Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/NiqZrqnGx3p0ryrA_4QHFw4Qx2k.roa
File: NiqZrqnGx3p0ryrA_4QHFw4Qx2k.roa (raw, json)
Hash identifier: 6d0VUQngC3fl2A7SWn1v95DMoG8kZH9ANES2gTlBuwM=
Subject key identifier: 36:2A:99:AE:A9:C6:C7:7A:74:AF:2A:C0:FF:84:07:17:0E:10:C7:69
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F19141D66340CA6849D6C3A90CF1A271
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/NiqZrqnGx3p0ryrA_4QHFw4Qx2k.roa
Signing time: Wed 21 May 2025 06:39:10 +0000
ROA not before: Wed 21 May 2025 06:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20773
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.205.160.0/19 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 07:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:91:41:d6:63:40:ca:68:49:d6:c3:a9:0c:f1:a2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 06:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=362a99aea9c6c77a74af2ac0ff8407170e10c769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:56:d4:95:73:1c:ec:71:86:14:6b:64:da:
eb:0f:17:c5:6a:c5:c5:18:4b:bf:8e:ad:f0:2b:0a:
e7:fe:8d:ed:c1:d5:e0:92:cb:10:46:f7:83:51:c5:
33:f2:c5:49:fd:63:4d:09:d6:46:1a:3b:ba:49:46:
7e:b5:8c:48:d4:82:87:3a:ea:5d:43:72:84:b6:2d:
69:6d:c7:87:46:e2:36:9d:ad:9c:4d:82:07:44:2e:
74:1e:94:a9:d4:98:e5:f1:b3:a9:7c:23:79:65:3f:
92:21:99:fd:a2:90:7f:0a:00:4c:70:c3:15:a7:ad:
2d:0d:b0:40:c7:13:b1:87:1b:f0:c0:30:98:fc:10:
db:bd:4e:d9:b3:20:ba:05:e6:50:ce:62:3e:81:03:
84:51:f0:7c:44:c5:5b:d8:be:84:41:2b:da:23:56:
17:5f:da:bf:1f:47:ca:01:94:ad:81:c2:c9:db:a1:
24:ff:30:12:48:cd:1f:7d:ac:6b:dc:fa:1a:7f:a2:
ae:61:0d:ed:cd:b3:78:ab:1b:ca:3f:e2:34:2e:d1:
b6:c1:f5:db:51:ad:82:c7:bb:2f:01:9e:91:b8:2e:
45:0c:38:f1:53:10:f7:92:a8:ce:b9:5f:a1:e7:6d:
59:a8:32:81:27:f0:d4:f5:53:1e:fb:5f:21:0f:27:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:99:AE:A9:C6:C7:7A:74:AF:2A:C0:FF:84:07:17:0E:10:C7:69
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/NiqZrqnGx3p0ryrA_4QHFw4Qx2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
92.205.160.0/19
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
4f:e0:94:43:d2:f1:50:36:79:c9:78:30:1d:9b:92:ba:8f:2d:
4b:bb:46:a8:48:cf:cd:34:26:31:d5:8a:ca:01:0d:a5:cd:8d:
4a:55:e5:53:77:d8:31:30:06:44:92:8e:63:29:9b:31:ad:94:
1a:38:93:f8:cc:91:0e:00:d9:cc:f6:f7:9a:38:6f:bb:a2:62:
e9:33:c1:a1:6a:4d:eb:11:ad:78:68:f2:03:70:85:86:4c:f7:
26:5e:51:1f:f7:ca:eb:c9:65:a7:a7:c2:bf:78:b3:b6:d2:66:
c4:05:c3:fa:8c:ef:cb:ca:a5:d7:2d:f1:98:2b:ad:a3:e9:62:
83:9b:4b:e2:35:54:d9:db:2f:b6:a3:3a:f8:51:2e:5b:7e:eb:
6d:eb:22:26:d7:58:4a:66:5a:e2:55:fb:66:8d:a5:9e:13:af:
76:62:cf:55:20:62:08:73:de:ed:a5:1d:8b:aa:a1:57:90:3e:
e7:3d:b7:8c:e7:1a:6b:b6:f3:dc:df:ac:62:5d:dc:36:4a:05:
31:84:f7:ce:8e:14:91:73:96:3f:52:e2:b1:8f:19:41:f2:a1:
17:ea:8b:40:4e:8c:03:b0:9b:71:dc:5a:ce:f9:d0:44:8f:34:
4c:1a:b8:0d:ca:3a:ec:b1:20:70:9d:1f:91:7d:b2:71:5e:b6:
f0:d1:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:16 2025 by rpki-client