Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MQphq6xLx2w5qlOS6MGM_tYbFuY.roa
File: MQphq6xLx2w5qlOS6MGM_tYbFuY.roa (raw, json)
Hash identifier: uTWlTFkFDHY0BSj54klAPdkAMhWs1C9xnHqohbFJQLA=
Subject key identifier: 31:0A:61:AB:AC:4B:C7:6C:39:AA:53:92:E8:C1:8C:FE:D6:1B:16:E6
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F296D8726B5F05BE6D4FBE64BD8D6C4E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MQphq6xLx2w5qlOS6MGM_tYbFuY.roa
Signing time: Wed 21 May 2025 11:24:54 +0000
ROA not before: Wed 21 May 2025 11:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.205.160.0/19 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:96:d8:72:6b:5f:05:be:6d:4f:be:64:bd:8d:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310a61abac4bc76c39aa5392e8c18cfed61b16e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:1c:b1:d3:0d:dd:79:ba:28:8e:45:7a:7e:
da:03:fd:c4:db:99:ff:09:94:3d:bc:62:1d:5b:1b:
70:88:d7:38:10:ea:44:8a:82:4a:33:fc:ab:ff:b2:
82:2d:a6:2b:1b:c4:1a:69:6d:c3:dc:f2:f7:10:19:
48:66:73:e4:eb:cf:ae:45:17:c7:e4:c8:b8:8d:ee:
5e:18:ba:b8:0d:a6:65:2b:1c:c1:90:44:19:da:59:
c3:fc:27:c3:1b:57:af:23:84:a4:28:d9:72:a5:4a:
02:ae:81:22:e1:42:48:21:83:f4:40:13:01:01:a5:
99:58:32:af:38:f4:10:97:cb:04:99:c0:aa:af:38:
5d:93:b0:e8:47:21:fd:6e:8a:cd:b6:bf:d3:05:10:
85:b9:b2:a7:13:28:69:b2:07:9d:46:4d:ca:6a:69:
3b:b0:ee:84:b8:3e:5c:4a:7d:f9:99:73:17:2e:e2:
0c:50:da:1b:b4:52:6b:81:8e:1a:07:67:38:d5:be:
0b:d9:3d:36:05:3c:f6:09:3c:16:d1:ce:e1:94:b7:
97:d6:f7:9e:df:6f:bb:11:3f:50:5f:60:92:84:dd:
8f:5a:20:1d:39:23:3d:5e:40:dd:d7:8d:3b:8c:2a:
af:49:b1:c5:72:a4:d9:df:00:f9:21:29:9d:47:0e:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:61:AB:AC:4B:C7:6C:39:AA:53:92:E8:C1:8C:FE:D6:1B:16:E6
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MQphq6xLx2w5qlOS6MGM_tYbFuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
92.205.160.0/19
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
99:3d:44:1e:ac:af:3b:e4:4d:ef:bf:dc:35:1b:f3:7f:f0:31:
7c:f3:a5:c1:2d:89:ab:7e:6e:62:e0:9d:73:64:b4:ab:28:92:
e0:fc:1a:3b:82:01:07:0d:6b:04:d8:4b:63:d8:8c:2a:46:7b:
f2:b4:52:0b:48:af:82:6d:8b:db:53:db:ef:08:d4:28:59:32:
4b:cf:ab:05:5a:fb:f0:5d:5b:14:6a:5f:20:77:41:af:12:df:
eb:b7:a0:da:bb:aa:58:4a:5c:85:35:79:a7:d0:e1:91:9c:40:
f1:ed:19:85:50:69:a2:66:e4:d1:9c:2e:7f:e5:a2:1d:b4:3b:
b6:ab:bd:f7:32:e7:c9:0e:dc:e3:ca:7c:12:c3:7b:2b:63:57:
b7:ac:2f:40:3d:6b:15:83:56:ec:c2:cd:12:72:19:99:8f:8e:
38:e2:fe:d5:2a:cf:b1:dd:64:d0:6c:85:62:a9:5b:57:49:39:
ec:0a:b0:c6:8c:ce:01:ee:c9:65:0e:60:e7:6d:ba:dd:d4:43:
35:7d:a8:7d:42:de:11:b6:17:ce:10:08:a8:50:2e:b6:83:74:
9f:d9:3e:89:a4:76:05:8e:ee:a2:04:63:75:df:d7:1f:14:be:
