Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4e9wfBX4OStx2VwFuGInVV3RNK4.roa
File: 4e9wfBX4OStx2VwFuGInVV3RNK4.roa (raw, json)
Hash identifier: zyqpse50NZ+mXgV2Q5UFFHcvAXCmzoKxK+GymZLtZ3Q=
Subject key identifier: E1:EF:70:7C:15:F8:39:2B:71:D9:5C:05:B8:62:27:55:5D:D1:34:AE
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F1CF85F456DC14A8325617339EFA3AC5
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4e9wfBX4OStx2VwFuGInVV3RNK4.roa
Signing time: Wed 21 May 2025 07:47:11 +0000
ROA not before: Wed 21 May 2025 07:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26496
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:cf:85:f4:56:dc:14:a8:32:56:17:33:9e:fa:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 07:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1ef707c15f8392b71d95c05b86227555dd134ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:18:2c:41:21:48:e9:05:af:50:37:7c:ad:
67:cf:7c:25:c1:ee:a4:67:70:ff:93:b5:e5:5b:75:
e3:2a:10:d7:be:04:98:4d:91:db:57:24:a9:02:5a:
ba:4b:ab:48:e8:36:b6:fb:1c:89:16:d3:86:e1:c2:
a2:d9:30:e4:1f:3e:f3:d5:4d:6d:a2:e5:31:07:8f:
49:d7:70:ee:f3:c0:64:b4:57:96:26:5b:cd:54:5d:
69:36:6b:ad:fd:24:35:9f:68:c7:4f:a0:45:62:8b:
f9:b1:48:72:19:2a:f1:ba:1c:4c:1b:49:c2:c7:b4:
0c:15:6a:57:4c:9a:f8:f9:80:40:7b:e5:36:86:2d:
f4:8c:b3:3a:4b:58:e4:dd:93:61:bf:bb:af:9a:58:
33:72:53:b1:0a:5e:c3:ec:65:a8:6a:6f:a2:0d:59:
0f:95:bf:d3:5d:ab:8c:a9:97:93:d8:47:02:46:f1:
d1:3d:7e:a9:70:5c:2b:85:d6:de:60:56:a5:0a:ae:
42:28:08:74:c8:77:0b:20:15:c9:8f:25:77:a5:18:
e1:b2:f7:fc:1a:84:6b:7a:a4:cd:5b:0c:91:b9:d2:
45:fb:5d:41:47:b3:ce:fd:63:ed:23:65:d4:c1:25:
36:2d:8c:e5:4d:a9:ac:0d:7a:5a:06:5e:2f:b1:4e:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:70:7C:15:F8:39:2B:71:D9:5C:05:B8:62:27:55:5D:D1:34:AE
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4e9wfBX4OStx2VwFuGInVV3RNK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
92:89:b6:e8:e2:53:ef:9c:17:81:e9:86:3e:59:7b:74:a2:ec:
2c:75:42:bd:41:95:a8:29:e9:08:8e:0f:b4:ab:59:12:91:8e:
42:30:08:12:39:dc:83:6f:3f:ac:bf:fa:f7:7d:14:95:0c:65:
f4:94:50:ed:8e:4d:23:90:94:9f:05:f5:c5:84:ef:df:17:b8:
de:e4:db:8f:9e:77:6c:d4:74:16:8a:ce:b9:ac:0f:28:f8:47:
ee:ba:8d:ed:87:f3:63:1c:c1:b2:71:47:62:43:4c:a4:f3:c1:
f1:5f:f9:7d:ba:1d:12:e4:4e:e3:ea:19:b2:b5:e5:aa:37:53:
a7:3f:81:8c:2d:af:30:ef:46:9b:82:d1:2f:fd:5f:c7:f2:77:
45:c0:01:4a:91:b6:c2:1d:3b:cd:b5:6a:44:b7:ba:27:26:80:
47:a5:bd:61:7e:bb:09:70:d1:c9:5d:94:6f:a8:95:db:11:b0:
c5:5d:8e:dc:97:0e:6a:0e:31:34:2a:66:17:bd:90:df:5a:b7:
37:33:07:9a:3f:93:68:88:7c:6d:e2:59:e9:db:73:2e:dc:74:
96:c9:f7:87:d4:71:b1:d5:0c:14:4f:a9:ae:45:01:dc:fc:84:
66:df:b2:f1:8d:60:7b:14:1c:d1:78:ac:36:90:19:95:82:2b:
5f:db:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:02 2025 by rpki-client