Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PFAb2G8GDzCcVVlGMl8ZcnkYZrM.roa
File: PFAb2G8GDzCcVVlGMl8ZcnkYZrM.roa (raw, json)
Hash identifier: rYLBCnfOthbiMncxUzcjAXNtCUAsquBX/6eg9uvSnfA=
Subject key identifier: 3C:50:1B:D8:6F:06:0F:30:9C:55:59:46:32:5F:19:72:79:18:66:B3
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194FF2A7F7AB5C22D0822728230480C7730
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PFAb2G8GDzCcVVlGMl8ZcnkYZrM.roa
Signing time: Thu 13 Feb 2025 11:56:02 +0000
ROA not before: Thu 13 Feb 2025 11:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.19.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 26 Mar 2025 09:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:2a:7f:7a:b5:c2:2d:08:22:72:82:30:48:0c:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Feb 13 11:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c501bd86f060f309c555946325f1972791866b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:1e:19:15:9a:2f:90:14:a8:73:36:33:42:
76:40:73:af:30:ad:ad:24:33:73:48:96:28:98:d6:
0a:40:41:c4:20:61:fc:b2:d9:3d:14:78:b2:e2:90:
42:ba:6f:72:f4:79:9a:33:27:98:cc:bd:44:7f:99:
bc:0b:a7:4b:82:d5:34:d6:16:90:04:47:16:2c:c2:
7b:88:cd:37:2b:a1:01:bf:f0:cc:e7:c7:c8:c6:b3:
dc:50:de:ea:d6:05:06:58:e4:59:58:8a:27:f3:ee:
92:ef:1e:ea:e5:c6:36:30:17:5d:4b:65:d2:93:d1:
76:44:32:b4:cf:1d:59:da:60:70:1a:f0:93:9d:7b:
5d:fb:6e:4d:64:4e:e2:96:4c:1f:f4:0f:e3:de:eb:
5e:b0:78:4d:21:32:70:00:5c:24:4f:b1:65:02:7e:
8e:43:30:d4:80:15:cc:56:a2:78:44:d1:49:98:c1:
d3:87:0f:c0:18:ee:5a:42:74:55:70:64:54:8f:d6:
16:9f:19:90:84:ac:15:78:5c:75:e3:94:92:7f:ce:
14:f4:7e:9b:05:8d:0b:54:3e:57:6f:99:59:07:1c:
4a:a8:8b:af:65:6b:76:ee:9a:99:6b:fd:df:49:14:
e3:4f:10:df:4d:7d:bb:0d:7a:a1:bc:43:a7:be:f7:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:1B:D8:6F:06:0F:30:9C:55:59:46:32:5F:19:72:79:18:66:B3
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/PFAb2G8GDzCcVVlGMl8ZcnkYZrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
2f:c9:e1:72:69:1f:fe:6b:70:e7:35:32:f8:f8:bc:f5:dd:ea:
4b:87:6c:5b:95:2e:b0:fb:51:7d:7d:47:ad:ba:06:d5:5c:1b:
80:f5:25:50:fc:97:9f:7b:4c:98:aa:b5:cc:71:32:23:9c:57:
1c:cf:97:7d:41:d8:8b:ff:26:d3:22:fd:46:7a:3e:1a:7a:37:
88:05:d2:24:c5:e0:be:64:ea:56:e6:62:47:7f:d7:8d:c9:f3:
8b:77:e7:74:d9:62:aa:7d:25:f1:e2:f9:a9:af:a5:96:d3:c7:
9d:ab:c3:85:c6:4d:55:ea:8a:d3:19:f0:07:7b:1e:5d:ff:07:
52:c2:20:84:54:ea:04:fa:48:35:1c:7b:55:1d:fc:ba:e0:37:
f2:bf:20:aa:58:5c:ff:c5:f1:2a:1a:56:2a:b8:08:fc:93:43:
53:be:9e:a1:90:f7:3c:b8:43:c0:33:05:bf:c9:3a:98:bf:fc:
74:17:04:c6:95:7b:18:a8:42:81:ed:f8:22:a7:4c:bd:20:bc:
db:4b:5d:80:f9:52:34:83:14:04:dd:ef:52:7a:27:c6:a6:78:
c9:a5:82:9b:d5:d2:db:29:42:27:7f:38:c6:cb:2b:59:ce:8e:
40:b9:a8:b1:56:5f:00:f4:e1:c8:3d:56:ea:f4:81:32:d5:cd:
04:19:28:e2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZT/Kn96tcItCCJygjBIDHcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjUwMjEzMTE1NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzUwMWJkODZmMDYwZjMwOWM1NTU5NDYzMjVmMTk3Mjc5MTg2NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmoeGRWaL5AUqHM2M0J2QHOvMK2t
JDNzSJYomNYKQEHEIGH8stk9FHiy4pBCum9y9HmaMyeYzL1Ef5m8C6dLgtU01haQ
BEcWLMJ7iM03K6EBv/DM58fIxrPcUN7q1gUGWORZWIon8+6S7x7q5cY2MBddS2XS
k9F2RDK0zx1Z2mBwGvCTnXtd+25NZE7ilkwf9A/j3utesHhNITJwAFwkT7FlAn6O
QzDUgBXMVqJ4RNFJmMHThw/AGO5aQnRVcGRUj9YWnxmQhKwVeFx145SSf84U9H6b
BY0LVD5Xb5lZBxxKqIuvZWt27pqZa/3fSRTjTxDfTX27DXqhvEOnvvdSaQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFDxQG9hvBg8wnFVZRjJfGXJ5GGazMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvUEZBYjJHOEdEekNjVlZsR01sOFpjbmtZWnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBRaAAwQE
BZAwAwQEJRNwAwQGbeIAAwQFjeLAAwQCuQOQMA0EAgACMAcDBQMqAMKAMA0GCSqG
SIb3DQEBCwUAA4IBAQAvyeFyaR/+a3DnNTL4+Lz13epLh2xblS6w+1F9fUetugbV
XBuA9SVQ/Jefe0yYqrXMcTIjnFccz5d9QdiL/ybTIv1Gej4aejeIBdIkxeC+ZOpW
5mJHf9eNyfOLd+d02WKqfSXx4vmpr6WW08edq8OFxk1V6orTGfAHex5d/wdSwiCE
VOoE+kg1HHtVHfy64DfyvyCqWFz/xfEqGlYquAj8k0NTvp6hkPc8uEPAMwW/yTqY
v/x0FwTGlXsYqEKB7fgip0y9ILzbS12A+VI0gxQE3e9SeifGpnjJpYKb1dLbKUIn
fzjGyytZzo5AuaixVl8A9OHIPVbq9IEy1c0EGSji
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:18:28 2025 by rpki-client