Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/i07V4fKDI7OiHLuAYewm8XkEz2I.roa
File: i07V4fKDI7OiHLuAYewm8XkEz2I.roa (raw, json)
Hash identifier: nvbkqBpgitrnfZRYdFVovgA7VZZQ7HwbbCmrJPWdhW4=
Subject key identifier: 8B:4E:D5:E1:F2:83:23:B3:A2:1C:BB:80:61:EC:26:F1:79:04:CF:62
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F2A8D423E8935466AC763412CB2DC7C8
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/i07V4fKDI7OiHLuAYewm8XkEz2I.roa
Signing time: Wed 21 May 2025 11:44:32 +0000
ROA not before: Wed 21 May 2025 11:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:a8:d4:23:e8:93:54:66:ac:76:34:12:cb:2d:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 11:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4ed5e1f28323b3a21cbb8061ec26f17904cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:e2:bd:d3:8a:76:26:bc:81:bd:4e:fc:81:
90:8e:12:17:79:01:e0:93:14:0a:6e:0c:51:ff:34:
48:95:54:8a:3d:54:c9:57:00:2e:87:61:04:58:65:
8f:4a:de:55:ea:42:66:25:ef:db:e4:46:98:7a:76:
83:d9:ca:4e:6f:c0:52:7d:70:a4:32:b6:60:c8:2a:
ca:76:a3:d1:08:24:a9:8e:54:47:75:23:a0:e6:08:
c8:f5:4c:4f:23:91:c5:ad:fd:15:b1:3b:8b:c2:f0:
1e:f1:2e:e6:82:2a:f8:a5:cf:29:f5:a4:85:a5:2b:
e4:16:97:18:06:0a:5e:ed:e3:36:84:99:77:4f:bc:
69:7f:6b:37:27:e7:e2:05:6f:86:e4:63:44:58:72:
06:f7:9d:3d:f2:fa:04:a1:a6:fd:07:42:f0:bc:29:
4f:b3:b8:cc:cb:bb:56:f8:34:06:77:60:21:b2:2e:
a2:b8:8d:83:a2:b9:b8:67:fe:18:c7:a0:5e:85:e9:
b4:bb:dd:e4:0b:3d:60:73:58:36:f1:10:da:48:d3:
2d:d2:2e:73:fa:7d:df:50:82:2f:45:4d:c5:ed:3d:
4c:a0:4d:12:6d:d8:ad:0b:9b:89:8f:6e:ff:e8:0b:
c1:e1:9a:f8:86:9f:9e:3b:36:30:1e:97:07:e8:a4:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:D5:E1:F2:83:23:B3:A2:1C:BB:80:61:EC:26:F1:79:04:CF:62
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/i07V4fKDI7OiHLuAYewm8XkEz2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
2c:d3:26:2f:b6:7d:c8:48:1f:4f:a7:f2:af:11:87:ed:fb:cc:
c6:8a:32:3a:30:00:d4:8d:8e:a5:1c:0f:0f:a8:56:96:f2:6d:
fb:14:3f:e1:9d:45:c1:be:48:42:44:5f:97:27:d8:5a:5b:91:
db:cd:33:b2:26:07:9e:44:32:8b:ff:ca:0a:9c:86:fa:3e:d0:
48:e8:b5:dc:cd:d5:4e:5f:b6:36:c3:96:db:79:cf:09:d1:d1:
f8:be:7d:2e:8a:b0:4c:8d:e8:49:d1:98:1b:5c:8e:e4:ea:20:
cb:74:15:89:24:f6:07:a9:4a:1d:21:c3:7e:e4:cd:8c:f1:98:
b1:97:f9:1b:c4:81:9f:4b:23:f2:1f:50:6c:2d:98:23:c0:c6:
99:5b:7b:6f:37:fb:7f:58:1f:ee:b4:53:bb:b5:5b:e5:d5:68:
95:68:a2:89:54:de:d0:d1:c2:e4:ad:1a:6b:b0:b3:41:ce:30:
e1:a4:50:d9:1d:86:00:66:be:91:6a:cf:1f:e1:68:1a:f5:a2:
30:57:a4:6d:c9:15:46:25:79:98:47:7a:f7:6c:90:82:fa:aa:
f9:7d:8e:db:f8:c9:94:a7:61:bb:ea:1a:dd:88:b9:95:d3:40:
50:3d:b1:6b:aa:4c:de:18:0d:e9:2b:6e:6a:36:bf:0b:96:8a:
ae:b1:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:23 2025 by rpki-client