Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wEO_45TJgQnwqTosVPMQ6HKQUDk.roa
File: wEO_45TJgQnwqTosVPMQ6HKQUDk.roa (raw, json)
Hash identifier: ZNSMWm4FZeYcWxhVM35n3gThX1so4ah50PBaINCG3ww=
Subject key identifier: C0:43:BF:E3:94:C9:81:09:F0:A9:3A:2C:54:F3:10:E8:72:90:50:39
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01950034006A155E62CD763E8ACC7CAAC419
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wEO_45TJgQnwqTosVPMQ6HKQUDk.roa
Signing time: Thu 13 Feb 2025 16:46:02 +0000
ROA not before: Thu 13 Feb 2025 16:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:b280::/32 maxlen: 32
2a00:c780::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:d780::/32 maxlen: 32
2a00:e080::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:34:00:6a:15:5e:62:cd:76:3e:8a:cc:7c:aa:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 16:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c043bfe394c98109f0a93a2c54f310e872905039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:22:37:66:6e:bb:46:97:b3:ae:46:6a:a3:
f6:86:42:74:02:0a:6c:21:c4:f7:1c:fd:59:07:10:
67:b2:4f:84:82:0e:80:7a:f0:1d:80:f8:1a:14:6e:
c8:e0:62:8e:48:ad:d6:bf:bb:4b:c3:51:0b:73:a6:
08:6a:6d:35:ad:58:9c:8c:52:d1:45:de:f0:b7:1a:
ca:36:0a:10:77:39:11:2a:ce:02:6e:66:f0:bd:ce:
11:a6:8d:64:87:a6:34:be:a5:44:8c:ee:da:21:52:
b9:91:a5:97:9f:ab:e6:96:6e:69:10:1c:bb:74:5a:
fd:57:f3:a5:6b:3a:97:7d:e2:5e:20:26:6c:aa:6f:
7e:95:fa:e2:03:c7:93:22:46:59:b0:6e:d6:72:66:
62:bb:52:08:c6:a8:f9:ab:d2:3b:dd:75:8b:06:ff:
5b:41:c1:cd:ce:57:7d:4e:b8:ec:12:94:ad:c4:2e:
24:81:76:8a:db:72:bc:f8:9e:15:e4:b4:27:0a:e5:
1e:67:ae:d1:93:89:d8:57:0a:fc:3d:be:e5:f8:d9:
9b:fc:aa:86:6c:d5:5c:3a:e9:e1:84:f9:94:ce:4c:
19:c6:f8:2f:73:76:8e:a3:19:96:be:35:d1:63:c0:
a0:d5:12:b2:74:6a:b2:1e:17:c3:98:af:78:cb:ed:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:BF:E3:94:C9:81:09:F0:A9:3A:2C:54:F3:10:E8:72:90:50:39
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wEO_45TJgQnwqTosVPMQ6HKQUDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:b280::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e080::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::/46
Signature Algorithm: sha256WithRSAEncryption
9f:02:cd:24:26:4e:0d:5a:7c:5e:92:ce:23:01:e2:f6:5c:8e:
b9:12:61:7a:f8:8f:16:d1:74:b8:8d:0b:44:4d:72:54:5f:6a:
3b:7b:bc:9c:88:ae:7e:71:e9:6a:bd:75:90:53:6f:c8:de:33:
d2:69:a0:1c:2b:71:8e:ac:ec:55:fd:f1:36:5c:b5:34:42:2f:
97:b1:62:0f:55:bf:e9:6f:d0:0b:ee:a7:a2:21:2b:69:4c:2e:
b9:f0:51:82:a5:46:c6:cc:c8:68:48:f7:80:af:47:09:53:97:
