Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/C4t445jjJFcY1U1BTfCzeQs2mH0.roa
File: C4t445jjJFcY1U1BTfCzeQs2mH0.roa (raw, json)
Hash identifier: YONQkBuu3nwLMtGd3QbbcDOOQrKfzyfN8xUjofauTsU=
Subject key identifier: 0B:8B:78:E3:98:E3:24:57:18:D5:4D:41:4D:F0:B3:79:0B:36:98:7D
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01900AE406CE2283CDE67FA9BA20A19ED4EB
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/C4t445jjJFcY1U1BTfCzeQs2mH0.roa
Signing time: Wed 12 Jun 2024 05:20:34 +0000
ROA not before: Wed 12 Jun 2024 05:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 2.57.88.0/23 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.91.0/24 maxlen: 24
31.170.160.0/22 maxlen: 24
31.170.164.0/23 maxlen: 24
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 24
31.220.16.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.20.0/23 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.48.0/20 maxlen: 24
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.108.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
45.13.132.0/23 maxlen: 23
45.13.134.0/23 maxlen: 23
45.13.252.0/23 maxlen: 23
45.13.254.0/23 maxlen: 23
45.87.80.0/22 maxlen: 22
45.93.136.0/22 maxlen: 22
93.188.160.0/21 maxlen: 21
153.92.1.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.3.0/24 maxlen: 24
153.92.4.0/23 maxlen: 24
153.92.6.0/23 maxlen: 23
153.92.6.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.8.0/21 maxlen: 21
153.92.8.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
156.67.208.0/20 maxlen: 20
185.28.20.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
194.11.154.0/23 maxlen: 23
194.11.214.0/23 maxlen: 23
195.110.58.0/23 maxlen: 23
212.1.208.0/21 maxlen: 21
212.1.208.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.211.0/24 maxlen: 24
212.1.212.0/22 maxlen: 22
212.1.212.0/24 maxlen: 24
212.1.215.0/24 maxlen: 24
2a02:4780::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:28::/48 maxlen: 48
2a02:4780:29::/48 maxlen: 48
2a02:4780:2a::/48 maxlen: 48
2a02:4780:2b::/48 maxlen: 48
2a02:4780:2c::/48 maxlen: 48
2a02:4780:2d::/48 maxlen: 48
2a02:4780:2e::/48 maxlen: 48
2a02:4780:2f::/48 maxlen: 48
2a02:4780:30::/48 maxlen: 48
2a02:4780:31::/48 maxlen: 48
2a02:4780:32::/48 maxlen: 48
2a02:4780:33::/48 maxlen: 48
2a02:4780:34::/48 maxlen: 48
2a02:4780:35::/48 maxlen: 48
2a02:4780:36::/48 maxlen: 48
2a02:4780:37::/48 maxlen: 48
2a02:4780:38::/48 maxlen: 48
2a02:4780:39::/48 maxlen: 48
2a02:4780:3a::/48 maxlen: 48
2a02:4780:3b::/48 maxlen: 48
2a02:4780:3c::/48 maxlen: 48
2a02:4780:3d::/48 maxlen: 48
2a02:4780:3e::/48 maxlen: 48
2a02:4780:84::/48 maxlen: 48
2a02:4780:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jun 2024 05:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0a:e4:06:ce:22:83:cd:e6:7f:a9:ba:20:a1:9e:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jun 12 05:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8b78e398e3245718d54d414df0b3790b36987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:96:f4:9b:23:bf:60:5a:b9:c5:e8:b0:9d:
8b:08:4b:9a:7b:9c:4a:b4:27:4a:59:fc:78:29:c0:
83:c0:59:e9:21:8a:e8:36:91:0d:55:42:ab:81:50:
46:6e:2e:a8:8f:f1:73:ce:9b:d6:9d:7e:b9:3d:7b:
a1:b1:34:2b:ec:67:5e:e7:9f:48:b5:d7:50:55:c4:
f6:ac:3f:68:f1:69:77:27:cc:77:93:f5:37:6a:af:
