Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/VmPiOQGX7m8EDPZuL5UX0B3yLYk.roa
File: VmPiOQGX7m8EDPZuL5UX0B3yLYk.roa (raw, json)
Hash identifier: ujkb1Z8o1V8/ey48H7uKFd0gALLkzJWowyLQIFcxdf0=
Subject key identifier: 56:63:E2:39:01:97:EE:6F:04:0C:F6:6E:2F:95:17:D0:1D:F2:2D:89
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194CB13E663F39F788311840240C4285E48
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/VmPiOQGX7m8EDPZuL5UX0B3yLYk.roa
Signing time: Mon 03 Feb 2025 09:11:06 +0000
ROA not before: Mon 03 Feb 2025 09:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.19.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 13 Feb 2025 11:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:13:e6:63:f3:9f:78:83:11:84:02:40:c4:28:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Feb 3 09:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5663e2390197ee6f040cf66e2f9517d01df22d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:99:14:e5:84:32:0d:4f:65:4f:49:0e:f6:
4e:44:11:f2:ab:e1:66:f9:1c:79:2a:36:ba:8c:1d:
cf:1f:18:73:94:b3:c0:dd:7e:b7:da:e7:79:5d:e4:
67:8c:92:e4:81:69:6e:50:ec:0f:f9:5b:fe:55:e8:
ae:84:da:80:4f:1b:d2:2c:27:ba:59:c6:52:3f:c4:
c4:10:74:6c:57:60:7d:16:88:3e:1c:d4:d7:91:6f:
c6:5e:33:97:3d:40:72:88:cb:08:6c:6c:35:02:11:
21:01:53:bb:51:b3:85:71:a8:bb:11:7c:9d:42:68:
40:59:73:b8:31:9e:75:ca:66:5e:d8:84:e0:c6:5c:
e8:0e:b9:24:e3:c6:46:76:32:71:23:6c:39:07:62:
c1:fd:b5:62:7c:bd:5d:e7:d0:f9:4b:0c:69:11:39:
40:81:34:cf:28:8a:c9:af:76:e0:45:65:c9:b7:ee:
e0:6a:fe:1a:04:e3:36:d9:42:83:42:45:00:10:19:
b8:96:2a:45:ab:70:59:b3:98:fa:b7:65:fe:45:db:
bb:50:ca:65:7b:9a:2e:73:ca:a0:19:ac:d5:66:ee:
d6:6b:49:09:2f:a6:e7:25:73:e4:82:be:2a:42:36:
55:4c:67:76:74:5e:9b:6c:95:03:e2:3a:63:06:26:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:E2:39:01:97:EE:6F:04:0C:F6:6E:2F:95:17:D0:1D:F2:2D:89
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/VmPiOQGX7m8EDPZuL5UX0B3yLYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
57:79:06:9e:58:dd:a2:51:1c:97:3e:62:c6:7e:6b:e9:5a:88:
8f:1d:8c:d3:a1:13:7e:bf:78:c5:2b:e5:28:b4:f1:47:91:ad:
8f:bc:d2:08:60:7b:a8:a8:b5:73:ce:4a:3e:ac:b0:3a:fb:0f:
e6:51:6e:ef:b0:0e:9f:9d:4b:59:82:4a:4d:ea:73:da:29:dd:
1c:78:60:a8:8d:b2:ad:cd:bb:ea:3c:19:70:42:16:a7:d0:4b:
7d:05:3c:27:b2:5a:12:f6:a1:67:c5:ca:d9:6f:09:47:79:70:
2c:6d:ad:2d:2c:57:e0:87:ab:a9:29:3f:15:fd:c8:a8:2a:fa:
9e:fe:7e:81:83:58:9b:7c:cb:bb:69:b4:b5:6e:4e:f6:0b:6d:
44:55:c7:98:bc:ac:7a:cb:2d:19:fe:08:42:2c:80:7b:a7:f3:
5c:e5:e1:e7:b5:3d:c2:b4:20:69:6e:d7:11:68:4f:e0:15:47:
b2:21:5f:80:1d:5e:bc:98:09:69:6b:8a:95:29:dd:3e:18:6c:
f6:e8:cd:07:90:23:ea:21:14:d6:ea:31:46:33:60:a3:02:1e:
57:e1:50:0d:a5:24:7e:8e:02:b6:07:cb:81:35:45:97:52:d6:
d5:16:81:01:01:3c:bc:97:35:7c:30:e0:d2:ac:19:34:e6:03:
63:24:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:46 2025 by rpki-client