Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/McKDEKqS1WYGlYboXtexsvcav7A.roa
File: McKDEKqS1WYGlYboXtexsvcav7A.roa (raw, json)
Hash identifier: DrgD3Q9fdE9tJr66eMXHQzJqf4+yZbWkEQsXyVXxrdo=
Subject key identifier: 31:C2:83:10:AA:92:D5:66:06:95:86:E8:5E:D7:B1:B2:F7:1A:BF:B0
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019425FD8D10A988ED262279993AD2AA062A
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/McKDEKqS1WYGlYboXtexsvcav7A.roa
Signing time: Thu 02 Jan 2025 07:49:21 +0000
ROA not before: Thu 02 Jan 2025 07:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 37.61.208.0/20 maxlen: 24
62.75.130.0/24 maxlen: 24
62.75.136.0/24 maxlen: 24
62.75.167.0/24 maxlen: 24
62.75.179.0/24 maxlen: 24
62.75.181.0/24 maxlen: 24
62.75.182.0/23 maxlen: 24
62.75.194.0/23 maxlen: 24
62.75.196.0/23 maxlen: 24
62.75.198.0/24 maxlen: 24
62.75.201.0/24 maxlen: 24
62.75.202.0/23 maxlen: 24
62.75.203.0/24 maxlen: 24
62.75.204.0/24 maxlen: 24
62.75.207.0/24 maxlen: 24
62.75.213.0/24 maxlen: 24
62.75.214.0/23 maxlen: 24
62.75.216.0/21 maxlen: 24
62.75.224.0/24 maxlen: 24
62.75.228.0/23 maxlen: 24
62.75.230.0/24 maxlen: 24
62.75.232.0/22 maxlen: 24
62.75.236.0/23 maxlen: 24
62.75.238.0/24 maxlen: 24
62.75.252.0/22 maxlen: 24
62.138.0.0/22 maxlen: 24
62.138.5.0/24 maxlen: 24
62.138.6.0/23 maxlen: 24
62.138.8.0/24 maxlen: 24
62.138.10.0/23 maxlen: 24
62.138.12.0/24 maxlen: 24
62.138.14.0/24 maxlen: 24
62.138.16.0/24 maxlen: 24
62.138.18.0/23 maxlen: 24
62.138.24.0/24 maxlen: 24
62.138.26.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.118.0/24 maxlen: 24
78.138.126.0/23 maxlen: 24
80.86.81.0/24 maxlen: 24
80.86.82.0/23 maxlen: 24
80.86.84.0/22 maxlen: 24
80.86.90.0/23 maxlen: 24
80.86.92.0/22 maxlen: 24
85.25.1.0/24 maxlen: 24
85.25.8.0/21 maxlen: 24
85.25.20.0/24 maxlen: 24
85.25.27.0/24 maxlen: 24
85.25.40.0/21 maxlen: 24
85.25.43.0/24 maxlen: 24
85.25.48.0/20 maxlen: 24
85.25.64.0/24 maxlen: 24
85.25.66.0/23 maxlen: 24
85.25.68.0/24 maxlen: 24
85.25.71.0/24 maxlen: 24
85.25.72.0/21 maxlen: 24
85.25.92.0/22 maxlen: 24
85.25.98.0/23 maxlen: 24
85.25.100.0/24 maxlen: 24
85.25.102.0/23 maxlen: 24
85.25.103.0/24 maxlen: 24
85.25.104.0/22 maxlen: 24
85.25.108.0/23 maxlen: 24
85.25.110.0/24 maxlen: 24
85.25.116.0/22 maxlen: 24
85.25.120.0/24 maxlen: 24
85.25.122.0/23 maxlen: 24
85.25.124.0/22 maxlen: 24
