Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4ar-gQwXN24IBwUl-yOiL2jEt8c.roa
File: 4ar-gQwXN24IBwUl-yOiL2jEt8c.roa (raw, json)
Hash identifier: ejsL/XeUwW25ZhHVZygRCJyl7hhC+ge3P3Rq8d+hljY=
Subject key identifier: E1:AA:FE:81:0C:17:37:6E:08:07:05:25:FB:23:A2:2F:68:C4:B7:C7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019643DF0292818E3016A655D8C7995AA748
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4ar-gQwXN24IBwUl-yOiL2jEt8c.roa
Signing time: Thu 17 Apr 2025 13:10:10 +0000
ROA not before: Thu 17 Apr 2025 13:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.169.0/24 maxlen: 24
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.185.0/24 maxlen: 24
87.224.195.0/24 maxlen: 24
87.224.228.0/24 maxlen: 24
87.224.229.0/24 maxlen: 24
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.3.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.41.0/24 maxlen: 24
90.157.49.0/24 maxlen: 24
90.157.54.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.97.0/24 maxlen: 24
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
90.157.116.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.116.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.140.0/24 maxlen: 24
94.31.141.0/24 maxlen: 24
94.31.143.0/24 maxlen: 24
94.31.144.0/24 maxlen: 24
94.31.145.0/24 maxlen: 24
94.31.146.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.192.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.198.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.216.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.136.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.149.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.153.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.159.0/24 maxlen: 24
188.73.162.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.48.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:df:02:92:81:8e:30:16:a6:55:d8:c7:99:5a:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 17 13:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1aafe810c17376e08070525fb23a22f68c4b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:42:9e:ab:93:e1:22:0c:4d:f9:58:5f:4a:
20:0d:03:9c:3e:fb:ca:d2:a0:78:2e:2d:0f:32:58:
1c:33:c2:4d:38:75:8b:36:a1:84:c4:cd:2f:9a:4e:
67:7f:47:c5:dc:19:cb:03:12:fa:f8:82:06:7f:d4:
3c:09:79:d7:cb:55:01:69:c3:bc:f8:3d:06:cf:89:
22:47:1d:83:dc:db:a1:84:62:de:08:d3:ac:b1:09:
17:17:a0:a4:83:66:02:3e:47:42:09:49:d3:d3:76:
91:7d:d6:a7:9e:da:a8:84:ef:12:a7:75:cc:62:fe:
02:06:75:87:67:92:99:94:69:a9:93:86:c7:8a:07:
6a:c4:ab:45:2c:9b:c9:86:42:d8:78:28:b2:b2:93:
a0:e6:2b:85:d4:35:1c:04:e5:eb:d9:d9:bb:7d:bb:
ac:f8:01:5c:64:90:2b:ce:ef:4e:ec:b2:91:8a:19:
88:cf:30:3b:6c:a9:a1:37:7f:14:bc:e7:38:a1:59:
c6:0e:6b:ac:cb:d0:32:85:c8:bb:4f:fe:da:65:d1:
6e:89:a5:0c:35:bc:4e:be:7b:50:33:c6:55:e8:b4:
52:97:6f:07:8f:b7:b8:cc:a1:c6:73:a5:4c:36:ca:
58:44:00:56:91:fe:13:12:22:7d:4b:1a:ba:39:bf:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:FE:81:0C:17:37:6E:08:07:05:25:FB:23:A2:2F:68:C4:B7:C7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/4ar-gQwXN24IBwUl-yOiL2jEt8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.169.0/24
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.185.0/24
87.224.195.0/24
87.224.228.0/23
87.224.249.0/24
87.224.251.0/24
90.157.3.0/24
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.41.0/24
90.157.49.0/24
90.157.54.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.97.0/24
90.157.109.0-90.157.110.255
90.157.115.0-90.157.116.255
92.54.69.0/24
92.54.90.0/24
92.54.116.0/23
94.31.134.0-94.31.136.255
94.31.140.0/23
94.31.143.0-94.31.148.255
94.31.151.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.192.0-94.31.196.255
94.31.198.0/23
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.216.0/23
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.136.0/23
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/23
188.73.147.0/24
188.73.149.0/24
188.73.151.0/24
188.73.153.0-188.73.154.255
188.73.156.0/24
188.73.158.0/23
188.73.162.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.37.0/24
213.142.40.0/23
213.142.48.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1c:18:65:28:da:5a:ec:e8:ed:d2:54:c3:0a:75:ea:a3:74:
f0:a8:2e:c0:7e:f8:68:fb:be:71:d0:35:bf:de:ad:64:17:9f:
56:4b:07:48:25:21:10:be:28:7b:9b:ba:85:90:a4:0e:7f:ad:
72:1e:23:21:f1:0d:fc:00:67:df:b9:6c:33:82:d7:96:c9:97:
f1:03:d7:a4:b2:c8:4c:7a:eb:a4:6f:54:a9:50:15:95:48:c1:
6b:af:98:77:0c:59:29:d7:11:fa:f0:b7:fc:4b:62:14:e0:ea:
0c:cf:d1:0a:be:35:52:ea:47:1b:f1:d3:69:ee:d8:0e:62:87:
67:0a:31:34:5e:85:22:7f:a6:58:f6:7d:c3:c1:f8:9a:d1:38:
a7:18:4a:0f:50:69:af:57:e4:01:85:7a:3b:d9:c1:e7:f3:26:
2a:6c:f6:28:7f:e4:be:d2:c7:75:43:3a:34:e6:49:2e:4f:4f:
8f:6c:51:1b:25:f4:f8:da:3e:43:90:ec:11:29:ab:19:31:8a:
0c:87:43:4f:79:8e:be:5b:47:24:f6:68:c3:96:61:25:34:00:
d6:78:6b:01:6b:97:b4:82:2f:84:e3:42:9b:1a:26:4a:65:1c:
a5:0f:77:7f:d5:92:6d:7d:93:30:67:a7:37:3d:69:be:10:f4:
05:17:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:31:42 2025 by rpki-client