Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FOrAL74xaId5tKaEYv4NPHeEdPU.roa
File: FOrAL74xaId5tKaEYv4NPHeEdPU.roa (raw, json)
Hash identifier: 4C6AgiruElo2a5Rs0XPN5xmOmQdFsv+oW51Zq5UOkHE=
Subject key identifier: 14:EA:C0:2F:BE:31:68:87:79:B4:A6:84:62:FE:0D:3C:77:84:74:F5
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F2A8D376FD0B88965B8E9065467A0916
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FOrAL74xaId5tKaEYv4NPHeEdPU.roa
Signing time: Wed 21 May 2025 11:44:32 +0000
ROA not before: Wed 21 May 2025 11:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.205.160.0/19 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:a8:d3:76:fd:0b:88:96:5b:8e:90:65:46:7a:09:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14eac02fbe31688779b4a68462fe0d3c778474f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:5e:27:81:b1:20:71:f2:8d:a3:4d:b2:ce:
74:b8:c9:b4:79:cb:22:55:06:fb:45:b0:6b:97:9e:
5d:15:1e:57:22:76:2d:b2:12:d5:4e:d2:a0:36:c3:
9b:89:59:05:94:cf:cd:b3:c7:aa:f3:4d:94:e6:70:
07:6a:0d:cd:35:6f:77:5a:0f:e3:54:91:03:2d:80:
e7:ca:15:10:15:ef:04:15:84:3b:08:ed:91:ff:25:
7e:74:f1:0f:ee:3b:ee:56:ff:50:42:a2:9e:94:13:
c2:63:b5:5d:c3:b9:f3:f7:0c:a4:1c:54:fa:f7:98:
6d:9d:68:fc:a4:2d:02:2f:13:4d:ed:7d:c9:e0:71:
ec:62:1a:f1:ec:60:96:3f:6d:50:48:83:dc:6b:f4:
49:40:58:94:13:d4:91:e0:b8:0e:bf:0b:b2:b9:00:
a1:b0:a1:55:96:85:ea:ca:ca:39:71:7a:02:29:24:
f1:af:7a:f4:d8:5b:63:38:f8:e0:d5:35:7a:39:58:
dd:9d:95:66:24:98:ba:1f:1f:df:f2:59:78:62:0a:
e1:ac:e5:68:23:ad:98:f2:15:dc:1d:c2:b7:99:77:
58:f6:38:fb:6d:f9:ee:36:2c:64:6f:c8:ed:ad:e2:
00:62:1e:fd:14:f9:0c:ff:54:5e:76:4d:73:75:01:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:C0:2F:BE:31:68:87:79:B4:A6:84:62:FE:0D:3C:77:84:74:F5
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FOrAL74xaId5tKaEYv4NPHeEdPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
92.205.160.0/19
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
70:08:3e:fb:aa:32:c1:b4:31:5d:77:5f:e0:08:85:d3:c5:f9:
b6:35:ee:79:f8:09:78:d6:38:2b:7d:d5:6a:04:9e:66:11:89:
43:16:33:78:4a:b1:ff:27:56:03:e6:29:af:95:17:5f:b4:f1:
99:a0:97:d2:57:61:b3:e4:78:47:35:b4:a3:e8:7a:ce:59:79:
22:bd:75:7f:ee:09:fb:d4:79:61:8b:bf:6f:7b:2a:78:32:9b:
61:97:32:01:c1:30:47:bf:c2:b0:b5:1e:62:f1:6a:79:e6:7e:
e6:37:fd:08:4b:52:a7:fa:b5:25:d8:f6:e8:5e:bf:2a:f5:fb:
9c:42:f5:19:4a:c1:1c:4e:e6:0c:3f:88:61:8c:95:83:d0:8d:
cc:61:80:03:a8:b3:05:97:8f:26:48:45:11:0b:1e:a8:b1:8b:
b2:19:66:1f:41:75:ff:af:0a:64:d8:3f:3b:5b:90:24:09:cf:
2f:7e:3c:3b:ba:50:cf:18:ab:6a:dc:ca:fa:88:f0:52:97:4b:
ef:af:80:d3:2f:c6:95:09:b9:a6:f7:b4:2d:4d:72:32:5e:6d:
86:10:9b:31:fa:e6:a0:a3:a6:48:10:50:05:a2:ce:5f:20:29:
95:4b:09:88:61:05:34:22:32:f4:a4:44:e6:8a:fc:82:2b:00:
52:13:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:25:01 2025 by rpki-client