Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/CE3dpubhr2m31iQ0Rtzh6CuqMy8.roa
File: CE3dpubhr2m31iQ0Rtzh6CuqMy8.roa (raw, json)
Hash identifier: xgcW6HaWVQaAJUquQE7+EyDCVK7hw4UazUOC7clX1ms=
Subject key identifier: 08:4D:DD:A6:E6:E1:AF:69:B7:D6:24:34:46:DC:E1:E8:2B:AA:33:2F
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019488AE37D5722A9AB09DE75C185499FFEB
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/CE3dpubhr2m31iQ0Rtzh6CuqMy8.roa
Signing time: Tue 21 Jan 2025 11:45:06 +0000
ROA not before: Tue 21 Jan 2025 11:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c280:100::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 26 Jan 2025 11:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:ae:37:d5:72:2a:9a:b0:9d:e7:5c:18:54:99:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 21 11:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=084ddda6e6e1af69b7d6243446dce1e82baa332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:29:72:32:f9:b7:eb:fb:28:fe:f1:4b:78:
ce:2e:fd:7d:57:48:6b:a9:77:78:ed:47:bc:32:f4:
60:0e:6e:cf:70:d1:77:92:5e:0e:8e:15:73:2a:ef:
8f:07:2b:8e:cc:b9:5c:43:3e:1e:00:e7:46:e4:36:
c4:ed:08:a7:f1:09:8a:fd:d2:32:51:7e:02:cf:02:
c2:99:80:8e:42:ee:d1:fc:f2:85:47:28:fa:23:4d:
43:8c:4e:2f:0b:ee:ea:65:13:ae:5b:92:24:4c:7d:
9e:55:94:0f:d5:1e:34:18:cb:65:35:99:22:5c:b4:
b9:cf:fd:7f:ad:28:cd:f4:ee:6d:dd:f0:08:c7:fc:
3c:54:59:29:80:e5:39:cb:3e:45:00:3d:c8:f8:98:
fa:3f:04:df:a4:50:db:b5:c2:9e:94:be:55:55:09:
6d:1e:47:90:4d:5e:99:aa:f9:97:88:00:f4:1b:80:
cb:c4:42:07:fb:fa:a2:5b:13:f2:97:f8:52:cc:61:
5f:ce:9e:55:74:43:af:34:73:9f:f0:4e:b9:81:29:
68:e3:0e:b6:65:25:91:19:b5:8d:11:f9:12:61:08:
05:1b:d0:58:25:5a:40:39:be:96:27:0a:5e:79:71:
9e:28:ed:69:6b:df:a7:71:7a:42:6a:4c:22:e8:0c:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:DD:A6:E6:E1:AF:69:B7:D6:24:34:46:DC:E1:E8:2B:AA:33:2F
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/CE3dpubhr2m31iQ0Rtzh6CuqMy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
85:90:10:3b:d1:44:07:3a:d4:ce:c0:e2:ef:18:e4:b2:40:9a:
4e:a7:8f:48:9b:17:27:cd:cd:61:e1:28:32:d5:e2:07:71:41:
a3:5e:49:fc:b4:9c:6a:5c:8b:dc:b3:67:04:01:a0:33:d8:09:
e5:90:15:57:a3:5b:57:94:21:cb:46:a3:d7:d5:26:bb:bc:2c:
9b:f9:2f:7d:7a:c7:a0:3e:67:78:32:ef:a7:ce:41:1a:4b:a0:
ea:53:23:c0:88:13:97:7d:dd:24:dc:89:e3:4a:e6:8a:96:a7:
b5:f0:01:26:69:a8:5b:58:50:c0:1c:11:0e:04:9a:1d:d6:81:
72:86:92:b9:ee:df:aa:dc:13:26:0f:65:9a:0d:75:a4:b3:10:
46:db:2b:dd:e1:9d:2e:15:c2:f0:d3:8b:97:13:48:42:df:34:
2f:aa:5e:9e:66:e1:c6:a8:9f:f4:ee:c5:d0:82:3d:22:d8:bd:
33:b2:a5:63:1f:86:f7:23:79:ef:2c:a9:94:fa:41:4a:bf:23:
69:01:d1:00:81:e8:c1:e3:b2:84:64:93:84:a7:af:c8:a0:78:
7a:4c:b9:df:db:68:c4:1c:b6:cc:f7:1f:4a:b0:58:2a:d2:6e:
9d:58:88:7a:03:7e:0f:84:3b:74:cc:7a:da:20:09:17:9f:bf:
6f:da:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:33 2025 by rpki-client