Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YPb3xjPcmIadsDKFTLJhpMil8nc.roa
File: YPb3xjPcmIadsDKFTLJhpMil8nc.roa (raw, json)
Hash identifier: /0/E+VmCreeUAFN+pKB/43ircPiP63Te6SA8uFJ2Ac8=
Subject key identifier: 60:F6:F7:C6:33:DC:98:86:9D:B0:32:85:4C:B2:61:A4:C8:A5:F2:77
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019204E1A1494DFCD7742E1CD4688FAB1FA1
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YPb3xjPcmIadsDKFTLJhpMil8nc.roa
Signing time: Wed 18 Sep 2024 11:25:48 +0000
ROA not before: Wed 18 Sep 2024 11:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c280:100::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 18 Sep 2024 11:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:e1:a1:49:4d:fc:d7:74:2e:1c:d4:68:8f:ab:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Sep 18 11:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60f6f7c633dc98869db032854cb261a4c8a5f277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:1d:34:2d:41:82:e7:b2:1b:57:d5:ab:10:
f7:58:d2:d5:b1:53:ac:72:c2:8a:91:53:54:ef:d1:
95:b3:99:80:1b:a5:6d:35:79:53:43:a4:98:9b:f3:
c0:65:ef:c9:a7:e4:3a:60:63:50:95:81:0a:c9:99:
51:1c:5f:dd:8b:86:0a:27:ff:b3:f1:0e:b5:5d:75:
ab:78:5f:c9:0a:8a:d5:86:91:63:b6:3f:dc:a2:7c:
a0:5c:9c:f7:cf:75:49:d5:0a:5a:d3:75:1e:55:09:
9d:9e:33:c6:72:86:01:d7:76:a9:40:32:46:4a:8e:
1c:3a:f0:1f:ac:d7:da:97:a5:11:59:b7:3e:96:4c:
80:0c:e0:4b:1f:8b:70:d7:66:ed:a2:2e:49:87:39:
02:a5:d0:ee:1e:73:1f:41:c1:a0:26:5c:d4:79:8e:
d9:9a:9c:0c:3f:1a:ff:79:e6:df:fe:b6:4d:3c:ba:
84:17:b5:ac:7a:96:e8:15:53:d0:a7:a4:40:ad:c5:
52:a8:eb:66:35:a4:a1:8a:29:fe:41:69:79:52:6d:
b2:11:5f:e0:7a:96:ad:b9:3c:39:77:a2:ef:d2:ab:
bc:5b:a1:33:de:99:ab:20:7c:dd:2c:65:dc:1f:cc:
78:8e:67:7e:e0:3a:94:d9:56:fe:cb:3d:99:a5:70:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:F7:C6:33:DC:98:86:9D:B0:32:85:4C:B2:61:A4:C8:A5:F2:77
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/YPb3xjPcmIadsDKFTLJhpMil8nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
85:5b:e3:e8:80:09:b3:ad:98:b1:06:7e:d4:44:e6:8c:6d:50:
1b:ca:c0:a9:e9:d3:a7:51:57:fa:62:ab:1e:bc:df:49:1f:8a:
6f:63:25:fa:61:a9:c3:ca:f2:8a:9b:cb:22:32:2a:ae:4e:88:
1f:6e:15:ed:d2:1e:25:db:42:f9:c6:de:3d:59:19:cc:3e:20:
41:9a:34:31:bd:d7:7d:a6:88:eb:0d:7c:97:19:5c:d9:f0:1b:
42:7c:5c:58:70:96:74:27:90:36:46:0e:d1:29:df:2a:67:57:
c7:bb:d8:90:04:a8:64:2a:63:a5:ad:da:b1:a2:39:68:4a:61:
8c:97:6f:b3:e6:93:0f:72:8f:c5:e5:03:02:00:f8:8c:14:36:
8a:a7:4c:87:b4:b5:40:e2:e0:5a:0e:6d:13:39:4e:1b:71:49:
35:22:08:ce:2f:eb:07:9d:65:b8:b6:6b:f5:ab:34:f0:f4:04:
97:6b:ea:6d:dc:4b:5a:da:c2:0a:0e:ca:52:87:2d:1b:e8:6e:
de:3b:f6:87:59:9b:0a:80:eb:bb:d6:69:9d:41:ff:62:81:4c:
db:c8:42:6a:2f:db:12:be:b2:4c:a1:aa:69:fe:4c:d2:fa:8d:
dc:ec:2b:c7:56:4d:ee:ae:d3:7b:c3:2e:49:75:9f:d7:1d:aa:
8d:2e:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:26 2025 by rpki-client