Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/ix-pvLdqJFBBUZ0ahDCELM0mnx4.roa
File: ix-pvLdqJFBBUZ0ahDCELM0mnx4.roa (raw, json)
Hash identifier: rAHFrGByGlTCER//7CW/pAcis/1LJV4rZj04VzvYnEk=
Subject key identifier: 8B:1F:A9:BC:B7:6A:24:50:41:51:9D:1A:84:30:84:2C:CD:26:9F:1E
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194A279008B605BCBA5AAB3B8B5BEFD72DD
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/ix-pvLdqJFBBUZ0ahDCELM0mnx4.roa
Signing time: Sun 26 Jan 2025 11:57:06 +0000
ROA not before: Sun 26 Jan 2025 11:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.211.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
185.3.146.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c280:100::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 26 Jan 2025 12:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:79:00:8b:60:5b:cb:a5:aa:b3:b8:b5:be:fd:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 26 11:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1fa9bcb76a245041519d1a8430842ccd269f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:9d:bf:c2:a9:d0:cd:60:77:6c:05:7e:dc:
e8:23:0a:db:d5:3e:3b:ae:88:12:f7:5d:1b:47:8f:
65:c1:42:8d:ed:4b:32:7c:29:ad:4c:38:f7:f6:99:
eb:e5:7f:41:e8:eb:c0:5b:45:d7:56:dd:0b:9d:60:
be:e7:28:3a:57:da:9d:c6:2f:eb:74:67:d7:6e:b8:
e6:42:9f:87:cf:fc:b4:66:15:c6:2c:db:22:63:ab:
e2:31:2c:90:c1:c7:39:26:4e:f1:ec:85:7d:77:d8:
d7:ae:7d:65:48:af:cb:51:62:6a:74:a2:d2:3d:b9:
5b:c0:ad:bf:ab:66:04:38:c8:84:65:03:b0:80:f0:
81:09:04:b1:9d:39:5c:89:62:cb:46:0c:7e:c8:e4:
9f:57:4a:f1:ae:c5:6b:cd:b2:c2:6e:36:a4:54:c8:
cf:d2:5f:c7:92:91:33:d3:aa:3b:76:61:56:45:96:
83:2a:5e:2b:13:06:b0:dd:14:1c:53:05:5f:50:9c:
0b:94:2c:6f:0e:df:a7:07:6b:e6:fd:61:67:b1:62:
c9:53:86:2e:50:47:27:f2:79:89:36:10:aa:c4:ae:
12:13:0c:e6:28:5f:4b:96:da:d1:42:08:8a:7c:26:
2b:30:cd:00:d9:c1:64:a1:f7:7a:c2:91:a9:a2:4a:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:A9:BC:B7:6A:24:50:41:51:9D:1A:84:30:84:2C:CD:26:9F:1E
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/ix-pvLdqJFBBUZ0ahDCELM0mnx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
7e:9b:e6:0e:83:2b:22:1e:09:aa:17:4d:c9:09:c6:f6:5c:ef:
91:9b:b7:2f:bc:a5:d3:8b:de:ef:68:a9:63:7b:66:99:b0:52:
f9:82:9d:2c:8b:d6:c3:3a:25:82:82:0e:c3:13:9b:93:70:9a:
43:db:63:ea:5b:cc:a2:fe:9e:1c:d9:6a:ff:cf:e2:88:6b:59:
1c:03:77:dc:a6:00:88:d9:47:5a:23:ab:eb:4e:6a:5c:56:bb:
32:0b:73:95:56:3c:6a:04:c7:de:37:a8:da:c4:4e:bd:6b:84:
1a:9e:6a:8c:91:f8:cb:81:a9:00:36:5e:9a:89:1c:06:a3:66:
c3:f6:69:55:7c:0b:9d:07:ce:ce:5f:27:fe:90:bf:dc:c5:e1:
ee:aa:49:7d:d0:78:2a:72:02:18:41:0e:ea:a0:82:6b:38:55:
0d:ac:65:76:3f:40:35:35:08:fa:94:51:e1:81:01:25:1b:89:
74:1f:59:d8:ce:63:a5:c9:09:f6:6e:6b:65:04:d7:69:92:a8:
d5:31:bd:c0:1c:5b:ab:3e:60:5e:05:2d:2a:a2:6e:d8:2b:63:
5f:ee:5f:f2:9a:af:72:f5:42:65:85:8b:c7:6a:ba:7e:96:e2:
81:09:b2:0a:a4:2f:a8:90:ea:f8:ca:15:01:1d:02:49:18:55:
16:af:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:30 2025 by rpki-client