Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7UjcyH1w0iyrXWQEC7kxlcAoSTo.roa
File: 7UjcyH1w0iyrXWQEC7kxlcAoSTo.roa (raw, json)
Hash identifier: hbb4pQslhlwv9fRojOw5OmYeSHfSQll0W2jRRrD93dE=
Subject key identifier: ED:48:DC:C8:7D:70:D2:2C:AB:5D:64:04:0B:B9:31:95:C0:28:49:3A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01960055E019A1D7037EF36E7243D744BA62
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7UjcyH1w0iyrXWQEC7kxlcAoSTo.roa
Signing time: Fri 04 Apr 2025 10:25:50 +0000
ROA not before: Fri 04 Apr 2025 10:25:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 16:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:55:e0:19:a1:d7:03:7e:f3:6e:72:43:d7:44:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 4 10:25:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed48dcc87d70d22cab5d64040bb93195c028493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:7f:b9:2c:47:59:14:a6:4a:f8:5a:6a:db:
33:ed:be:ee:f1:62:08:dd:04:72:1d:49:fc:f9:08:
77:45:7a:8f:f2:5a:61:25:15:75:7a:c9:9c:80:46:
7d:30:d7:f9:b2:16:76:7f:70:69:1d:8d:d1:28:4d:
e6:34:49:29:8a:6e:7c:40:cb:58:f9:ea:7f:94:dd:
ff:bc:cd:8c:f5:92:64:f5:ca:45:97:32:12:35:84:
b5:52:fd:0e:8a:96:a4:df:4c:32:43:82:64:e9:b1:
20:ac:cf:bd:64:05:7e:b8:17:3a:c6:bd:cb:7b:c4:
57:08:03:bb:7a:d0:70:0e:9a:ca:4b:2f:89:4e:6e:
e1:ea:2a:fb:e2:cc:03:41:d1:6f:54:3f:13:34:c1:
ef:53:c4:c5:c9:ad:af:71:70:66:bb:45:7a:51:f2:
5b:85:37:7e:c3:4f:6c:69:c2:78:15:bf:08:13:f9:
46:ed:11:6a:e6:03:b4:90:a4:2d:8d:cb:d0:01:0d:
89:24:15:a3:8e:7c:21:71:8d:5d:67:56:e6:f6:39:
f9:58:1d:1f:cb:d7:e9:73:50:34:d0:ff:4f:60:b9:
aa:89:4b:69:90:0f:a6:fb:76:cf:3b:1a:56:2e:73:
fe:3a:d7:2e:a2:de:d3:0c:eb:9d:c7:00:f9:24:4e:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:DC:C8:7D:70:D2:2C:AB:5D:64:04:0B:B9:31:95:C0:28:49:3A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7UjcyH1w0iyrXWQEC7kxlcAoSTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.173.255
212.32.74.0/24
212.56.50.0/23
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
57:09:f8:b1:fb:43:12:5c:c4:d0:69:85:50:f7:af:01:8c:f5:
85:9b:12:79:a0:70:7e:28:25:30:a8:07:4b:5d:11:c5:7d:b5:
6f:97:c9:3f:b9:f6:0b:c6:54:17:02:a9:f0:e2:a1:c3:e0:e2:
a8:17:aa:94:b6:e4:d7:eb:30:ff:39:9a:97:47:37:c1:b0:9d:
26:d4:f4:e5:33:9e:f3:5e:cf:b8:a4:e1:8c:fd:2c:69:67:48:
11:75:55:6f:fe:18:9d:08:8a:10:dd:45:78:ce:ae:94:e2:b6:
27:4b:52:b6:32:ee:36:75:93:49:a5:e1:51:c6:75:46:06:2c:
c5:2a:0a:f0:be:ce:78:6b:86:83:e7:e1:2a:88:47:b9:5b:54:
aa:d9:d2:69:b2:75:f2:40:46:28:f2:d1:54:f5:9e:23:6b:06:
61:73:9a:73:7c:87:c2:06:b1:0f:0e:ad:6b:d4:24:2b:92:66:
56:c1:78:80:29:de:6a:c9:c9:18:82:c1:73:34:90:d0:ea:1f:
5c:dc:e7:8c:75:47:d0:4c:88:38:e3:8a:92:fb:d6:a4:72:08:
b2:25:72:e5:26:8d:c0:3e:d4:ec:84:f1:ed:f0:e2:9a:47:30:
de:cb:aa:de:a6:41:7f:ba:2d:e1:37:13:ef:de:81:84:c4:c9:
6a:aa:46:02
-----BEGIN CERTIFICATE-----
MIIGeTCCBWGgAwIBAgISAZYAVeAZodcDfvNuckPXRLpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwNDA0MTAyNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDQ4ZGNjODdkNzBkMjJjYWI1ZDY0MDQwYmI5MzE5NWMwMjg0OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJ/uSxHWRSmSvhaatsz7b7u8WII
3QRyHUn8+Qh3RXqP8lphJRV1esmcgEZ9MNf5shZ2f3BpHY3RKE3mNEkpim58QMtY
+ep/lN3/vM2M9ZJk9cpFlzISNYS1Uv0Oipak30wyQ4Jk6bEgrM+9ZAV+uBc6xr3L
e8RXCAO7etBwDprKSy+JTm7h6ir74swDQdFvVD8TNMHvU8TFya2vcXBmu0V6UfJb
hTd+w09sacJ4Fb8IE/lG7RFq5gO0kKQtjcvQAQ2JJBWjjnwhcY1dZ1bm9jn5WB0f
y9fpc1A00P9PYLmqiUtpkA+m+3bPOxpWLnP+Otcuot7TDOudxwD5JE5QmQIDAQAB
o4IDhTCCA4EwHQYDVR0OBBYEFO1I3Mh9cNIsq11kBAu5MZXAKEk6MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvN1VqY3lIMXcwaXlyWFdRRUM3a3hsY0FvU1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmQYIKwYBBQUHAQcBAf8EggGIMIIBhDCCAYAEAgABMIIB
eAMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQDPqmAMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVQz6gMEAVwz
6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUDBANnPcAwDAMEAGd9TQMEBGd9
QAMEAWfSxgMEAmfV1AMEAWf/TAMEApsCsDAMAwQBmwK2AwQAmwK8AwQBmwLCAwQA
mwLUMAwDBACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC3gMEAaegEAMEAKegHTAMAwQA
qj5ZAwQFqj5AAwQAqj5kAwQBqj5mMAwDBAGqPmoDBACqPmwDBAGqPm4DBACqPqAw
DAMEBao+4AMEAao+7AMEArkibAMEAMD90AMEAcY3HAMEAMu8pAMEAMu8pzAMAwQA
y7ypAwQBy7ysAwQA1CBKAwQB1DgyMAwDBADUTvUDBALUTvgDBADV/q4wDQYJKoZI
hvcNAQELBQADggEBAFcJ+LH7QxJcxNBphVD3rwGM9YWbEnmgcH4oJTCoB0tdEcV9
tW+XyT+59gvGVBcCqfDiocPg4qgXqpS25NfrMP85mpdHN8GwnSbU9OUznvNez7ik
4Yz9LGlnSBF1VW/+GJ0IihDdRXjOrpTitidLUrYy7jZ1k0ml4VHGdUYGLMUqCvC+
znhrhoPn4SqIR7lbVKrZ0mmydfJARijy0VT1niNrBmFzmnN8h8IGsQ8OrWvUJCuS
ZlbBeIAp3mrJyRiCwXM0kNDqH1zc54x1R9BMiDjjipL71qRyCLIlcuUmjcA+1OyE
8e3w4ppHMN7Lqt6mQX+6LeE3E+/egYTEyWqqRgI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:41 2025 by rpki-client