Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/RlrsCH6krP_wiBC_ps-_rWmkPTA.roa
File: RlrsCH6krP_wiBC_ps-_rWmkPTA.roa (raw, json)
Hash identifier: FLOMoGnozJiB1BZvRQpuGXUDT6LcogwZotibvzaSbKA=
Subject key identifier: 46:5A:EC:08:7E:A4:AC:FF:F0:88:10:BF:A6:CF:BF:AD:69:A4:3D:30
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F1CF85936F1645507DA1779FC56BD092
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/RlrsCH6krP_wiBC_ps-_rWmkPTA.roa
Signing time: Wed 21 May 2025 07:47:11 +0000
ROA not before: Wed 21 May 2025 07:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:cf:85:93:6f:16:45:50:7d:a1:77:9f:c5:6b:d0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 07:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=465aec087ea4acfff08810bfa6cfbfad69a43d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:89:be:09:25:37:b8:be:b2:bd:4c:21:85:
81:93:09:78:51:5f:aa:5d:d3:41:e4:1b:1a:eb:02:
3a:d0:8a:55:74:4f:01:e8:cf:61:3b:c7:3b:cd:d9:
03:8d:5e:25:fb:2f:4e:66:78:d0:40:24:b4:f9:73:
1a:80:02:a2:3b:cb:a3:e1:e5:fb:a3:04:47:3c:b9:
9a:82:01:64:6f:ed:66:05:b0:2b:3b:cd:f8:e9:0a:
28:de:6c:31:df:29:cf:10:1b:6d:9c:a8:cf:3f:3f:
29:ac:79:14:b8:dc:7a:cc:15:9f:87:4f:92:4c:6c:
9b:0b:49:d5:e2:53:29:7d:12:a7:3a:f8:df:5c:ca:
34:20:45:a8:fb:a3:3d:e2:9b:33:a2:01:53:e8:4f:
4e:54:3b:09:0d:fc:67:08:ec:00:71:0e:7e:df:dd:
e2:ca:bc:21:86:a3:d1:dd:9e:8a:15:a9:1c:a6:a4:
1e:b5:c0:43:68:9c:26:82:7a:b8:27:09:57:18:29:
e0:97:5e:82:f9:ea:d7:97:61:b2:91:20:c0:f7:df:
bb:d9:1f:94:82:7d:8c:5d:a5:1a:08:89:38:bb:69:
14:1d:2c:dd:d3:44:16:41:8b:03:6c:13:b9:29:58:
c1:96:68:35:ed:a4:ae:d0:b0:82:a5:58:3c:78:92:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:EC:08:7E:A4:AC:FF:F0:88:10:BF:A6:CF:BF:AD:69:A4:3D:30
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/RlrsCH6krP_wiBC_ps-_rWmkPTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
66:95:77:12:52:f7:b6:72:3f:e7:74:69:07:42:54:e9:8f:20:
2c:5b:b4:b9:37:26:63:cb:19:fd:e9:69:e5:16:26:6c:c7:61:
f8:23:f9:78:9f:42:26:e5:64:c1:5f:e3:d3:d5:6a:52:f5:ac:
11:38:0c:f5:9c:f6:46:cf:7e:6b:75:c5:42:fe:69:b4:24:4e:
97:d0:fb:b7:5e:b4:e9:34:09:75:e8:d1:fd:6f:2f:c2:4b:92:
69:a3:68:96:c8:5c:9e:4f:b0:64:3a:63:ee:31:a6:a3:c7:ac:
9e:f7:3b:b3:ec:22:0b:f2:3d:16:cb:a5:39:be:11:30:62:e5:
94:04:d7:7a:e3:e7:4f:d6:c3:4f:26:3e:49:cd:52:14:dc:9a:
d6:cc:a3:b7:49:fb:b9:83:b5:df:b8:b2:e0:fc:39:72:1c:60:
22:61:ac:ac:fd:25:41:57:63:ef:6a:ed:3b:48:21:62:60:b4:
e8:c5:4d:e3:76:c0:61:06:14:e0:51:e2:92:8e:01:f0:0d:a6:
01:7e:ea:15:5e:d2:02:52:40:7a:9a:7a:08:f1:e1:32:28:26:
cd:ab:67:54:53:9d:9a:3d:30:40:17:c5:c9:a0:ca:c7:ff:a9:
3b:fd:8b:ca:f0:a8:97:87:72:09:58:3d:9b:4e:b8:5b:12:d4:
