Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MS2MLIjL7dB1XulLMx43IHao4JI.roa
File: MS2MLIjL7dB1XulLMx43IHao4JI.roa (raw, json)
Hash identifier: qToZhei63WNBU45XUINm6InBX2Rglom4LKeVkZn7vZ8=
Subject key identifier: 31:2D:8C:2C:88:CB:ED:D0:75:5E:E9:4B:33:1E:37:20:76:A8:E0:92
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F296DBCFD938C43D699E6792B68C38A7
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MS2MLIjL7dB1XulLMx43IHao4JI.roa
Signing time: Wed 21 May 2025 11:24:54 +0000
ROA not before: Wed 21 May 2025 11:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26496
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:96:db:cf:d9:38:c4:3d:69:9e:67:92:b6:8c:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=312d8c2c88cbedd0755ee94b331e372076a8e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:d5:08:ff:d1:c3:dd:e1:7e:b8:22:e2:45:
e1:88:13:dc:e2:50:03:2e:f9:44:50:5a:42:ac:8f:
b4:73:f4:54:d2:de:d3:05:5f:e6:ae:4b:de:a7:a9:
ee:5b:0b:bf:99:3e:f8:e1:6c:1b:57:a5:25:4d:d8:
f2:d7:c2:db:57:0c:db:f5:1f:81:bc:b5:6d:b0:22:
fe:bf:8d:15:d7:ca:c5:5c:44:13:4a:ed:20:f1:3b:
74:c5:78:da:d3:7b:ad:4d:90:45:7a:66:5b:ce:0c:
21:7e:42:ef:f1:ef:a4:8b:78:05:d1:1e:4f:14:2f:
f1:29:ed:a4:cd:10:8c:d8:36:4b:4b:9b:ef:a4:08:
a7:23:69:42:3a:34:ba:b9:ed:2f:79:4a:4c:1b:db:
44:4c:01:fb:18:97:d0:cc:1c:c8:b1:1c:4a:d9:27:
b4:9b:31:85:55:9e:6c:fa:2c:60:43:54:99:d1:0c:
76:41:3c:10:15:17:ce:7e:8e:87:1e:71:d8:7f:83:
c2:f2:56:69:5d:b0:0d:44:93:b5:99:51:ee:c7:4c:
9d:af:7a:9b:84:07:d6:51:c9:6a:60:e6:82:7e:7a:
c7:68:ac:18:a7:bc:26:a2:9f:a1:70:57:e6:f3:27:
a5:5c:bf:08:bf:56:5f:eb:f5:61:52:8e:c5:07:ef:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:8C:2C:88:CB:ED:D0:75:5E:E9:4B:33:1E:37:20:76:A8:E0:92
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/MS2MLIjL7dB1XulLMx43IHao4JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
69:c4:20:08:ea:25:26:26:27:b7:30:c1:2c:6b:34:cf:dd:2e:
a1:2c:14:99:08:d5:30:d9:24:22:fc:52:f9:e9:8a:24:9a:01:
b3:4c:bb:63:8c:b3:45:4d:bc:73:5e:ba:2d:07:d1:57:b3:e4:
0c:c3:b5:14:53:33:3f:2c:d4:b6:5c:de:7f:f7:86:fa:58:9b:
55:43:63:52:85:04:45:eb:5d:a2:38:36:11:b6:23:99:1d:76:
a5:73:d9:f7:dc:81:6f:50:5e:00:7a:d7:bf:f0:bf:6f:bf:68:
3b:bd:98:0a:68:1a:c6:5a:8a:89:87:dc:83:75:ac:74:80:cf:
7f:b5:4b:e1:85:a1:b2:11:f2:db:61:82:37:f4:63:9e:4a:02:
25:2e:5e:41:d1:30:da:02:4f:06:8c:87:de:17:86:08:b6:c1:
68:20:86:d6:7c:0b:f0:b3:c3:6b:0d:06:30:ad:ed:12:60:89:
d7:ca:87:25:f5:3e:61:40:b6:32:eb:2c:81:1a:e1:58:99:5c:
07:ec:b4:de:6e:38:5e:be:5d:ba:f2:f3:d0:af:fa:94:57:32:
0c:20:0f:71:0f:69:e4:6c:4b:1b:79:47:df:c7:cb:bf:75:f7:
77:26:23:27:26:ac:c5:4d:76:d7:79:65:cb:31:bf:9b:bf:4c:
65:52:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:36:47 2025 by rpki-client