85.25.128.0/20 maxlen: 24
85.25.144.0/21 maxlen: 24
85.25.152.0/22 maxlen: 24
85.25.156.0/23 maxlen: 24
85.25.159.0/24 maxlen: 24
85.25.160.0/24 maxlen: 24
85.25.172.0/23 maxlen: 24
85.25.174.0/24 maxlen: 24
85.25.176.0/20 maxlen: 24
85.25.192.0/21 maxlen: 24
85.25.200.0/22 maxlen: 24
85.25.206.0/23 maxlen: 24
85.25.208.0/22 maxlen: 24
85.25.213.0/24 maxlen: 24
85.25.214.0/23 maxlen: 24
85.25.216.0/22 maxlen: 24
85.25.220.0/24 maxlen: 24
85.25.222.0/23 maxlen: 24
85.25.226.0/23 maxlen: 24
85.25.232.0/23 maxlen: 24
85.25.235.0/24 maxlen: 24
85.25.236.0/22 maxlen: 24
85.25.242.0/23 maxlen: 24
85.25.244.0/24 maxlen: 24
85.25.246.0/24 maxlen: 24
85.25.248.0/21 maxlen: 24
85.93.88.0/22 maxlen: 24
85.93.92.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.40.0/23 maxlen: 24
92.204.53.0/24 maxlen: 24
92.204.54.0/24 maxlen: 24
92.204.96.0/21 maxlen: 24
92.204.104.0/21 maxlen: 21
92.204.160.0/19 maxlen: 24
92.204.192.0/23 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.196.0/22 maxlen: 24
92.204.200.0/21 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
92.205.152.0/24 maxlen: 24
92.205.153.0/24 maxlen: 24
92.205.154.0/24 maxlen: 24
134.119.176.0/20 maxlen: 24
134.119.192.0/19 maxlen: 24
146.0.224.0/19 maxlen: 24
151.106.0.0/19 maxlen: 24
151.106.48.0/20 maxlen: 24
185.19.216.0/22 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.164.0/22 maxlen: 24
185.136.168.0/22 maxlen: 24
188.138.0.0/21 maxlen: 24
188.138.1.0/24 maxlen: 24
188.138.8.0/22 maxlen: 24
188.138.9.0/24 maxlen: 24
188.138.16.0/22 maxlen: 24
188.138.17.0/24 maxlen: 24
188.138.24.0/21 maxlen: 24
188.138.32.0/20 maxlen: 24
188.138.56.0/21 maxlen: 24
188.138.56.0/22 maxlen: 24
188.138.60.0/22 maxlen: 24
188.138.68.0/22 maxlen: 24
188.138.72.0/21 maxlen: 24
188.138.81.0/24 maxlen: 24
188.138.82.0/23 maxlen: 24
188.138.84.0/22 maxlen: 24
188.138.88.0/21 maxlen: 24
188.138.96.0/19 maxlen: 24
188.138.122.0/24 maxlen: 24
195.69.240.0/22 maxlen: 24
217.118.19.0/24 maxlen: 24
217.118.23.0/24 maxlen: 24
217.118.24.0/24 maxlen: 24
217.118.26.0/23 maxlen: 24
217.172.170.0/23 maxlen: 24
217.172.172.0/24 maxlen: 24
217.172.176.0/21 maxlen: 24
217.172.184.0/22 maxlen: 24
217.172.188.0/23 maxlen: 24
217.172.190.0/24 maxlen: 24
2a01:7a0::/29 maxlen: 48
2a01:7a0::/32 maxlen: 48
