Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/VHc3TLJb8Qw7EauRu319QFPz0E8.roa
File: VHc3TLJb8Qw7EauRu319QFPz0E8.roa (raw, json)
Hash identifier: NVNuizuAokFHs583Hp8J0QQiyEtdl4rzMIZxqVhiUYI=
Subject key identifier: 54:77:37:4C:B2:5B:F1:0C:3B:11:AB:91:BB:7D:7D:40:53:F3:D0:4F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F1914358902EEB1B987BB4F45A636090
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/VHc3TLJb8Qw7EauRu319QFPz0E8.roa
Signing time: Wed 21 May 2025 06:39:11 +0000
ROA not before: Wed 21 May 2025 06:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26496
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 07:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:91:43:58:90:2e:eb:1b:98:7b:b4:f4:5a:63:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 06:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5477374cb25bf10c3b11ab91bb7d7d4053f3d04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:1f:e8:00:0b:9a:1a:78:fb:39:07:4d:d2:
0e:3c:50:f3:85:ca:6a:b8:4a:26:38:01:80:d9:07:
73:80:70:9f:5e:c6:2f:88:4d:09:17:c5:aa:00:c7:
b1:7d:ae:7c:8c:53:44:21:cb:b3:03:df:73:f0:1c:
ba:e6:c1:d6:8a:3f:69:d9:21:6d:79:5e:46:7d:06:
ef:75:e2:3c:5f:5d:dc:50:11:23:45:2a:a6:8d:96:
c1:d5:34:69:4e:ae:ba:20:8d:84:e3:bf:32:46:58:
1f:ab:31:57:1d:49:f0:6e:fc:8c:d7:f8:c9:55:25:
a6:04:3d:ed:c1:60:96:58:93:c0:c0:b5:52:78:6a:
95:ef:7f:1d:af:b8:18:5a:cd:94:bc:03:26:a1:25:
22:59:ee:43:b2:2e:82:46:de:ca:5c:28:ca:30:14:
ed:36:55:70:63:69:1c:e5:39:b1:19:af:23:2f:90:
59:72:35:35:c7:16:ff:c2:fd:4f:06:ab:41:f1:e0:
29:45:f6:8e:62:e8:6b:ef:8b:be:c0:48:3d:ff:b4:
53:ab:28:69:c3:d5:ef:14:67:c5:42:08:82:b7:10:
fd:13:ba:00:a4:29:f1:53:de:95:fc:a2:0b:37:16:
9a:d3:aa:f0:12:b8:c7:d7:62:6e:c5:62:7d:46:75:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:37:4C:B2:5B:F1:0C:3B:11:AB:91:BB:7D:7D:40:53:F3:D0:4F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/VHc3TLJb8Qw7EauRu319QFPz0E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
20:73:44:5a:32:40:b1:7c:c4:45:57:c6:b4:91:f6:34:c3:3a:
22:9b:09:61:7b:45:27:b1:dd:89:2c:2b:6f:a4:d9:c6:6d:a2:
bf:5c:27:47:75:dd:44:41:49:b3:e1:f4:64:47:3c:70:a9:2f:
8e:fd:a1:d4:91:83:ad:56:17:e5:ba:cc:3a:39:5a:d2:7e:d3:
16:78:8e:ba:13:ef:6f:7a:7c:53:02:3d:71:f9:ca:db:3b:e3:
ed:d0:df:bd:29:3b:c7:1a:56:b0:5c:17:27:e5:a6:c8:23:35:
bf:03:40:3c:f3:06:2f:b6:4c:58:a6:06:cb:61:d0:43:21:83:
61:9a:eb:d9:ef:43:95:24:40:25:43:a0:f2:e4:e5:eb:3f:57:
6b:ed:d3:3e:1e:90:26:9b:d8:e2:82:de:89:55:09:8c:4e:eb:
63:d1:81:ab:aa:3c:18:1e:05:cc:ab:81:d4:76:f0:ac:fb:09:
10:76:f1:53:a0:20:7e:41:6c:1f:4b:40:d9:bc:29:34:78:ea:
6e:34:52:6a:ef:d7:a3:4e:1c:bb:59:e9:46:9a:19:7d:fe:b6:
00:a0:21:18:37:ea:5b:a5:8d:9c:54:e7:95:88:05:c7:81:e0:
6e:a4:52:06:ff:a6:d6:51:07:cf:74:f0:bc:7a:1d:08:27:46:
e4:87:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:19:15 2025 by rpki-client