Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LhA0qrU5bWr52PB8EMu-Nm4yvlk.roa
File: LhA0qrU5bWr52PB8EMu-Nm4yvlk.roa (raw, json)
Hash identifier: 4UEnebLVwtnZdLZgK4WeRnMRM1saFZjAPC7HjX+HPJM=
Subject key identifier: 2E:10:34:AA:B5:39:6D:6A:F9:D8:F0:7C:10:CB:BE:36:6E:32:BE:59
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0194981BCE4F574E46F3BDC87346C0D07063
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LhA0qrU5bWr52PB8EMu-Nm4yvlk.roa
Signing time: Fri 24 Jan 2025 11:39:06 +0000
ROA not before: Fri 24 Jan 2025 11:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.13.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.25.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.140.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.229.0/24 maxlen: 24
37.230.230.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.150.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.167.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.175.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.247.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:1b:ce:4f:57:4e:46:f3:bd:c8:73:46:c0:d0:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 24 11:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1034aab5396d6af9d8f07c10cbbe366e32be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:4e:91:b2:17:78:13:ff:3d:47:af:2e:21:
d5:82:65:5e:db:e3:5a:ba:2e:ae:36:2c:92:6a:89:
43:e5:b0:fb:9f:84:53:85:d5:26:3c:a7:45:03:81:
21:8c:d1:db:cc:f5:74:e7:1a:cd:cf:5a:3e:a3:48:
8a:65:3a:cf:58:66:90:f7:c5:10:e4:77:b7:f6:7c:
ad:f3:fa:09:5c:47:20:9c:4d:78:74:c7:41:50:28:
3e:33:4e:e2:5e:73:09:9b:35:e0:2c:60:54:cf:86:
8f:b1:8b:0b:cc:f5:d4:b8:b9:d4:52:b1:e2:62:fe:
80:75:3b:53:92:33:7c:90:68:db:ab:2a:9e:f5:5d:
c6:29:40:40:15:a9:5b:6f:dd:59:a9:8c:07:9d:7f:
bd:61:67:e8:bd:cf:2a:3b:09:85:b0:87:ee:1f:8a:
44:99:28:cf:44:62:d6:ca:d1:ef:2e:17:e8:15:d4:
2b:4d:3e:8f:7f:83:e6:e4:8a:42:8a:70:62:62:0c:
9f:54:46:2d:60:c4:48:a3:42:61:bf:91:94:8b:99:
ca:ab:4d:10:b0:8a:69:60:fe:8e:19:dc:4e:61:d6:
70:d9:48:e9:c3:61:df:a9:53:b6:b4:2b:92:25:41:
23:d9:bf:dd:dd:f0:78:40:cb:db:c6:d3:67:c0:89:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:34:AA:B5:39:6D:6A:F9:D8:F0:7C:10:CB:BE:36:6E:32:BE:59
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LhA0qrU5bWr52PB8EMu-Nm4yvlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.13.0/24
37.18.23.0/24
37.18.25.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.140.0/24
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.229.0-37.230.231.255
37.230.238.0/24
37.230.254.0/23
46.243.137.0-46.243.140.255
46.243.148.0-46.243.150.255
46.243.163.0/24
46.243.167.0/24
46.243.173.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.175.255
141.101.179.0/24
141.101.189.0/24
141.101.191.0/24
141.101.198.0/23
141.101.209.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.248.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