2a01:7a7::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Feb 2025 17:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8d:10:a9:88:ed:26:22:79:99:3a:d2:aa:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jan 2 07:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31c28310aa92d566069586e85ed7b1b2f71abfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:e8:45:fe:14:19:e1:ff:48:97:cf:24:84:
93:6b:a3:e6:cc:70:b6:f2:75:91:fe:c1:d9:fe:5a:
a1:e4:39:ee:5a:5c:f3:b8:0f:b3:08:4f:e5:4b:7d:
86:35:bd:d5:73:c1:82:42:ca:3c:82:37:ec:76:a2:
40:cb:c5:e9:b4:b2:ba:e2:15:52:84:4e:f7:07:9f:
a3:1f:a7:8f:30:54:e9:25:66:f2:94:5b:af:67:bf:
79:d8:44:5a:37:de:f8:29:2b:18:e7:fe:25:db:4c:
ad:f8:0b:64:60:39:07:c3:69:1c:52:ce:12:84:0e:
52:3b:0c:ce:43:d5:be:c8:98:aa:92:32:92:35:3a:
f1:36:fc:a4:1e:e6:97:1b:7d:aa:70:fa:5f:d4:d6:
68:1e:ee:01:84:a5:58:44:e3:9f:18:5c:b0:e9:c8:
cb:ea:eb:99:9c:4f:c7:18:00:cf:09:cd:7f:82:ee:
13:c8:66:46:ef:ae:d6:9d:86:da:f4:23:74:55:cb:
c8:71:f5:bd:2e:6e:f3:1f:a5:8c:76:3a:0e:4e:15:
fa:c3:43:43:7c:56:9e:0e:c0:7a:3a:f3:5e:bf:5c:
00:f9:cd:3c:35:92:a1:59:cc:fd:59:38:75:75:9e:
bc:99:d6:ac:7b:4b:68:55:77:18:e6:e9:2e:83:83:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:83:10:AA:92:D5:66:06:95:86:E8:5E:D7:B1:B2:F7:1A:BF:B0
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/McKDEKqS1WYGlYboXtexsvcav7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/20
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
32:32:d9:c2:d3:39:a2:b3:3e:8c:ae:c2:c6:96:dd:6e:14:7d:
31:2c:66:3c:e5:47:1c:b9:56:d5:49:0b:3c:ac:e4:4e:14:18:
fc:1b:2f:ab:8d:9d:62:5e:18:30:00:f0:ca:3a:79:ec:a0:6a:
53:4f:02:e5:e2:cc:01:b0:07:ed:a2:17:76:7f:4e:9e:f2:59:
e0:73:43:bb:be:e3:eb:60:c2:97:ca:89:e4:17:31:09:d4:89:
83:a5:09:ed:8b:7e:a8:ca:1e:6a:30:bc:97:7d:bd:6f:f4:eb:
a5:7d:7a:50:23:03:d9:ae:fc:98:ca:14:b5:9b:9b:6d:14:71:
6f:a4:c9:4d:2f:fa:d7:d6:70:87:1e:b2:53:74:ac:79:9a:98:
55:a0:5d:d5:55:58:b8:b1:9c:f2:74:95:54:88:6c:d1:00:2f:
40:b9:1b:e0:5b:fa:d8:b9:11:74:98:98:cb:66:32:7f:a5:48:
24:bd:88:2f:21:a7:a5:c4:d7:1d:c6:ca:de:72:35:e3:26:74:
90:92:c4:cb:ef:6d:bd:1b:97:22:68:c0:ae:ec:04:69:fd:13:
eb:57:0e:57:2a:4b:7a:80:3d:6b:82:e7:b1:08:bf:0d:ac:dd:
7e:75:9e:00:e3:53:e4:c3:70:3d:5b:f6:b7:56:e8:8f:19:21:
16:4c:a7:a9
-----BEGIN CERTIFICATE-----
MIIIHTCCBwWgAwIBAgISAZQl/Y0QqYjtJiJ5mTrSqgYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj
ZjgzZjYwHhcNMjUwMTAyMDc0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWMyODMxMGFhOTJkNTY2MDY5NTg2ZTg1ZWQ3YjFiMmY3MWFiZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylboRf4UGeH/SJfPJISTa6PmzHC2
8nWR/sHZ/lqh5DnuWlzzuA+zCE/lS32GNb3Vc8GCQso8gjfsdqJAy8XptLK64hVS
hE73B5+jH6ePMFTpJWbylFuvZ7952ERaN974KSsY5/4l20yt+AtkYDkHw2kcUs4S
hA5SOwzOQ9W+yJiqkjKSNTrxNvykHuaXG32qcPpf1NZoHu4BhKVYROOfGFyw6cjL
6uuZnE/HGADPCc1/gu4TyGZG767WnYba9CN0VcvIcfW9Lm7zH6WMdjoOThX6w0ND
fFaeDsB6OvNev1wA+c08NZKhWcz9WTh1dZ68mdase0toVXcY5ukug4NjpwIDAQAB
o4IFKTCCBSUwHQYDVR0OBBYEFDHCgxCqktVmBpWG6F7XsbL3Gr+wMB8GA1UdIwQY
MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt
MDE1ZWE1MDE5NTIwLzEvTWNLREVLcVMxV1lHbFlib1h0ZXhzdmNhdjdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw
LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDPQYIKwYBBQUHAQcBAf8EggMsMIIDKDCCAxUEAgABMIID
DQMEBCU90AMEAD5LggMEAD5LiAMEAD5LpwMEAD5LszAMAwQAPku1AwQDPkuwMAwD
BAE+S8IDBAA+S8YwDAMEAD5LyQMEAD5LzAMEAD5LzzAMAwQAPkvVAwQAPkvgMAwD
BAI+S+QDBAA+S+YwDAMEAz5L6AMEAD5L7gMEAj5L/AMEAj6KADAMAwQAPooFAwQA
PooIMAwDBAE+igoDBAA+igwDBAA+ig4DBAA+ihADBAE+ihIDBAA+ihgDBAA+ihow
DAMEBU6KYAMEAk6KaAMEAE6KdgMEAU6KfjAMAwQAUFZRAwQDUFZQMAwDBAFQVloD
BAVQVkADBABVGQEDBANVGQgDBABVGRQDBABVGRswDAMEA1UZKAMEAFUZQDAMAwQB
VRlCAwQAVRlEMAwDBABVGUcDBARVGUADBAJVGVwwDAMEAVUZYgMEAFUZZDAMAwQB
VRlmAwQAVRluMAwDBAJVGXQDBABVGXgwDAMEAVUZegMEAVUZnDAMAwQAVRmfAwQA
VRmgMAwDBAJVGawDBABVGa4wDAMEBFUZsAMEAlUZyDAMAwQBVRnOAwQCVRnQMAwD
BABVGdUDBABVGdwDBAFVGd4DBAFVGeIDBAFVGegwDAMEAFUZ6wMEBFUZ4DAMAwQB
VRnyAwQAVRn0AwQAVRn2AwQDVRn4MAwDBANVXVgDBAFVXVwDBAZVw0ADBABXd8MD
BAJXd9wDBANcKmgDBAFczCgwDAMEAFzMNQMEAFzMNgMEBFzMYDAMAwQFXMygAwQE
XMzAAwQEXMzwAwQDXM0gAwQEXM1wAwQCXM2YMAwDBASGd7ADBAWGd8ADBAWSAOAD
BAWXagADBASXajADBAK5E9gwDAMEArmInAMEArmIqDALAwMBvIoDBAK8iggDBAK8
ihAwDAMEA7yKGAMEBLyKIAMEA7yKODAMAwQCvIpEAwQEvIpAMAwDBAC8ilEDBAe8
igADBALDRfADBADZdhMwDAMEANl2FwMEANl2GAMEAdl2GjAMAwQB2ayqAwQA2ays
MAwDBATZrLADBADZrL4wDQQCAAIwBwMFAyoBB6AwDQYJKoZIhvcNAQELBQADggEB
ADIy2cLTOaKzPoyuwsaW3W4UfTEsZjzlRxy5VtVJCzys5E4UGPwbL6uNnWJeGDAA
8Mo6eeygalNPAuXizAGwB+2iF3Z/Tp7yWeBzQ7u+4+tgwpfKieQXMQnUiYOlCe2L
fqjKHmowvJd9vW/066V9elAjA9mu/JjKFLWbm20UcW+kyU0v+tfWcIceslN0rHma
mFWgXdVVWLixnPJ0lVSIbNEAL0C5G+Bb+ti5EXSYmMtmMn+lSCS9iC8hp6XE1x3G
yt5yNeMmdJCSxMvvbb0blyJowK7sBGn9E+tXDlcqS3qAPWuC57EIvw2s3X51ngDj
U+TDcD1b9rdW6I8ZIRZMp6k=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:55:23 2025 by rpki-client