd:4d:00:8b:9a:89:52:5a:a3:00:6b:84:d7:91:47:a7:
36:a0:3f:cd:d8:e2:39:3e:4a:59:59:df:d8:98:2f:63:33:e1:
1f:93:f6:a3:34:40:df:0c:80:e7:4b:99:e5:90:bc:c2:bf:40:
39:03:96:94:59:5e:78:7f:5d:9f:dc:ad:9d:eb:12:6d:79:3b:
94:84:d3:15:b0:21:73:bd:e6:62:33:d0:24:d2:98:03:6a:ed:
89:d1:22:0b:d2:39:19:85:69:7e:2f:58:93:e4:67:0e:db:78:
28:7c:d7:64:4f:68:a3:76:2d:7b:c7:48:33:71:25:bf:97:66:
a3:b8:eb:5d:10:65:9b:c8:2d:7d:de:30:19:96:85:65:5a:c3:
9e:b9:f2:e7:75:69:93:e7:08:3d:d0:19:e9:14:11:9f:99:60:
9e:ee:68:a9:f4:12:d1:4f:9a:d7:25:89:98:ea:6b:59:7b:b4:
64:10:76:3b:bd:24:00:7e:09:a4:33:41:20:5c:af:b9:23:c2:
c5:f1:f8:e4:96:fe:6c:82:5d:d7:4f:b1:a3:26:00:a6:c8:e2:
af:99:a7:fe:ea:6d:c3:d6:50:c0:97:80:b0:4a:0c:43:af:fe:
70:e3:bd:1b:07:cc:c4:19:19:6b:c6:8a:57:76:ed:0b:38:1e:
be:00:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:22:26 2025 by rpki-client