a6:d4:78:86:11:00:3f:c9:60:94:89:c1:44:8a:26:65:c1:34:
c7:ec:74:79
-----BEGIN CERTIFICATE-----
MIII3jCCB8agAwIBAgISAZbylthya18Fvm1PvmS9jWxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwNTIxMTEyNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBhNjFhYmFjNGJjNzZjMzlhYTUzOTJlOGMxOGNmZWQ2MWIxNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrccsdMN3Xm6KI5Fen7aA/3E25n/
CZQ9vGIdWxtwiNc4EOpEioJKM/yr/7KCLaYrG8QaaW3D3PL3EBlIZnPk68+uRRfH
5Mi4je5eGLq4DaZlKxzBkEQZ2lnD/CfDG1evI4SkKNlypUoCroEi4UJIIYP0QBMB
AaWZWDKvOPQQl8sEmcCqrzhdk7DoRyH9borNtr/TBRCFubKnEyhpsgedRk3Kamk7
sO6EuD5cSn35mXMXLuIMUNobtFJrgY4aB2c41b4L2T02BTz2CTwW0c7hlLeX1vee
32+7ET9QX2CShN2PWiAdOSM9XkDd1407jCqvSbHFcqTZ3wD5ISmdRw46iQIDAQAB
o4IF6jCCBeYwHQYDVR0OBBYEFDEKYausS8dsOapTkujBjP7WGxbmMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvTVFwaHE2eEx4Mnc1cWxPUzZNR01fdFliRnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIID/gYIKwYBBQUHAQcBAf8EggPtMIID6TCCA44EAgABMIID
hgMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEBFBDEAMEBFBawDAMAwQHUO2AAwQAUO2CAwQBUO2EMAwD
BABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDtwgMEAFDt1AMEAVDt
1gMEAVDt+DALAwQAUO37AwMBUOwDBARQ9jADBARRFUAwCwMDAFOpAwQEU6kgAwQC
U6k0AwQBVRkQAwQCVRmoMAsDAwFX5gMEAlfmIDAMAwQDV+YoAwQBV+YwMAwDBAJX
5jwDBABX5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZMAwQBV+ZQMAwDBAJX5lQDBAVX
5kADBAJX5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgMEBVhQwAMEBFttAAMEA1v6QDAM
AwQEW/pQAwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb+gADBANcKxAwDAMEB1wzgAME
A1wzkAMEA1wzoAMEAFwzqgMEAlwztAMEBFw8cAMEBVzNAAMEBVzNoAMEA120mAME
A1276AMEBV6IIAMEA21EIAMEBW1oQAMEBG3vMAMEA40AEAMEBJL/IDALAwMCsBwD
BAOwHBAwDAMEBbAcIAMEArAcOAMEALAcPgMEA7Ag4AMEA7DdKDAMAwQGsk1AAwQD
sk1QMAwDBAWyTWADBAOyTXADBACyTXwDBAK5AoADBAK5B/gDBAK5FWQDBAK5ItQD
BAK5VTADBAK5i0gDBAO8XQgDBAW8eSADBADBEREDBADBimADBAHCkcADBAHDidQD
BALD4WgwDAMEANQooQMEAdQopAMEANQopzAMAwQA1CipAwQB1CisMAwDBADUKLED
BADUKLQDBAHUKLgwDAMEANQouwMEBtQogAMEBdQwQAMEBdRDwAMEBNkI8AMEA9lz
gDAMAwQA2XONAwQE2XOAMAwDBADZc5EDBALZc5ADBAPZc5gwDAMEANl3MQMEANl3
MgMEANl3NgMEANl3ODAMAwQF2aygAwQA2ayiAwQA2aykAwQF2cegMFUEAgACME8D
BwAgAQZ8AwgDBQAgARUgAwUAIAFNCAMFACoAEVgDBQMqABFoAwUAKgAeeAMFACoB
BIgDBQAqAgToAwUAKgIHGAMFACoCRsADBQIqBE/AMA0GCSqGSIb3DQEBCwUAA4IB
AQCZPUQerK875E3vv9w1G/N/8DF886XBLYmrfm5i4J1zZLSrKJLg/Bo7ggEHDWsE
2Etj2IwqRnvytFILSK+CbYvbU9vvCNQoWTJLz6sFWvvwXVsUal8gd0GvEt/rt6Da
u6pYSlyFNXmn0OGRnEDx7RmFUGmiZuTRnC5/5aIdtDu2q733MufJDtzjynwSw3sr
Y1e3rC9APWsVg1bsws0SchmZj4444v7VKs+x3WTQbIViqVtXSTnsCrDGjM4B7sll
DmDnbbrd1EM1fah9Qt4RthfOEAioUC62g3Sf2T6JpHYFju6iBGN139cfFL6m1HiG
EQA/yWCUicFEiiZlwTTH7HR5
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:46:06 2025 by rpki-client