e3:46:a3:b4:3b:0b:4c:8d:2b:cb:bb:ac:9d:ba:9e:
4a:62:a5:65:4a:e0:e4:28:f5:9f:49:6d:8a:a5:d8:
15:fc:83:61:ab:63:6e:6f:48:87:74:54:b4:a3:b9:
8e:d6:c9:4b:88:98:6d:f5:2a:9d:da:e5:cc:a6:bf:
f9:f9:90:eb:40:0d:99:d8:a2:5d:e6:f7:c6:4b:7a:
c3:cd:ae:01:4a:36:d2:94:fa:d9:a9:01:fb:8e:d4:
c7:32:40:38:26:f5:b2:9d:93:ec:c3:79:f5:53:43:
c3:22:c6:dc:7c:41:ec:88:e2:02:5f:c2:bc:13:a9:
75:33:f5:de:ba:84:1b:81:94:94:03:af:7e:06:03:
fd:5b:1f:76:80:84:7f:e8:93:f8:7a:ff:25:06:92:
5c:bc:f2:36:32:4e:f3:c0:31:fb:26:61:ff:f5:8e:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:78:E3:98:E3:24:57:18:D5:4D:41:4D:F0:B3:79:0B:36:98:7D
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/C4t445jjJFcY1U1BTfCzeQs2mH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
153.92.1.0-153.92.15.255
156.67.208.0/20
185.28.20.0/22
185.77.96.0/23
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:3e:ffff:ffff:ffff:ffff:ffff
2a02:4780:84::/47
Signature Algorithm: sha256WithRSAEncryption
68:b7:9e:57:5f:d1:bb:c7:ab:a1:71:72:49:99:3b:5d:a6:42:
48:49:29:36:8a:ef:ba:cf:79:df:1e:c7:d0:08:0a:67:70:f1:
65:fa:bc:a9:28:c9:ed:75:25:0e:60:d4:bc:4a:0f:80:4f:5a:
f1:31:12:01:82:b9:26:d4:bc:05:6c:63:76:cd:56:da:4a:d0:
a6:e4:88:d1:db:07:db:7b:16:c2:2e:f5:2e:30:5f:d5:7c:b1:
84:a1:08:80:1c:a6:e3:16:97:f3:85:64:5b:c8:c8:8f:42:a6:
6e:09:f6:21:aa:22:af:16:8a:4d:d3:d9:01:d0:d0:3c:2c:de:
f3:dd:5c:83:44:91:36:ce:71:ac:59:6a:17:20:fc:e5:c6:fc:
20:0b:82:06:0b:bc:e6:19:18:25:cb:e5:79:e4:fa:f4:8f:ea:
e2:9c:8b:f9:3f:5e:e2:fd:c2:c1:af:42:e7:ae:52:45:14:0f:
88:3c:80:04:b1:0b:4c:36:9d:93:d5:16:78:e3:02:5c:7d:3a:
91:ef:82:a7:3f:30:c1:56:9d:ab:63:c9:8b:57:d5:47:58:48:
15:ac:72:88:32:3d:22:f8:68:fc:2c:36:20:37:bc:72:6e:45:
68:09:3b:b6:96:64:c1:08:e1:d7:71:99:c3:13:83:9f:ff:02:
a4:4a:62:47
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZAK5AbOIoPN5n+puiChntTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjQwNjEyMDUyMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjhiNzhlMzk4ZTMyNDU3MThkNTRkNDE0ZGYwYjM3OTBiMzY5ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqW9Jsjv2BaucXosJ2LCEuae5xK
tCdKWfx4KcCDwFnpIYroNpENVUKrgVBGbi6oj/FzzpvWnX65PXuhsTQr7Gde559I
tddQVcT2rD9o8Wl3J8x3k/U3aq/jRqO0OwtMjSvLu6ydup5KYqVlSuDkKPWfSW2K
pdgV/INhq2Nub0iHdFS0o7mO1slLiJht9Sqd2uXMpr/5+ZDrQA2Z2KJd5vfGS3rD
za4BSjbSlPrZqQH7jtTHMkA4JvWynZPsw3n1U0PDIsbcfEHsiOICX8K8E6l1M/Xe
uoQbgZSUA69+BgP9Wx92gIR/6JP4ev8lBpJcvPI2Mk7zwDH7JmH/9Y53CwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFAuLeOOY4yRXGNVNQU3ws3kLNph9MB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvQzR0NDQ1ampKRmNZMVUxQlRmQ3plUXMybUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszB6BAIAATB0AwQCAjlY
AwQDH6qgAwQDH9wQAwQEH9wwAwQDH9xoAwQCLQ2EAwQCLQ38AwQCLVdQAwQCLV2I
AwQDXbygMAwDBACZXAEDBASZXAADBAScQ9ADBAK5HBQDBAG5TWADBAHCC5oDBAHC
C9YDBAHDbjoDBAPUAdAwNQQCAAIwLzAQAwUHKgJHgAMHACoCR4AABjASAwcDKgJH
gAAIAwcAKgJHgAA+AwcBKgJHgACEMA0GCSqGSIb3DQEBCwUAA4IBAQBot55XX9G7
x6uhcXJJmTtdpkJISSk2iu+6z3nfHsfQCApncPFl+rypKMntdSUOYNS8Sg+AT1rx
MRIBgrkm1LwFbGN2zVbaStCm5IjR2wfbexbCLvUuMF/VfLGEoQiAHKbjFpfzhWRb
yMiPQqZuCfYhqiKvFopN09kB0NA8LN7z3VyDRJE2znGsWWoXIPzlxvwgC4IGC7zm
GRgly+V55Pr0j+rinIv5P17i/cLBr0LnrlJFFA+IPIAEsQtMNp2T1RZ44wJcfTqR
74KnPzDBVp2rY8mLV9VHWEgVrHKIMj0i+Gj8LDYgN7xybkVoCTu2lmTBCOHXcZnD
E4Of/wKkSmJH
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:40 2025 by rpki-client