Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wP2rDdynrK2Bc_Ddw9YP2tW2yeY.roa
File: wP2rDdynrK2Bc_Ddw9YP2tW2yeY.roa (raw, json)
Hash identifier: EY1wxv81HzarkjCYe2UKEVpy1ioipwQOv4YLiIKAF0A=
Subject key identifier: C0:FD:AB:0D:DC:A7:AC:AD:81:73:F0:DD:C3:D6:0F:DA:D5:B6:C9:E6
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F2A8D4E0AABB22ABA54A6C8474C33DF5
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wP2rDdynrK2Bc_Ddw9YP2tW2yeY.roa
Signing time: Wed 21 May 2025 11:44:32 +0000
ROA not before: Wed 21 May 2025 11:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26496
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:a8:d4:e0:aa:bb:22:ab:a5:4a:6c:84:74:c3:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0fdab0ddca7acad8173f0ddc3d60fdad5b6c9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:75:42:06:e0:6a:97:46:5f:5a:c0:82:7f:
62:93:e0:14:be:64:b3:59:4d:28:74:e2:ff:03:4e:
fd:0a:b1:43:6e:fc:71:06:22:bd:3f:24:1e:48:67:
0a:d4:2b:d6:77:e1:52:dc:19:24:78:3a:97:d0:7b:
44:30:af:c6:98:1b:02:e1:ce:97:77:ae:70:3e:c5:
07:8b:61:b7:9a:36:13:a4:3e:16:2c:3a:e2:f3:53:
27:a9:0e:3c:d9:90:17:f8:c1:ee:80:95:09:3a:a8:
eb:e5:0b:76:30:c5:ea:e0:76:3c:ee:0a:66:65:b1:
3f:9e:be:6c:ca:00:88:d5:1a:96:1b:24:8c:13:f6:
8e:8b:15:48:c0:16:a4:4d:52:c4:c1:6a:91:35:5d:
a2:a2:ab:4d:43:fd:b1:b9:aa:7c:ed:77:db:27:6a:
05:a1:9d:a2:fe:bf:86:24:da:c6:63:be:b6:29:56:
fa:5e:49:b3:53:e3:41:ff:77:f9:94:a5:97:16:7c:
6b:42:dc:5e:dd:60:82:9e:0f:aa:df:17:1d:7a:4b:
b1:94:ce:2c:19:07:bf:cc:e7:8e:01:f4:e1:7c:c7:
f6:a6:cf:49:69:f5:b3:72:cd:ec:47:f5:62:68:65:
6c:f5:31:1b:6d:3d:fa:58:33:64:97:f9:b3:cc:7b:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:AB:0D:DC:A7:AC:AD:81:73:F0:DD:C3:D6:0F:DA:D5:B6:C9:E6
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wP2rDdynrK2Bc_Ddw9YP2tW2yeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
90:7b:d9:09:10:61:42:3f:48:1e:c7:86:2e:b2:41:27:e9:8c:
b6:6d:a5:4f:b5:82:50:6e:b1:7b:c7:0e:67:4d:36:0c:0f:09:
36:d0:c5:8d:fe:3a:5a:6d:48:50:bb:c4:9c:7c:35:9c:48:ae:
18:6a:64:49:c3:2c:e2:3c:83:34:0a:74:68:03:39:72:d5:54:
c5:81:ae:a6:cd:cf:78:b1:b5:39:cd:25:41:10:11:63:e0:ac:
58:ee:f5:e2:55:90:e8:f7:32:f0:e9:96:16:29:08:75:07:3b:
1f:6e:13:6e:6d:39:11:f2:f9:25:79:33:1c:00:e6:bb:36:49:
7a:32:18:4a:b2:47:f0:d9:15:0c:39:96:cf:04:12:42:8c:75:
d8:6e:bd:b7:5e:01:35:58:8e:39:14:e0:e0:73:84:d2:dc:5f:
d6:f7:82:4e:8f:62:7f:cc:62:da:9a:d5:ea:58:91:ed:62:62:
43:0f:a5:99:fb:4f:62:8c:33:0c:59:91:af:d1:1b:37:6e:1e:
3c:ab:67:ce:04:d9:07:3e:5f:fc:b5:77:24:ca:bc:ef:78:8d:
bd:27:68:db:bf:43:01:d3:66:01:e1:69:44:7a:bf:85:e2:ce:
f9:cb:dd:81:cd:ce:b9:e1:00:96:aa:78:3c:74:8d:6b:bd:c6:
cb:e9:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:37 2025 by rpki-client