178.170.247.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
93:21:c3:8d:d9:20:0a:cd:07:0f:42:a2:12:fd:d9:a3:f6:c5:
5a:40:be:c0:25:a5:e6:85:06:ec:c8:f8:68:c7:f4:ea:bf:6b:
33:2b:4f:e0:43:af:e4:cf:cb:13:2a:f4:0d:32:5f:19:51:60:
e8:20:44:f3:15:49:ee:70:48:2d:5b:9e:b3:00:b2:c3:0b:5f:
25:0c:38:86:c4:03:5b:76:65:87:11:48:dd:40:d8:c4:aa:eb:
13:c1:72:3c:3d:21:b1:44:83:f3:5c:fa:e0:8a:83:91:ed:1d:
32:2d:18:9c:dd:44:71:03:92:ac:7e:6e:af:78:f5:27:1d:32:
f3:05:55:6b:35:b3:39:5d:61:44:e6:ea:9f:72:88:3c:a4:20:
c9:8b:16:69:93:8b:5c:82:47:3f:ee:6c:29:7b:9a:9a:ac:37:
68:44:75:fb:68:43:a5:46:99:62:78:db:99:b9:c6:4e:ed:16:
de:18:e0:95:af:f4:e4:35:ae:60:02:4b:4b:0a:b3:8a:af:0a:
c9:40:19:4f:ca:0e:ce:0a:9f:80:bf:18:8b:2e:a2:c3:2e:79:
aa:61:e8:93:ca:7b:47:54:a0:f5:d0:8a:1b:36:d6:a9:5f:e8:
36:ce:23:78:05:6a:35:ef:c1:71:5f:ae:0b:a4:b9:f3:65:d5:
98:4e:57:cd
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgISAZSYG85PV05G873Ic0bA0HBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTI0MTEzOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTEwMzRhYWI1Mzk2ZDZhZjlkOGYwN2MxMGNiYmUzNjZlMzJiZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhOkbIXeBP/PUevLiHVgmVe2+Na
ui6uNiySaolD5bD7n4RThdUmPKdFA4EhjNHbzPV05xrNz1o+o0iKZTrPWGaQ98UQ
5He39nyt8/oJXEcgnE14dMdBUCg+M07iXnMJmzXgLGBUz4aPsYsLzPXUuLnUUrHi
Yv6AdTtTkjN8kGjbqyqe9V3GKUBAFalbb91ZqYwHnX+9YWfovc8qOwmFsIfuH4pE
mSjPRGLWytHvLhfoFdQrTT6Pf4Pm5IpCinBiYgyfVEYtYMRIo0Jhv5GUi5nKq00Q
sIppYP6OGdxOYdZw2Ujpw2HfqVO2tCuSJUEj2b/d3fB4QMvbxtNnwInPHQIDAQAB
o4IEOzCCBDcwHQYDVR0OBBYEFC4QNKq1OW1q+djwfBDLvjZuMr5ZMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvTGhBMHFyVTViV3I1MlBCOEVNdS1ObTR5dmxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICTwYIKwYBBQUHAQcBAf8EggI+MIICOjCCAjYEAgABMIIC
LgMEACUSAAMEACUSDQMEACUSFwMEACUSGQMEACUSPAMEACUSPwMEACUSTgMEACUS
UgMEACUSZwMEACUSajAMAwQAJRJ9AwQAJRJ+AwQAJeaCAwQAJeaEAwQBJeaGAwQA
JeaMAwQAJeaRAwQAJeaXAwQAJeajMAwDBAQl5rADBAAl5rIDBAEl5rYDBAAl5rsD
BAAl5sgDBAAl5tADBAEl5uIwDAMEACXm5QMEAyXm4AMEACXm7gMEASXm/jAMAwQA
LvOJAwQALvOMMAwDBAIu85QDBAAu85YDBAAu86MDBAAu86cDBAAu860DBAAu88wD
BAEu89YwDAMEAi7z3AMEAS7z4DAMAwQCLvPsAwQCLvPwMAwDBAEu8/YDBAIu8/gD
BACAAEcwDAMEAo1lhAMEAI1liAMEAY1lijAMAwQAjWWPAwQAjWWWMAwDBACNZZkD
BASNZaADBACNZbMDBACNZb0DBACNZb8DBAGNZcYDBACNZdEDBACNZekDBACNZesw
DAMEAI1l7QMEAI1l7gMEAI1l8gMEAI1l9QMEAI1l+AMEAo1l/DAMAwQDsqqIAwQA
sqqOMAwDBASyqpADBACyqpIDBACyqqwwDAMEALKquwMEALKqvAMEALKq9wMEArkE
lAMEA7xIUAMEALxIWQMEALxIXzAMAwQAvEhhAwQAvEhiMAwDBAC8SGUDBAC8SGYw
DAMEAbxIcgMEALxIdAMEALxIdwMEAbxIfAMEA9mWWDANBgkqhkiG9w0BAQsFAAOC
AQEAkyHDjdkgCs0HD0KiEv3Zo/bFWkC+wCWl5oUG7Mj4aMf06r9rMytP4EOv5M/L
Eyr0DTJfGVFg6CBE8xVJ7nBILVueswCywwtfJQw4hsQDW3ZlhxFI3UDYxKrrE8Fy
PD0hsUSD81z64IqDke0dMi0YnN1EcQOSrH5ur3j1Jx0y8wVVazWzOV1hRObqn3KI
PKQgyYsWaZOLXIJHP+5sKXuamqw3aER1+2hDpUaZYnjbmbnGTu0W3hjgla/05DWu
YAJLSwqziq8KyUAZT8oOzgqfgL8Yiy6iwy55qmHok8p7R1Sg9dCKGzbWqV/oNs4j
eAVqNe/BcV+uC6S582XVmE5XzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:14:15 2025 by rpki-client