Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ITslC41ef15J2JQzqvA9vD8-5fI.roa
File: ITslC41ef15J2JQzqvA9vD8-5fI.roa (raw, json)
Hash identifier: SzcpBNaKimkusrm6wXWssEG+WLvh5EDnvEH6AECVqzU=
Subject key identifier: 21:3B:25:0B:8D:5E:7F:5E:49:D8:94:33:AA:F0:3D:BC:3F:3E:E5:F2
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01949C189E393E5A54AF4A2B40D3287F7EE2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ITslC41ef15J2JQzqvA9vD8-5fI.roa
Signing time: Sat 25 Jan 2025 06:14:06 +0000
ROA not before: Sat 25 Jan 2025 06:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 5.134.192.0/21 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.71.0/24 maxlen: 32
31.7.72.0/21 maxlen: 32
31.7.72.0/24 maxlen: 32
31.7.73.0/24 maxlen: 32
31.7.74.0/24 maxlen: 32
31.7.75.0/24 maxlen: 32
31.7.76.0/24 maxlen: 32
31.7.77.0/24 maxlen: 32
31.7.78.0/24 maxlen: 32
31.7.79.0/24 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.12.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.15.0/24 maxlen: 24
37.156.144.0/22 maxlen: 32
37.156.144.0/24 maxlen: 32
37.156.145.0/24 maxlen: 32
37.156.146.0/24 maxlen: 32
37.156.147.0/24 maxlen: 32
46.143.0.0/17 maxlen: 32
46.245.64.0/18 maxlen: 32
46.245.64.0/22 maxlen: 32
46.245.64.0/24 maxlen: 32
46.245.65.0/24 maxlen: 32
46.245.66.0/24 maxlen: 32
46.245.67.0/24 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.68.0/24 maxlen: 32
46.245.69.0/24 maxlen: 32
46.245.70.0/24 maxlen: 32
46.245.71.0/24 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.72.0/24 maxlen: 32
46.245.73.0/24 maxlen: 32
46.245.74.0/24 maxlen: 32
46.245.75.0/24 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.76.0/24 maxlen: 32
46.245.77.0/24 maxlen: 32
46.245.78.0/24 maxlen: 32
46.245.79.0/24 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.80.0/24 maxlen: 32
46.245.81.0/24 maxlen: 32
46.245.82.0/24 maxlen: 32
46.245.83.0/24 maxlen: 32
46.245.84.0/22 maxlen: 32
46.245.84.0/24 maxlen: 32
46.245.85.0/24 maxlen: 32
46.245.86.0/24 maxlen: 32
46.245.87.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.88.0/24 maxlen: 32
46.245.89.0/24 maxlen: 32
46.245.90.0/24 maxlen: 32
46.245.91.0/24 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.92.0/24 maxlen: 32
46.245.93.0/24 maxlen: 32
46.245.94.0/24 maxlen: 32
46.245.95.0/24 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.96.0/24 maxlen: 32
46.245.97.0/24 maxlen: 32
46.245.98.0/24 maxlen: 32
46.245.99.0/24 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.100.0/24 maxlen: 32
46.245.101.0/24 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
78.110.124.0/22 maxlen: 32
78.110.124.0/23 maxlen: 32
78.110.126.0/23 maxlen: 32