23:0e:26:30:e5:86:f7:90:b1:3c:ec:eb:e9:e2:d5:e0:09:75:
95:0c:91:7f:1d:2e:da:8f:ee:a0:bc:e4:a9:f6:d4:01:ba:d3:
d1:aa:bf:79:ad:70:c8:8d:f1:70:d9:18:2f:91:ff:72:0c:5b:
3a:54:73:ca:02:1a:fd:a6:d6:de:e2:96:99:fd:bd:20:4d:13:
91:50:e0:be:df:ea:8f:c6:35:68:1d:53:fb:fa:82:b0:d4:9e:
ca:44:f5:9b:0b:7a:53:17:c9:dd:37:0c:92:de:eb:31:55:81:
d6:58:00:5c:b8:32:cd:e2:70:f2:4a:58:23:8d:af:58:5f:91:
7e:50:bb:84:83:bd:61:fc:d2:91:0b:a9:ad:de:02:85:14:1e:
4e:3f:65:ce
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgISAZUANABqFV5izXY+isx8qsQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMjEzMTY0NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDQzYmZlMzk0Yzk4MTA5ZjBhOTNhMmM1NGYzMTBlODcyOTA1MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjEiN2Zuu0aXs65GaqP2hkJ0Agps
IcT3HP1ZBxBnsk+Egg6AevAdgPgaFG7I4GKOSK3Wv7tLw1ELc6YIam01rVicjFLR
Rd7wtxrKNgoQdzkRKs4Cbmbwvc4Rpo1kh6Y0vqVEjO7aIVK5kaWXn6vmlm5pEBy7
dFr9V/OlazqXfeJeICZsqm9+lfriA8eTIkZZsG7WcmZiu1IIxqj5q9I73XWLBv9b
QcHNzld9TrjsEpStxC4kgXaK23K8+J4V5LQnCuUeZ67Rk4nYVwr8Pb7l+Nmb/KqG
bNVcOunhhPmUzkwZxvgvc3aOoxmWvjXRY8Cg1RKydGqyHhfDmK94y+1LBQIDAQAB
o4IEBzCCBAMwHQYDVR0OBBYEFMBDv+OUyYEJ8Kk6LFTzEOhykFA5MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvd0VPXzQ1VEpnUW53cVRvc1ZQTVE2SEtRVURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGwYIKwYBBQUHAQcBAf8EggIKMIICBjCCAZYEAgABMIIB
jgMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+PoADBAc+aoADBAU+gaADBAY+8UAw
CgMDB02AAwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwVNgAMDBE3AAwMETnAD
BAVOm4ADAwRPUAMEBk+uwAMEBFBGIAMDAVB2AwMBUHwDBAdQ7AADBAZRAQADAwJR
QAMDAFG5AwMAUdwDAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFV
RAMDAlWoAwMEVkADAwBX5wMDA1iIAwMAWNsDAwFZAgMDAlmcAwMCW0QDBARbl3AD
AwNcWAMDBV0AAwQGX53AAwMFbQADBAONqtgDBAK5k8wDBAXCBoADBAXCt8ADBATC
8rADBAbDAwADBAXDB2ADBAXDYmADAwDDcwMDAMOEAwQFw5LAAwQF1B5gAwQF1CeA
AwQF1F6gAwMA1MYDBAXVgCADBAXVkMADBAXVqaADBAbVy0ADAwDV3wMDANX1AwQE
2RPAAwQE2UZQAwQE2XDgMGoEAgACMGQDBQMqAGIAAwUAKgBxgAMFACoAg4ADBQAq
AI2AAwUAKgCTgAMFACoAsoADBQAqAMeAAwUAKgDMgAMFACoA14ADBQAqAOCAAwUA
KgDsgAMFByoChAADBQIqBAgAAwcCKgQIBwAAMA0GCSqGSIb3DQEBCwUAA4IBAQCf
As0kJk4NWnxeks4jAeL2XI65EmF6+I8W0XS4jQtETXJUX2o7e7yciK5+celqvXWQ
U2/I3jPSaaAcK3GOrOxV/fE2XLU0Qi+XsWIPVb/pb9AL7qeiIStpTC658FGCpUbG
zMhoSPeAr0cJU5cjDiYw5Yb3kLE87Ovp4tXgCXWVDJF/HS7aj+6gvOSp9tQButPR
qr95rXDIjfFw2Rgvkf9yDFs6VHPKAhr9ptbe4paZ/b0gTRORUOC+3+qPxjVoHVP7
+oKw1J7KRPWbC3pTF8ndNwyS3usxVYHWWABcuDLN4nDySlgjja9YX5F+ULuEg71h
/NKRC6mt3gKFFB5OP2XO
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:24:39 2025 by rpki-client