e6:fd:d0:27
-----BEGIN CERTIFICATE-----
MIII2DCCB8CgAwIBAgISAZbxz4WTbxZFUH2hd5/Fa9CSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwNTIxMDc0NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjVhZWMwODdlYTRhY2ZmZjA4ODEwYmZhNmNmYmZhZDY5YTQzZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA816JvgklN7i+sr1MIYWBkwl4UV+q
XdNB5Bsa6wI60IpVdE8B6M9hO8c7zdkDjV4l+y9OZnjQQCS0+XMagAKiO8uj4eX7
owRHPLmaggFkb+1mBbArO8346Qoo3mwx3ynPEBttnKjPPz8prHkUuNx6zBWfh0+S
TGybC0nV4lMpfRKnOvjfXMo0IEWo+6M94pszogFT6E9OVDsJDfxnCOwAcQ5+393i
yrwhhqPR3Z6KFakcpqQetcBDaJwmgnq4JwlXGCngl16C+erXl2GykSDA99+72R+U
gn2MXaUaCIk4u2kUHSzd00QWQYsDbBO5KVjBlmg17aSu0LCCpVg8eJJ5/QIDAQAB
o4IF5DCCBeAwHQYDVR0OBBYEFEZa7Ah+pKz/8IgQv6bPv61ppD0wMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvUmxyc0NINmtyUF93aUJDX3BzLV9yV21rUFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIID+AYIKwYBBQUHAQcBAf8EggPnMIID4zCCA4gEAgABMIID
gAMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEBFBDEAMEBFBawDAMAwQHUO2AAwQAUO2CAwQBUO2EMAwD
BABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDtwgMEAFDt1AMEAVDt
1gMEAVDt+DALAwQAUO37AwMBUOwDBARRFUAwCwMDAFOpAwQEU6kgAwQCU6k0AwQB
VRkQAwQCVRmoMAsDAwFX5gMEAlfmIDAMAwQDV+YoAwQBV+YwMAwDBAJX5jwDBABX
5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZMAwQBV+ZQMAwDBAJX5lQDBAVX5kADBAJX
5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgMEBVhQwAMEBFttAAMEA1v6QDAMAwQEW/pQ
AwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb+gADBANcKxAwDAMEB1wzgAMEA1wzkAME
A1wzoAMEAFwzqgMEAlwztAMEBFw8cAMEA11ckAMEA120mAMEA1276AMEBV6IIAME
A17H8AMEA21EIAMEBW1oQAMEBG3vMAMEA40AEAMEBJL/IDALAwMCsBwDBAOwHBAw
DAMEBbAcIAMEArAcOAMEALAcPgMEA7Ag4AMEA7DdKDAMAwQGsk1AAwQDsk1QMAwD
BAWyTWADBAOyTXADBACyTXwDBAK5AoADBAK5B/gDBAK5FWQDBAK5ItQDBAK5VTAD
BAK5i0gDBAO8XQgDBAW8eSADBADBEREDBADBimADBAHCkcADBAHDidQDBALD4Wgw
DAMEANQooQMEAdQopAMEANQopzAMAwQA1CipAwQB1CisMAwDBADUKLEDBADUKLQD
BAHUKLgwDAMEANQouwMEBtQogAMEBdQwQAMEBdRDwAMEBNkI8AMEA9lzgDAMAwQA
2XONAwQE2XOAMAwDBADZc5EDBALZc5ADBAPZc5gwDAMEANl3MQMEANl3MgMEANl3
NgMEANl3ODAMAwQF2aygAwQA2ayiAwQA2aykAwQF2cegMFUEAgACME8DBwAgAQZ8
AwgDBQAgARUgAwUAIAFNCAMFACoAEVgDBQMqABFoAwUAKgAeeAMFACoBBIgDBQAq
AgToAwUAKgIHGAMFACoCRsADBQIqBE/AMA0GCSqGSIb3DQEBCwUAA4IBAQBmlXcS
Uve2cj/ndGkHQlTpjyAsW7S5NyZjyxn96WnlFiZsx2H4I/l4n0Im5WTBX+PT1WpS
9awROAz1nPZGz35rdcVC/mm0JE6X0Pu3XrTpNAl16NH9by/CS5Jpo2iWyFyeT7Bk
OmPuMaajx6ye9zuz7CIL8j0Wy6U5vhEwYuWUBNd64+dP1sNPJj5JzVIU3JrWzKO3
Sfu5g7XfuLLg/DlyHGAiYays/SVBV2Pvau07SCFiYLToxU3jdsBhBhTgUeKSjgHw
DaYBfuoVXtICUkB6mnoI8eEyKCbNq2dUU52aPTBAF8XJoMrH/6k7/YvK8KiXh3IJ
WD2bTrhbEtTm/dAn
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:24:00 2025 by rpki-client