Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/MqNg8Aea7aCZPt61ql_ROMUvI9Q.roa
File: MqNg8Aea7aCZPt61ql_ROMUvI9Q.roa (raw, json)
Hash identifier: r1LwL1XKZMj8Ki7hdzlIGe0SVKjB6x0cmRDSfLdSkzg=
Subject key identifier: 32:A3:60:F0:07:9A:ED:A0:99:3E:DE:B5:AA:5F:D1:38:C5:2F:23:D4
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0195D1FBB96F53E2506886F75B661B28BD70
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/MqNg8Aea7aCZPt61ql_ROMUvI9Q.roa
Signing time: Wed 26 Mar 2025 10:24:49 +0000
ROA not before: Wed 26 Mar 2025 10:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.19.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.42.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.201.0/24 maxlen: 24
141.226.202.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 07 Apr 2025 11:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:fb:b9:6f:53:e2:50:68:86:f7:5b:66:1b:28:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Mar 26 10:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32a360f0079aeda0993edeb5aa5fd138c52f23d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:7e:a2:a9:fe:dc:44:ac:3f:e9:a7:52:a2:
17:7d:71:9b:44:78:bd:d3:a9:af:ac:83:5d:1c:73:
70:81:11:61:2a:1a:42:11:e5:07:98:e7:7d:fb:aa:
c2:19:0f:26:8a:88:cd:34:82:07:d7:2f:e1:8e:ec:
e7:2e:c7:03:52:31:13:02:39:e2:5a:7d:89:3e:09:
fd:46:ac:ed:43:03:28:2a:e5:1e:55:c9:33:24:69:
c4:6e:54:30:c7:1c:ef:35:ec:0e:2a:04:4d:7e:5d:
61:c0:3d:de:d4:05:d5:62:40:b4:2e:e3:9c:87:3f:
e8:20:01:80:d1:42:6f:2d:a6:ca:d7:85:51:78:d0:
78:54:02:db:3b:f7:a4:0c:14:56:67:51:07:c2:94:
1b:27:8f:b6:74:9a:62:e6:0e:33:8d:52:aa:71:0c:
bd:96:1d:cb:64:45:e5:48:d7:6e:75:a6:fd:58:cb:
74:b4:36:07:a4:2b:7f:5d:80:bc:6a:25:a5:4a:20:
83:fb:2e:94:36:2a:ab:43:a9:a0:f2:14:da:ce:0a:
5e:7a:4e:9d:da:c7:79:45:bb:ff:35:84:7b:f5:16:
59:2b:d1:2d:80:a2:af:f0:a1:db:14:1a:ea:a0:0c:
a8:f9:fe:52:78:02:6f:3a:9e:b5:32:f4:d8:52:51:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:60:F0:07:9A:ED:A0:99:3E:DE:B5:AA:5F:D1:38:C5:2F:23:D4
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/MqNg8Aea7aCZPt61ql_ROMUvI9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
87:8d:db:9f:8e:42:cf:1a:a8:03:89:85:94:65:6e:10:50:40:
e2:04:7b:87:3c:61:fc:a7:16:9d:bf:80:20:60:b0:6c:aa:db:
82:5c:be:3f:34:cf:18:92:eb:6c:43:55:02:d9:a0:c0:ca:f9:
a8:83:2e:2a:75:a7:2e:2b:f5:17:26:02:18:bc:da:77:f1:2d:
97:d2:83:6f:63:22:0f:e6:44:8f:ee:c2:4e:34:6b:eb:44:2c:
7a:ee:37:fe:cf:b1:1f:d6:ec:17:c7:60:fe:25:1b:eb:4d:de:
c8:90:15:a1:fc:27:7b:05:68:ff:99:fb:d0:05:96:09:86:82:
65:a0:11:ed:0b:15:08:ae:a7:bf:df:ff:b6:82:30:ff:17:fc:
b1:61:89:af:ad:1f:19:93:2c:22:14:41:6e:42:d6:4b:af:9c:
62:a3:1d:ef:c1:da:89:fa:c8:86:80:43:13:2d:82:82:9d:89:
2b:dd:ad:3b:44:de:eb:09:5b:16:a7:e3:a4:31:3b:2f:6c:52:
7f:12:8a:bb:37:5a:f9:85:fb:fe:5d:d2:4a:37:69:48:fd:b7:
2f:90:4b:40:70:df:61:3f:b0:c3:f6:de:34:db:97:bd:94:b0:
5b:42:33:73:bb:7b:cb:96:90:70:0d:33:8c:05:59:c1:d2:22:
66:ca:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:02 2025 by rpki-client