Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxfqXjHWzP-JqDdplIlZby1ma68.roa
File: vxfqXjHWzP-JqDdplIlZby1ma68.roa (raw, json)
Hash identifier: XolSmLgQPj6PIy7sc5gOEgoGddmfr8e9xhCKQS/MPU4=
Subject key identifier: BF:17:EA:5E:31:D6:CC:FF:89:A8:37:69:94:89:59:6F:2D:66:6B:AF
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0193723C3A809FD8848A871C23848B1073C6
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxfqXjHWzP-JqDdplIlZby1ma68.roa
Signing time: Thu 28 Nov 2024 10:06:09 +0000
ROA not before: Thu 28 Nov 2024 10:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:a580::/32 maxlen: 48
2a00:ba80::/32 maxlen: 48
2a00:e080::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:3c:3a:80:9f:d8:84:8a:87:1c:23:84:8b:10:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Nov 28 10:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf17ea5e31d6ccff89a837699489596f2d666baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:9a:d8:3b:61:6f:99:88:b0:fa:b5:86:c2:
6b:37:ab:84:ed:9a:ea:89:1e:51:b5:77:4c:88:0d:
25:44:95:e2:92:97:d7:30:8d:f3:63:bc:51:00:16:
67:0b:21:69:79:d6:48:e1:a9:8a:65:a1:50:5b:ca:
33:6e:46:af:74:14:a4:84:6b:ba:2d:e7:70:e8:09:
42:18:2b:d1:9d:88:c5:8c:84:12:1e:d3:97:e1:0f:
0b:76:f4:31:43:1c:b6:72:b8:26:d1:4f:0c:33:80:
14:ff:31:9d:59:43:49:70:07:6f:d3:55:fc:ce:3d:
24:2b:1a:76:72:22:37:57:ed:e2:8a:9a:c4:73:11:
f2:44:79:38:5a:8b:3c:21:3e:4b:b6:1b:67:80:90:
1e:8d:d3:eb:19:31:68:82:0d:05:3e:03:21:21:60:
3a:5d:5f:c9:12:ce:db:7d:1b:77:e9:e0:29:0c:86:
a0:0c:fc:ec:57:34:cd:0c:dc:c8:71:fd:d3:16:68:
34:d2:bf:dc:2f:42:14:71:23:1c:8e:34:0b:66:cf:
9a:6b:72:9c:1f:a2:b7:8a:87:9a:16:da:f0:fa:8f:
bb:f4:b1:49:d7:4b:ed:bb:4d:9b:48:7d:ba:67:12:
b3:c3:d2:1b:cb:f9:2a:b7:07:b1:33:52:cb:e9:cd:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:EA:5E:31:D6:CC:FF:89:A8:37:69:94:89:59:6F:2D:66:6B:AF
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxfqXjHWzP-JqDdplIlZby1ma68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:a580::/32
2a00:ba80::/32
2a00:e080::/32
2a00:e880::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
25:55:9d:a5:ad:b1:96:60:b2:39:62:dd:0f:79:76:38:c7:9a:
62:d4:7d:d1:ae:e8:bd:d9:46:59:07:a6:8e:31:ac:8f:a0:31:
4f:98:3f:b7:81:05:16:c1:7c:04:b6:9e:80:73:2b:36:28:86:
62:6d:e6:c9:d5:7c:28:f3:38:b7:a3:7f:de:f6:88:12:33:02:
23:a5:56:50:14:5a:c6:38:77:86:2e:64:c0:9c:22:7f:c6:c7:
7b:bc:0b:e5:ac:15:e3:da:bd:e1:71:da:e3:41:3a:e7:0f:9a:
56:5a:4c:5b:d3:c4:b2:aa:34:23:e8:f3:04:4c:e9:d6:30:32:
46:b4:2e:8a:a9:16:43:3d:32:f8:52:13:11:a2:40:6c:e0:50:
d8:89:f9:38:20:79:2e:8a:b7:4e:cf:87:31:ba:77:22:8a:36:
6e:1b:e0:4a:0a:43:b1:1d:ee:ae:f9:d0:b4:7f:e6:a7:c1:3e:
