Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/nmPhlOIWfPndMPwtTLJaHpO00gE.roa
File: nmPhlOIWfPndMPwtTLJaHpO00gE.roa (raw, json)
Hash identifier: JD3FnkjO7X2mwr6jBSQ46cOxNW+ZfHx8zbflHJiAMl0=
Subject key identifier: 9E:63:E1:94:E2:16:7C:F9:DD:30:FC:2D:4C:B2:5A:1E:93:B4:D2:01
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 018D1311400F30BC0E0139176500CB633126
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/nmPhlOIWfPndMPwtTLJaHpO00gE.roa
Signing time: Tue 16 Jan 2024 16:18:33 +0000
ROA not before: Tue 16 Jan 2024 16:18:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50463
IP address blocks: 5.22.128.0/21 maxlen: 21
5.22.128.0/24 maxlen: 24
5.22.129.0/24 maxlen: 24
5.22.130.0/23 maxlen: 23
5.22.132.0/24 maxlen: 24
5.22.133.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.22.135.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.48.0/24 maxlen: 24
5.144.50.0/24 maxlen: 24
5.144.54.0/24 maxlen: 24
5.144.55.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.62.0/24 maxlen: 24
5.144.63.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.112.0/24 maxlen: 24
37.19.113.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.7.0/24 maxlen: 24
109.226.8.0/22 maxlen: 22
109.226.13.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.15.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.17.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.29.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
109.226.62.0/24 maxlen: 24
109.226.63.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.198.0/24 maxlen: 24
141.226.203.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.208.0/24 maxlen: 24
141.226.209.0/24 maxlen: 24
141.226.210.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.221.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
185.3.145.0/24 maxlen: 24
2a00:c280::/29 maxlen: 29
2a00:c280:100::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1001::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:2001::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:3001::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:4000::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:4100::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 29 May 2024 13:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:11:40:0f:30:bc:0e:01:39:17:65:00:cb:63:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 16 16:18:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e63e194e2167cf9dd30fc2d4cb25a1e93b4d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:62:df:6a:36:0b:77:9b:db:64:6a:98:63:
bb:06:f3:2c:a4:f4:e6:83:8e:40:cb:fa:c9:21:65:
2b:27:15:9a:dd:4c:78:a8:58:97:2a:77:f1:8c:90:
7f:4d:21:7f:b7:56:5d:4d:21:64:3c:87:ee:1c:86:
f1:48:f9:c3:42:ec:4f:88:3b:39:67:8f:df:b6:06:
d2:2c:34:0e:85:62:00:5f:9c:c5:cb:9a:c3:4f:25:
6a:66:12:93:c0:63:99:1b:48:21:b9:92:06:2f:c8:
85:9a:b0:72:3c:db:a5:48:63:5b:0a:cb:f9:22:ce:
ca:73:73:8f:ea:ab:4f:82:61:d6:92:db:17:82:2c:
17:8d:df:93:2a:79:e1:93:82:57:0c:eb:e2:37:75:
41:17:59:d1:30:4e:e9:91:d3:ca:37:47:cf:d0:27:
1d:22:69:78:88:c6:dc:7e:e2:2a:78:8e:7f:a9:8c:
d1:e8:85:38:91:52:46:da:2c:6b:ef:55:e8:da:5f:
cc:df:0f:d6:40:1b:d7:d6:33:b5:d8:58:f7:5c:bc:
cd:d6:84:39:7a:01:3d:4b:58:23:d1:14:f6:3c:7a:
e6:44:c4:be:b5:c4:d1:2a:e4:67:5e:fc:c2:42:64:
e8:2a:ef:26:b2:80:df:fd:a0:88:75:fd:58:b3:c4:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:E1:94:E2:16:7C:F9:DD:30:FC:2D:4C:B2:5A:1E:93:B4:D2:01
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/nmPhlOIWfPndMPwtTLJaHpO00gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
51:7e:6c:40:70:e9:84:ed:a1:53:8f:34:4d:76:12:26:00:bf:
d6:0b:98:5d:f3:fb:ca:f1:79:f5:62:3e:61:00:36:bd:a2:1d:
91:28:70:2b:79:9c:7d:e1:e0:d5:e6:ce:6d:a2:ee:d0:bd:61:
0b:1d:6e:21:e9:34:30:1e:6b:e6:fe:b6:09:48:9e:73:f2:bb:
4a:96:e3:0f:b0:c4:50:fc:28:3a:8a:86:8e:98:f8:0c:26:91:
42:33:b8:e8:7b:c7:fa:ec:d9:86:4a:5a:f7:31:57:80:34:d4:
3f:5e:5f:e8:a6:32:84:de:35:ad:0d:86:da:c8:0d:a9:1b:17:
01:3b:b3:c7:77:fe:7e:a1:f5:d0:96:bc:9d:ef:af:bd:7d:0e:
1b:d5:3e:e7:81:be:17:97:d7:0e:5d:6c:73:92:20:79:3a:09:
3b:6b:e5:74:d7:9f:2a:e1:28:bf:7d:6e:48:db:37:c3:a7:39:
81:88:2f:86:c5:6d:de:dd:03:8c:f1:45:28:cf:4e:72:80:74:
6e:f8:1a:23:70:17:fd:d0:fc:37:63:4a:6f:69:92:a3:68:c3:
39:d7:bb:e6:c2:1f:8b:cc:35:de:10:29:22:45:10:12:49:72:
60:ef:c4:66:24:21:91:88:c7:5c:69:a7:e7:45:d9:3c:30:83:
67:56:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org