Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/HeGEUezTiTFx4FarAAGSN3ffARw.roa
File: HeGEUezTiTFx4FarAAGSN3ffARw.roa (raw, json)
Hash identifier: F5QZA0u9ZOmGOQ27kdJl+TxAyd/9FRyisa7DYubvjzI=
Subject key identifier: 1D:E1:84:51:EC:D3:89:31:71:E0:56:AB:00:01:92:37:77:DF:01:1C
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 019425FD45CDDA7A47789EEA447C0A4446FA
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/HeGEUezTiTFx4FarAAGSN3ffARw.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/44 maxlen: 44
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 08 Jan 2025 09:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:45:cd:da:7a:47:78:9e:ea:44:7c:0a:44:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de18451ecd3893171e056ab0001923777df011c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:e5:0d:96:14:01:a9:0e:a6:89:51:05:9a:
8a:7e:35:7e:bd:79:3c:c5:50:5b:82:98:f6:61:1a:
d5:44:89:96:2f:4f:7a:50:78:be:66:b0:01:0d:a5:
a0:6f:9b:50:82:bb:88:ac:2e:12:08:1e:e2:fa:49:
24:17:b2:d1:77:27:d2:53:5d:74:64:30:23:ae:4d:
69:b3:47:bf:84:50:02:6c:e3:c1:03:56:fe:40:0a:
6a:38:0b:5e:fc:58:68:36:f2:77:a0:4a:b1:f7:59:
79:05:a5:cf:53:74:76:36:5d:39:6e:1d:f1:b5:1b:
82:74:46:89:01:d0:56:5e:6a:31:88:4b:43:6b:ca:
ec:4e:87:6f:66:a2:c2:ab:7b:79:cb:c2:cc:20:88:
30:68:f5:78:88:ec:14:9b:9e:72:e0:e4:d5:c8:2c:
9d:12:15:06:c7:52:82:a8:26:d9:95:90:13:b3:ca:
da:77:74:d4:ab:08:3c:36:ba:03:c7:7e:ec:2f:6c:
14:8c:b3:bc:c7:c3:cc:d3:c3:3d:76:39:e5:4c:dd:
e3:64:af:1d:60:b3:64:e5:87:55:36:38:72:47:21:
af:7b:0b:3f:3e:1f:7f:1d:b8:c9:4f:85:b2:8f:39:
24:3d:f7:f9:bc:77:45:fa:7b:94:d0:7c:6f:16:1c:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:84:51:EC:D3:89:31:71:E0:56:AB:00:01:92:37:77:DF:01:1C
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/HeGEUezTiTFx4FarAAGSN3ffARw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:05:3a:f8:de:a9:c9:62:6c:68:5b:b8:d9:20:31:ea:84:f2:
56:d1:c9:25:dd:1d:8a:99:4d:09:a9:21:55:59:cb:f9:b4:f4:
50:ce:61:9e:59:35:e3:4d:b6:7a:99:04:e3:af:e1:d7:59:fe:
55:15:c5:b5:e8:3a:ca:c4:6a:43:f7:25:13:32:81:92:33:f0:
89:e3:c7:cf:1e:d9:fe:36:c7:82:03:c2:ae:c9:68:ec:50:5a:
2b:f9:49:ee:a0:87:5c:19:a6:5c:97:4a:78:ef:5b:c8:b1:00:
13:db:dd:68:04:91:02:63:c1:42:81:08:21:68:70:2d:0a:bc:
60:46:84:c5:58:81:79:c2:cb:41:5b:1a:87:3a:06:15:d5:4e:
99:ac:bd:be:8a:52:3c:3e:6e:25:b8:6a:ec:69:bb:8e:c1:94:
66:80:62:4f:f8:ca:2b:8a:78:48:29:79:08:a0:ec:af:b3:1f:
f4:ac:66:63:9d:69:d5:17:ec:66:30:cf:40:70:0f:5e:25:43:
42:22:50:50:06:69:98:6d:d7:08:c5:5f:f0:c4:c2:4d:1d:c5:
e9:b7:7d:c5:5a:62:d0:08:4e:0f:20:3b:09:99:92:ce:02:99:
b7:1f:e3:05:39:ec:08:9c:52:ab:7f:37:7b:b8:0f:23:05:50:
4a:53:72:9b
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQl/UXN2npHeJ7qRHwKREb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjUwMTAyMDc0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGUxODQ1MWVjZDM4OTMxNzFlMDU2YWIwMDAxOTIzNzc3ZGYwMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdDlDZYUAakOpolRBZqKfjV+vXk8
xVBbgpj2YRrVRImWL096UHi+ZrABDaWgb5tQgruIrC4SCB7i+kkkF7LRdyfSU110
ZDAjrk1ps0e/hFACbOPBA1b+QApqOAte/FhoNvJ3oEqx91l5BaXPU3R2Nl05bh3x
tRuCdEaJAdBWXmoxiEtDa8rsTodvZqLCq3t5y8LMIIgwaPV4iOwUm55y4OTVyCyd
EhUGx1KCqCbZlZATs8rad3TUqwg8NroDx37sL2wUjLO8x8PM08M9djnlTN3jZK8d
YLNk5YdVNjhyRyGvews/Ph9/HbjJT4WyjzkkPff5vHdF+nuU0HxvFhwtWwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFB3hhFHs04kxceBWqwABkjd33wEcMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvSGVHRVVlelRpVEZ4NEZhckFBR1NOM2ZmQVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDHwswAwQF
JbogAwQEUEygAwQCZxEAAwQBZxd8AwQCZ8dYAwQCZ+FIAwQF1EZgMA0EAgACMAcD
BQMqBH+AMA0GCSqGSIb3DQEBCwUAA4IBAQCkBTr43qnJYmxoW7jZIDHqhPJW0ckl
3R2KmU0JqSFVWcv5tPRQzmGeWTXjTbZ6mQTjr+HXWf5VFcW16DrKxGpD9yUTMoGS
M/CJ48fPHtn+NseCA8KuyWjsUFor+UnuoIdcGaZcl0p471vIsQAT291oBJECY8FC
gQghaHAtCrxgRoTFWIF5wstBWxqHOgYV1U6ZrL2+ilI8Pm4luGrsabuOwZRmgGJP
+MorinhIKXkIoOyvsx/0rGZjnWnVF+xmMM9AcA9eJUNCIlBQBmmYbdcIxV/wxMJN
HcXpt33FWmLQCE4PIDsJmZLOApm3H+MFOewInFKrfzd7uA8jBVBKU3Kb
-----END CERTIFICATE-----
Generated at Sun May 11 03:06:09 2025 by rpki-client