Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AGvEdo4RTEHVAUM9bZjFbSk7-lQ.roa
File: AGvEdo4RTEHVAUM9bZjFbSk7-lQ.roa (raw, json)
Hash identifier: 75mPry+fPrhlYDVUy/6i9PyLD3JA/mn4I4vTnz8i1q0=
Subject key identifier: 00:6B:C4:76:8E:11:4C:41:D5:01:43:3D:6D:98:C5:6D:29:3B:FA:54
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F296DAE37078640BA01FEADCE194FF6C
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AGvEdo4RTEHVAUM9bZjFbSk7-lQ.roa
Signing time: Wed 21 May 2025 11:24:54 +0000
ROA not before: Wed 21 May 2025 11:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:96:da:e3:70:78:64:0b:a0:1f:ea:dc:e1:94:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006bc4768e114c41d501433d6d98c56d293bfa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:eb:53:ba:5f:4a:5f:4e:01:dd:0a:68:80:
96:17:2d:ab:25:00:6c:f7:f9:03:c0:32:f2:4d:25:
b5:1d:f6:b7:c7:b2:a9:36:cf:6d:66:e4:81:88:65:
ec:d8:7d:42:a8:9c:3a:7b:d5:af:44:f9:a7:46:ab:
fe:d8:6f:99:cf:f7:67:7a:c8:e5:3c:28:a7:cc:77:
1a:23:44:07:49:0b:ed:58:99:0f:99:75:e3:79:5a:
81:f4:27:0f:18:50:85:fc:24:b4:60:a9:00:ab:24:
01:60:46:b0:1e:b2:e2:41:95:46:3d:ec:f2:e8:b4:
ca:fe:30:52:44:90:91:a3:e9:06:b9:61:92:cd:b2:
60:95:f5:9a:ef:c6:0f:43:71:70:f3:19:68:cd:2c:
09:69:39:d9:ba:4c:cb:69:40:f3:6e:fd:1b:65:1f:
37:cb:f8:f8:04:d4:fa:74:db:73:61:1d:15:bc:f2:
07:01:72:d5:74:db:f5:66:2b:6d:d7:b0:70:44:2f:
0d:96:19:39:db:cb:09:09:15:23:fd:70:99:3d:0f:
9e:c9:08:fb:eb:06:cb:b7:07:ca:50:62:9d:15:00:
a4:8c:cb:52:76:18:c5:0a:f8:0c:08:38:f6:11:6f:
e4:47:8b:42:77:70:dd:ea:d4:a6:5c:11:5f:1b:36:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:C4:76:8E:11:4C:41:D5:01:43:3D:6D:98:C5:6D:29:3B:FA:54
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/AGvEdo4RTEHVAUM9bZjFbSk7-lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
77:ee:7e:c8:eb:a8:73:b1:6e:2c:db:cc:6f:63:15:de:3b:62:
d8:ca:20:39:36:ab:43:f6:c5:c8:be:09:d4:14:85:94:50:34:
af:58:a2:a6:80:6b:0a:32:9b:da:d8:b9:b3:e4:c0:1b:0d:f5:
2e:2d:2e:3d:44:dd:bb:52:25:98:4f:b6:3c:73:4d:34:b3:af:
0f:a2:87:ca:20:a8:0d:ca:12:2c:59:4e:82:80:f4:3d:73:26:
2d:2f:90:37:f7:ee:55:2b:0a:e7:77:3a:66:16:5c:d4:17:06:
89:21:ad:05:35:a9:1f:63:c5:2f:d3:98:30:1d:fb:92:8d:46:
ba:48:03:06:5d:89:34:f6:67:4d:29:09:9b:d0:e2:16:80:70:
35:f8:05:0d:ed:3a:88:f1:2d:00:e4:f8:70:d0:50:ff:0d:21:
b6:a1:f5:5b:8d:3c:59:4f:cd:55:27:c3:d4:19:e5:19:df:5f:
ce:42:2f:e0:23:d9:0e:97:bd:e3:6f:05:09:32:91:04:af:40:
f0:a1:64:e3:0f:af:af:39:91:aa:d1:83:af:33:a6:af:4d:f6:
2f:a4:2c:e8:60:76:5b:0a:ac:5b:6d:e0:f7:21:95:da:12:de:
80:c6:09:eb:41:98:f6:90:20:6a:0b:9c:38:f6:40:b9:59:15:
ff:68:42:33