1b:7f:ef:40:41:27:6a:19:33:6f:37:fd:bc:e5:bd:ce:63:6b:
7b:8d:eb:e1:35:8b:00:86:2e:1f:70:66:6b:27:80:cb:38:9e:
89:53:f9:6a:b4:ed:ba:7f:5b:19:e3:72:25:7a:16:03:7f:f1:
47:61:99:7c:a6:5f:a3:7a:fd:ef:e9:08:6c:a1:ca:33:72:03:
b3:13:a5:b1
-----BEGIN CERTIFICATE-----
MIIH8TCCBtmgAwIBAgISAZNyPDqAn9iEioccI4SLEHPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjQxMTI4MTAwNjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjE3ZWE1ZTMxZDZjY2ZmODlhODM3Njk5NDg5NTk2ZjJkNjY2YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrqa2Dthb5mIsPq1hsJrN6uE7Zrq
iR5RtXdMiA0lRJXikpfXMI3zY7xRABZnCyFpedZI4amKZaFQW8ozbkavdBSkhGu6
Ledw6AlCGCvRnYjFjIQSHtOX4Q8LdvQxQxy2crgm0U8MM4AU/zGdWUNJcAdv01X8
zj0kKxp2ciI3V+3iiprEcxHyRHk4Wos8IT5LthtngJAejdPrGTFogg0FPgMhIWA6
XV/JEs7bfRt36eApDIagDPzsVzTNDNzIcf3TFmg00r/cL0IUcSMcjjQLZs+aa3Kc
H6K3ioeaFtrw+o+79LFJ10vtu02bSH26ZxKzw9Iby/kqtwexM1LL6c3aWQIDAQAB
o4IE/TCCBPkwHQYDVR0OBBYEFL8X6l4x1sz/iag3aZSJWW8tZmuvMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvdnhmcVhqSFd6UC1KcURkcGxJbFpieTFtYTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDEQYIKwYBBQUHAQcBAf8EggMAMIIC/DCCApUEAgABMIIC
jQMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD
BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwBNiDALAwQCTYnEAwMBTYgwCgMDAk2M
AwMFTYADAwRNwAMEBU3pYAMDBE5wAwQFTpuAAwQFTp8AAwMET1ADBAVPhCADBAZP
rsADBARQRiADAwFQdgMDAVB8AwMAULkDBAdQ7AADBAZRAQADAwJRQAMDAFG5AwMA
UdwDBAVSlwADAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFVRAME
BVV1gAMDAlWoAwQGVcDAMAsDBAVWP+ADAwRWQAMEB1dkAAMDAFfnAwQFV/+AAwMD
WIgDAwBY2wMDAVkCAwMCWZwDAwBZqgMEBVm5oAMDAltEAwMAW1gDAwBbWwMEBFuX
cAMDA1xYAwMFXQADBAZdtsADBANdv1ADBAdfiIADBAdfnYADBAVfqAADBAVfq4AD
BAVfrqADBAVfr6ADBAJftdwDAwVtAAMEBYIAYAMEA42q2AMEA58UCAMEBLA04AME
BLISsAMEBLITAAMEArkn2AMEArmTzAMEArmT6AMEArmWeAMDALwHAwQHvI2AAwQH
vOAAAwQFwgaAMAwDBAPCmVgDBADCmVoDBADCmVwDBADCmWEDBAXCt8ADBATC8rAD
BAbDAwADBAXDB2ADBAXDYmADAwDDcwMDAMOEAwQFw5LAAwQF1BegAwQF1B5gAwQF
1CeAAwQF1F6gAwMA1MYDBAXVgCADBAXVkMADBAXVqaADBAXVsMADBAbVy0ADBAbV
3kADAwDV3wMDANX1AwQE2RPAAwQE2UZQAwQE2XDgMGEEAgACMFsDBQAqAF6AAwUD
KgBiAAMFACoAcYADBQAqAIOAAwUAKgCNgAMFACoAk4ADBQAqAKWAAwUAKgC6gAMF
ACoA4IADBQAqAOiAAwUDKgDsgAMFByoChAADBQMqBAgAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlVZ2lrbGWYLI5Yt0PeXY4x5pi1H3Rrui92UZZB6aOMayPoDFPmD+3gQUW
wXwEtp6Acys2KIZibebJ1Xwo8zi3o3/e9ogSMwIjpVZQFFrGOHeGLmTAnCJ/xsd7
vAvlrBXj2r3hcdrjQTrnD5pWWkxb08SyqjQj6PMETOnWMDJGtC6KqRZDPTL4UhMR
okBs4FDYifk4IHkuirdOz4cxunciijZuG+BKCkOxHe6u+dC0f+anwT4bf+9AQSdq
GTNvN/285b3OY2t7jevhNYsAhi4fcGZrJ4DLOJ6JU/lqtO26f1sZ43IlehYDf/FH
YZl8pl+jev3v6QhsocozcgOzE6Wx
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:28 2025 by rpki-client