79.127.0.0/17 maxlen: 32
85.198.28.0/22 maxlen: 32
85.198.28.0/23 maxlen: 32
85.198.30.0/23 maxlen: 32
86.57.0.0/22 maxlen: 22
86.57.4.0/22 maxlen: 22
86.57.8.0/22 maxlen: 22
86.57.12.0/22 maxlen: 22
86.57.16.0/22 maxlen: 22
86.57.20.0/22 maxlen: 22
86.57.24.0/22 maxlen: 22
86.57.28.0/22 maxlen: 22
86.57.32.0/22 maxlen: 22
86.57.36.0/22 maxlen: 22
86.57.40.0/22 maxlen: 22
86.57.44.0/22 maxlen: 22
86.57.48.0/22 maxlen: 22
86.57.52.0/22 maxlen: 22
86.57.56.0/22 maxlen: 22
86.57.60.0/22 maxlen: 22
86.57.64.0/22 maxlen: 22
86.57.68.0/22 maxlen: 22
86.57.72.0/22 maxlen: 22
86.57.76.0/22 maxlen: 22
86.57.80.0/22 maxlen: 22
86.57.84.0/22 maxlen: 22
86.57.88.0/22 maxlen: 22
86.57.92.0/22 maxlen: 22
86.57.100.0/22 maxlen: 22
86.57.104.0/22 maxlen: 22
86.57.108.0/22 maxlen: 22
86.57.112.0/22 maxlen: 22
86.57.116.0/22 maxlen: 22
86.57.120.0/22 maxlen: 22
86.57.124.0/22 maxlen: 22
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
109.122.224.0/20 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
178.22.120.0/21 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
178.216.251.0/24 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
188.0.240.0/23 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
2a05:1a00::/26 maxlen: 128
2a05:1a10::/29 maxlen: 128
2a06:5484::/30 maxlen: 128
Validation: Failed, certificate revoked on Sat 08 Mar 2025 07:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:18:9e:39:3e:5a:54:af:4a:2b:40:d3:28:7f:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 25 06:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=213b250b8d5e7f5e49d89433aaf03dbc3f3ee5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:97:07:29:2b:21:d7:c5:01:93:9f:a7:93:
0f:bb:b1:bf:70:58:e0:e1:a6:d1:04:d5:e5:26:37:
68:36:52:86:db:e1:60:22:70:d5:3d:33:99:0e:5c:
a5:49:5e:d7:d8:c3:d7:97:51:de:57:4e:a5:98:38:
d9:98:97:b3:cb:4e:48:d9:cd:55:b9:a9:a2:47:b7:
2c:7a:4e:0a:b8:2f:cd:bd:f4:41:9e:9c:a1:99:14:
95:56:13:4e:b4:d1:da:c4:80:8a:fa:8f:c6:aa:15:
4f:5e:70:42:b4:c4:fe:25:bc:fd:af:81:5f:d7:b9:
3a:67:23:fb:d5:e1:54:77:f1:c9:53:97:65:16:15:
29:9d:eb:93:58:8e:bb:64:af:3c:dc:1f:5f:12:64:
17:bb:c7:57:4e:8c:3b:23:2e:c6:43:ec:f3:81:a7:
fe:97:d9:1a:08:e7:d9:91:ec:64:39:95:07:7f:47:
66:70:23:03:a5:47:14:13:e3:89:5b:25:1a:08:a3:
c0:b8:bf:b0:59:06:6e:64:79:03:7f:24:b7:77:50:
65:57:17:8c:4b:15:f0:15:b3:e3:85:f3:8e:f8:07:
32:25:75:02:14:df:a0:52:86:a5:0d:18:c4:c7:88:
07:d6:b9:cb:53:14:6b:0b:e8:d0:bc:f8:f6:29:ee:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:25:0B:8D:5E:7F:5E:49:D8:94:33:AA:F0:3D:BC:3F:3E:E5:F2
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ITslC41ef15J2JQzqvA9vD8-5fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
