Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/yCBarvcxX3EPCwFfm61rERDGu8U.roa
File: yCBarvcxX3EPCwFfm61rERDGu8U.roa (raw, json)
Hash identifier: JvK4VOW7EJi3pDYuaro3ofDEi/Pshu86IvgyyCzKpU4=
Subject key identifier: C8:20:5A:AE:F7:31:5F:71:0F:0B:01:5F:9B:AD:6B:11:10:C6:BB:C5
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 019420D606795A97A11902E882E65CD99DE2
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/yCBarvcxX3EPCwFfm61rERDGu8U.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9146
IP address blocks: 31.176.128.0/17 maxlen: 21
31.176.128.0/19 maxlen: 19
31.176.128.0/20 maxlen: 20
31.176.144.0/20 maxlen: 20
31.176.160.0/19 maxlen: 19
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
31.176.192.0/20 maxlen: 20
31.176.208.0/21 maxlen: 21
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
31.176.224.0/20 maxlen: 20
31.176.240.0/20 maxlen: 20
37.203.64.0/18 maxlen: 21
37.203.64.0/20 maxlen: 20
37.203.80.0/20 maxlen: 20
37.203.96.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
80.65.64.0/19 maxlen: 21
80.65.64.0/20 maxlen: 20
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.68.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.72.0/22 maxlen: 22
80.65.76.0/22 maxlen: 22
80.65.80.0/20 maxlen: 20
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
85.92.224.0/19 maxlen: 19
85.92.226.0/24 maxlen: 24
85.92.227.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
85.92.230.0/24 maxlen: 24
85.92.232.0/21 maxlen: 21
85.92.240.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
89.146.128.0/20 maxlen: 20
89.146.144.0/20 maxlen: 20
89.146.160.0/20 maxlen: 20
89.146.176.0/20 maxlen: 20
92.36.128.0/17 maxlen: 21
92.36.128.0/19 maxlen: 19
92.36.128.0/21 maxlen: 21
92.36.136.0/21 maxlen: 21
92.36.144.0/20 maxlen: 20
92.36.160.0/19 maxlen: 19
92.36.160.0/20 maxlen: 20
92.36.176.0/20 maxlen: 20
92.36.192.0/19 maxlen: 19
92.36.192.0/20 maxlen: 20
92.36.192.0/21 maxlen: 21
92.36.208.0/20 maxlen: 20
92.36.224.0/19 maxlen: 19
92.36.224.0/20 maxlen: 20
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.240.0/21 maxlen: 21
109.163.128.0/18 maxlen: 18
109.163.128.0/19 maxlen: 19
109.163.128.0/22 maxlen: 22
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
109.163.146.0/24 maxlen: 24
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.168.0/21 maxlen: 23
109.163.168.0/23 maxlen: 23
109.163.170.0/24 maxlen: 24
109.163.171.0/24 maxlen: 24
109.163.172.0/22 maxlen: 22
109.163.176.0/20 maxlen: 21
109.163.176.0/21 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.188.0/23 maxlen: 23
109.163.190.0/23 maxlen: 23
109.175.0.0/17 maxlen: 21
109.175.0.0/19 maxlen: 19
109.175.4.0/23 maxlen: 23
109.175.6.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
109.175.20.0/23 maxlen: 23
109.175.22.0/23 maxlen: 23
109.175.24.0/24 maxlen: 24
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
109.175.32.0/19 maxlen: 19
109.175.32.0/21 maxlen: 21
109.175.38.0/23 maxlen: 23
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
109.175.48.0/20 maxlen: 20
109.175.64.0/20 maxlen: 20
109.175.96.0/19 maxlen: 19
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.98.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.100.0/23 maxlen: 23
109.175.102.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.106.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
195.222.48.0/20 maxlen: 20
195.222.48.0/21 maxlen: 21