-----BEGIN CERTIFICATE-----
MIIIzDCCB7SgAwIBAgISAZbyltrjcHhkC6Af6tzhlP9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwNTIxMTEyNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDZiYzQ3NjhlMTE0YzQxZDUwMTQzM2Q2ZDk4YzU2ZDI5M2JmYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDrU7pfSl9OAd0KaICWFy2rJQBs
9/kDwDLyTSW1Hfa3x7KpNs9tZuSBiGXs2H1CqJw6e9WvRPmnRqv+2G+Zz/dnesjl
PCinzHcaI0QHSQvtWJkPmXXjeVqB9CcPGFCF/CS0YKkAqyQBYEawHrLiQZVGPezy
6LTK/jBSRJCRo+kGuWGSzbJglfWa78YPQ3Fw8xlozSwJaTnZukzLaUDzbv0bZR83
y/j4BNT6dNtzYR0VvPIHAXLVdNv1Zitt17BwRC8Nlhk528sJCRUj/XCZPQ+eyQj7
6wbLtwfKUGKdFQCkjMtSdhjFCvgMCDj2EW/kR4tCd3Dd6tSmXBFfGzbUgQIDAQAB
o4IF2DCCBdQwHQYDVR0OBBYEFABrxHaOEUxB1QFDPW2YxW0pO/pUMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvQUd2RWRvNFJURUhWQVVNOWJaakZiU2s3LWxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIID7AYIKwYBBQUHAQcBAf8EggPbMIID1zCCA3wEAgABMIID
dAMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEBFBDEAMEBFBawDAMAwQHUO2AAwQAUO2CAwQBUO2EMAwD
BABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDtwgMEAFDt1AMEAVDt
1gMEAVDt+DALAwQAUO37AwMBUOwDBARRFUAwCwMDAFOpAwQEU6kgAwQCU6k0AwQB
VRkQAwQCVRmoMAsDAwFX5gMEAlfmIDAMAwQDV+YoAwQBV+YwMAwDBAJX5jwDBABX
5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZMAwQBV+ZQMAwDBAJX5lQDBAVX5kADBAJX
5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgMEBVhQwAMEBFttAAMEA1v6QDAMAwQEW/pQ
AwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb+gADBANcKxAwDAMEB1wzgAMEA1wzkAME
A1wzoAMEAFwzqgMEAlwztAMEBFw8cAMEA120mAMEA1276AMEBV6IIAMEA21EIAME
BW1oQAMEBG3vMAMEA40AEAMEBJL/IDALAwMCsBwDBAOwHBAwDAMEBbAcIAMEArAc
OAMEALAcPgMEA7Ag4AMEA7DdKDAMAwQGsk1AAwQDsk1QMAwDBAWyTWADBAOyTXAD
BACyTXwDBAK5AoADBAK5B/gDBAK5FWQDBAK5ItQDBAK5VTADBAK5i0gDBAO8XQgD
BAW8eSADBADBEREDBADBimADBAHCkcADBAHDidQDBALD4WgwDAMEANQooQMEAdQo
pAMEANQopzAMAwQA1CipAwQB1CisMAwDBADUKLEDBADUKLQDBAHUKLgwDAMEANQo
uwMEBtQogAMEBdQwQAMEBdRDwAMEBNkI8AMEA9lzgDAMAwQA2XONAwQE2XOAMAwD
BADZc5EDBALZc5ADBAPZc5gwDAMEANl3MQMEANl3MgMEANl3NgMEANl3ODAMAwQF
2aygAwQA2ayiAwQA2aykAwQF2cegMFUEAgACME8DBwAgAQZ8AwgDBQAgARUgAwUA
IAFNCAMFACoAEVgDBQMqABFoAwUAKgAeeAMFACoBBIgDBQAqAgToAwUAKgIHGAMF
ACoCRsADBQIqBE/AMA0GCSqGSIb3DQEBCwUAA4IBAQB37n7I66hzsW4s28xvYxXe
O2LYyiA5NqtD9sXIvgnUFIWUUDSvWKKmgGsKMpva2Lmz5MAbDfUuLS49RN27UiWY
T7Y8c000s68PoofKIKgNyhIsWU6CgPQ9cyYtL5A39+5VKwrndzpmFlzUFwaJIa0F
NakfY8Uv05gwHfuSjUa6SAMGXYk09mdNKQmb0OIWgHA1+AUN7TqI8S0A5Phw0FD/
DSG2ofVbjTxZT81VJ8PUGeUZ31/OQi/gI9kOl73jbwUJMpEEr0DwoWTjD6+vOZGq
0YOvM6avTfYvpCzoYHZbCqxbbeD3IZXaEt6AxgnrQZj2kCBqC5w49kC5WRX/aEIz
-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:20 2025 by rpki-client