78.110.124.0/22
79.127.0.0/17
85.198.28.0/22
86.57.0.0-86.57.95.255
86.57.100.0-86.57.127.255
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
68:aa:f8:46:f6:31:95:08:f2:66:67:e4:40:6e:f6:ee:cc:f6:
a9:4d:78:8f:55:1f:ed:76:b4:0a:83:bb:1d:56:0e:ef:2a:c7:
74:11:aa:51:ae:a2:b0:8b:84:33:86:bd:d7:4b:51:6f:0e:e3:
06:08:82:f4:27:e3:6b:56:a3:d5:b8:7d:f8:b3:72:a7:5a:cb:
7b:7f:2c:f4:20:28:bf:5d:39:f2:e1:4b:91:72:e1:9b:df:f6:
a2:9d:a9:9d:cc:9d:19:55:6a:be:dc:09:f3:35:c6:32:4b:21:
7f:43:56:e0:2f:85:a9:e7:09:c5:e0:0f:2f:f0:21:46:a8:c5:
95:d0:71:a5:99:22:09:51:9f:22:8c:9b:a8:22:c8:0f:fb:ef:
c5:9f:9f:b2:44:c9:6d:59:17:05:65:bb:77:97:24:9d:1a:f2:
42:c8:77:10:30:a2:d9:db:0a:78:6a:cb:ab:02:96:10:81:63:
cf:c5:ec:8e:89:38:35:c6:c5:34:ce:fc:ce:85:4e:89:56:dc:
40:a8:78:ac:bc:2f:9b:39:7f:44:90:8d:1c:71:36:08:d3:6f:
6e:27:86:24:83:51:35:53:d0:cb:24:b0:3d:13:0c:77:f6:a5:
66:a5:60:91:38:d3:ac:2a:23:7b:b6:4d:da:28:6f:4d:cc:f5:
a3:23:ad:cd
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISAZScGJ45PlpUr0orQNMof37iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwMTI1MDYxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTNiMjUwYjhkNWU3ZjVlNDlkODk0MzNhYWYwM2RiYzNmM2VlNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqXBykrIdfFAZOfp5MPu7G/cFjg
4abRBNXlJjdoNlKG2+FgInDVPTOZDlylSV7X2MPXl1HeV06lmDjZmJezy05I2c1V
uamiR7csek4KuC/NvfRBnpyhmRSVVhNOtNHaxICK+o/GqhVPXnBCtMT+Jbz9r4Ff
17k6ZyP71eFUd/HJU5dlFhUpneuTWI67ZK883B9fEmQXu8dXTow7Iy7GQ+zzgaf+
l9kaCOfZkexkOZUHf0dmcCMDpUcUE+OJWyUaCKPAuL+wWQZuZHkDfyS3d1BlVxeM
SxXwFbPjhfOO+AcyJXUCFN+gUoalDRjEx4gH1rnLUxRrC+jQvPj2Ke4ZXQIDAQAB
o4IDEDCCAwwwHQYDVR0OBBYEFCE7JQuNXn9eSdiUM6rwPbw/PuXyMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvSVRzbEM0MWVmMTVKMkpRenF2QTl2RDgtNWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCB9gQCAAEwge8D
BAMFhsADBAQfB0ADBAMfGYADBAMlnAgDBAIlnJADBAcujwADBAYu9UADBANN7mgD
BAJN7ngDBAJObnwDBAdPfwADBAJVxhwwCwMDAFY5AwQFVjlAMAwDBAJWOWQDBAdW
OQADBAJZKSgDBAJZ62ADBANdc5ADBAJddrQDBARteuADBASAQbADBAKwQfADBAKw
QfwDBAOyFngDBAKy2PgDBAK5MVQDBAK5YnADBAK5Y9QwDAMEArlt9AMEArlt+AME
A7lwIAMEArl43AMEArl4+AMEArmNqAMEArmN1AMEArmToAMEAbwA8AMEBNQhwDAU
BAIAAjAOAwUGKgUaAAMFAioGVIQwDQYJKoZIhvcNAQELBQADggEBAGiq+Eb2MZUI
8mZn5EBu9u7M9qlNeI9VH+12tAqDux1WDu8qx3QRqlGuorCLhDOGvddLUW8O4wYI
gvQn42tWo9W4ffizcqday3t/LPQgKL9dOfLhS5Fy4Zvf9qKdqZ3MnRlVar7cCfM1
xjJLIX9DVuAvhannCcXgDy/wIUaoxZXQcaWZIglRnyKMm6giyA/778Wfn7JEyW1Z
FwVlu3eXJJ0a8kLIdxAwotnbCnhqy6sClhCBY8/F7I6JODXGxTTO/M6FTolW3ECo
eKy8L5s5f0SQjRxxNgjTb24nhiSDUTVT0MsksD0TDHf2pWalYJE406wqI3u2Tdoo
b03M9aMjrc0=
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:45:38 2025 by rpki-client