195.222.49.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 02 Feb 2025 09:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:79:5a:97:a1:19:02:e8:82:e6:5c:d9:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8205aaef7315f710f0b015f9bad6b1110c6bbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:52:78:9a:44:36:2b:81:f1:a6:de:fc:aa:
dd:83:e5:97:f7:6b:b3:4d:c2:c3:f6:0c:79:74:d5:
28:04:ae:31:1d:d9:76:24:3c:94:a2:43:bb:4a:ae:
36:40:63:1f:82:a0:7e:85:60:39:6a:f8:cf:0e:1d:
86:4e:5a:e0:a8:b9:4c:9a:1c:9a:9e:ba:30:28:ff:
50:28:84:27:8e:7c:61:ed:78:ce:94:73:b1:6a:54:
4c:3e:3b:cf:4e:53:fb:e5:bb:34:af:c2:64:38:33:
3e:ee:1c:99:0e:4f:33:ee:df:be:9a:64:1d:3c:b8:
af:98:a9:c4:4f:56:80:d5:7f:a3:67:02:45:4a:20:
54:70:d4:20:8f:83:5b:af:9e:80:57:12:d6:19:ad:
a2:99:16:d0:19:34:dd:10:4f:f1:ba:06:ca:cf:d7:
1d:da:a6:66:36:f7:83:6b:65:07:92:1e:d2:d1:0d:
16:69:c0:3e:bc:f9:37:55:f0:9d:00:9f:75:36:ee:
33:01:9d:6a:89:b0:bd:1d:4a:b5:af:42:26:2f:49:
f2:49:d1:db:77:af:9a:e5:55:71:cf:c6:83:70:20:
3e:c6:ad:f4:d0:5e:4b:2b:6b:a3:8f:c7:9b:7f:00:
7c:28:7a:8f:d4:f4:92:60:25:d9:c9:82:4c:64:26:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:5A:AE:F7:31:5F:71:0F:0B:01:5F:9B:AD:6B:11:10:C6:BB:C5
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/yCBarvcxX3EPCwFfm61rERDGu8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
54:d6:7f:12:5a:87:99:24:4a:97:cd:55:d4:9b:19:ea:88:ff:
c9:c3:64:48:fb:59:b8:6e:99:3e:2e:8f:98:40:25:23:24:dd:
6e:72:33:17:21:45:d8:51:e8:44:fc:b3:45:da:d3:05:50:83:
ca:1e:cb:b9:fe:b3:b0:b6:e3:b5:04:b7:6e:c3:20:eb:83:d9:
29:aa:6e:91:e9:c1:a4:37:85:f7:8a:f1:f0:80:cc:c7:eb:51:
ce:18:3d:5a:0f:4a:79:39:a0:68:18:78:0d:0d:d8:04:b2:93:
1c:e0:53:e7:92:c0:ac:87:63:6c:6e:ec:89:7c:e3:b7:b9:bc:
3a:b2:51:d5:f1:52:5e:5c:75:e5:e6:db:cf:2c:f8:f8:3e:d3:
84:68:0a:34:de:5e:36:d1:2f:cf:81:26:d3:2f:06:be:37:35:
1f:b4:f8:05:b9:c3:95:b9:ea:1a:ca:c5:4f:b2:e6:04:af:88:
1a:33:f9:95:3e:ae:fe:b2:f4:61:73:22:69:dc:c8:47:45:aa:
e8:00:8e:8c:53:ad:e3:65:56:d2:7b:38:a5:f8:f3:3e:85:83:
63:68:c1:b6:88:52:d5:b6:12:ec:db:62:c7:e4:0c:94:b0:f3:
05:3b:d8:6e:79:8c:0f:2e:2a:64:b9:0b:b3:57:51:6b:8a:88:
3c:3b:f5:93
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZQg1gZ5WpehGQLoguZc2Z3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx
YjFlM2YwHhcNMjUwMTAxMDc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODIwNWFhZWY3MzE1ZjcxMGYwYjAxNWY5YmFkNmIxMTEwYzZiYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR5SeJpENiuB8abe/Krdg+WX92uz
TcLD9gx5dNUoBK4xHdl2JDyUokO7Sq42QGMfgqB+hWA5avjPDh2GTlrgqLlMmhya
nrowKP9QKIQnjnxh7XjOlHOxalRMPjvPTlP75bs0r8JkODM+7hyZDk8z7t++mmQd
PLivmKnET1aA1X+jZwJFSiBUcNQgj4Nbr56AVxLWGa2imRbQGTTdEE/xugbKz9cd
2qZmNveDa2UHkh7S0Q0WacA+vPk3VfCdAJ91Nu4zAZ1qibC9HUq1r0ImL0nySdHb
d6+a5VVxz8aDcCA+xq300F5LK2ujj8ebfwB8KHqP1PSSYCXZyYJMZCbAVQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFMggWq73MV9xDwsBX5utaxEQxrvFMB8GA1UdIwQY
MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt
MmJiMWVmYzU3YTg2LzEveUNCYXJ2Y3hYM0VQQ3dGZm02MXJFUkRHdThVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2
LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQHH7CAAwQG
JctAAwQFUEFAAwQFVVzgAwQGWZKAAwQHXCSAAwQGbaOAAwQHba8AAwQAuQxMAwQB
uQxOAwQFw94gMA0EAgACMAcDBQAqAiewMA0GCSqGSIb3DQEBCwUAA4IBAQBU1n8S
WoeZJEqXzVXUmxnqiP/Jw2RI+1m4bpk+Lo+YQCUjJN1ucjMXIUXYUehE/LNF2tMF
UIPKHsu5/rOwtuO1BLduwyDrg9kpqm6R6cGkN4X3ivHwgMzH61HOGD1aD0p5OaBo
GHgNDdgEspMc4FPnksCsh2NsbuyJfOO3ubw6slHV8VJeXHXl5tvPLPj4PtOEaAo0
3l420S/PgSbTLwa+NzUftPgFucOVueoaysVPsuYEr4gaM/mVPq7+svRhcyJp3MhH
RaroAI6MU63jZVbSezil+PM+hYNjaMG2iFLVthLs22LH5AyUsPMFO9hueYwPLipk
uQuzV1Friog8O/WT
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:56 2025 by rpki-client