Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uv7VLHEGiHOPRAcQgY343Nd5o7c.roa
File: uv7VLHEGiHOPRAcQgY343Nd5o7c.roa (raw, json)
Hash identifier: 7su3sBmPbffkHaevSVeHmXhkhzGzFpakHicZGqU4ZZQ=
Subject key identifier: BA:FE:D5:2C:71:06:88:73:8F:44:07:10:81:8D:F8:DC:D7:79:A3:B7
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0196F19142F790A23C540DA2C981D26ADCAC
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uv7VLHEGiHOPRAcQgY343Nd5o7c.roa
Signing time: Wed 21 May 2025 06:39:10 +0000
ROA not before: Wed 21 May 2025 06:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 07:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:91:42:f7:90:a2:3c:54:0d:a2:c9:81:d2:6a:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: May 21 06:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bafed52c710688738f440710818df8dcd779a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:e5:a5:16:24:a6:36:72:d6:be:fd:fd:30:
f2:7f:1e:26:a7:16:b6:80:96:31:89:56:e8:c2:a4:
e2:4b:c9:0c:a7:30:b8:a0:ea:fb:e4:0c:ba:ba:2d:
51:d1:e0:e7:27:c6:22:5b:90:00:3e:55:6d:1a:68:
98:18:40:eb:2b:0d:0e:06:3f:4d:94:af:bb:25:22:
e5:d0:15:80:80:a3:35:ff:0e:ba:e2:bd:ab:20:1e:
18:d6:84:f7:ca:51:de:14:6c:45:66:82:85:5c:a3:
cc:cf:4b:c2:2a:d0:7c:6c:96:cb:19:93:27:8f:03:
15:b5:eb:67:85:f7:ef:68:b6:ce:c3:e3:93:41:bc:
17:5c:ec:f6:ed:26:f4:5b:4f:c2:b7:45:cc:76:f6:
8c:14:96:0e:4c:d5:6c:d8:f5:08:fb:2e:f2:22:c4:
1d:c2:fc:e6:92:ea:83:28:dd:db:b8:0a:33:9a:8a:
56:d1:73:82:cc:d8:e7:ba:31:03:fd:fe:8c:7e:5e:
a6:e6:c9:ed:5e:b1:c8:e0:45:d0:7b:e3:12:ab:34:
48:0a:4a:9e:d0:63:12:08:6e:c5:96:42:62:13:6a:
9a:15:6b:a8:4f:d5:cc:62:5e:9d:25:81:6f:80:c6:
73:7b:2e:c2:30:f5:f3:d4:42:57:bf:0c:e4:77:ea:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:D5:2C:71:06:88:73:8F:44:07:10:81:8D:F8:DC:D7:79:A3:B7
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uv7VLHEGiHOPRAcQgY343Nd5o7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
a1:58:ba:a5:3c:e5:4b:0c:18:0c:bf:e1:31:94:5b:56:bb:95:
bf:72:7d:fe:36:61:05:8b:fd:04:c0:eb:e7:18:10:e8:4e:d9:
84:52:95:bb:6e:0c:9f:90:41:55:ec:a9:85:d1:46:8b:da:69:
b1:d9:a9:5a:c1:e5:29:15:f4:ab:8b:a7:82:b2:21:8a:98:64:
51:63:b5:64:e4:00:a8:5d:a2:17:06:bb:84:f4:2d:b0:ae:34:
3f:df:64:27:89:41:13:7a:98:67:d4:0f:49:dd:8b:ca:94:60:
b3:dc:9a:69:87:16:77:b3:ba:fe:ee:9f:b8:db:35:75:ea:0e:
e7:62:87:4d:6d:54:91:04:1f:e5:af:e9:34:ee:ff:8e:28:92:
4a:3a:7a:8f:ab:22:56:6a:b2:23:bb:2f:51:f5:db:73:41:5c:
64:d1:45:7e:22:9d:5c:4f:60:94:c1:12:8f:70:6a:8e:45:0d:
67:4d:1c:15:7b:fa:17:0e:72:20:8e:ba:f3:a6:bb:f6:57:80:
4d:92:ff:a9:74:5c:e5:8a:c9:35:a8:8b:71:9b:19:11:d1:3a:
a9:4c:7b:93:ec:7c:2a:ad:06:e6:db:ba:d8:f3:a5:4b:88:b7:
5d:fc:c3:96:9c:2b:83:98:e8:24:17:dc:d6:b4:ae:fb:cc:70:
a7:48:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:03 2025 by rpki-client