Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m-hx9pxYNUSCprKTXCudQ-dknW0.roa
File: m-hx9pxYNUSCprKTXCudQ-dknW0.roa (raw, json)
Hash identifier: NQpIoPolzmYroP8yv8iT0m5WtYZsjCjZ6VcqVinVCW8=
Subject key identifier: 9B:E8:71:F6:9C:58:35:44:82:A6:B2:93:5C:2B:9D:43:E7:64:9D:6D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01958EA541D6A9A4655B92491A6EB9250D70
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m-hx9pxYNUSCprKTXCudQ-dknW0.roa
Signing time: Thu 13 Mar 2025 08:35:49 +0000
ROA not before: Thu 13 Mar 2025 08:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.13.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.25.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.140.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.229.0/24 maxlen: 24
37.230.230.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.150.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.175.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.190.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.247.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 13:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:a5:41:d6:a9:a4:65:5b:92:49:1a:6e:b9:25:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 13 08:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be871f69c58354482a6b2935c2b9d43e7649d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:2a:b4:2f:9b:f1:76:95:c9:c6:39:29:ab:
40:bd:4f:e1:7f:6d:20:da:e3:bf:91:0c:ba:94:35:
46:18:6c:e1:27:3e:c5:7c:ae:0c:b1:79:52:a4:28:
4a:32:49:09:92:f8:14:34:65:27:94:6e:5e:40:a6:
c5:93:25:c5:d0:ef:63:6f:a0:df:60:e3:81:16:69:
11:14:7d:f3:46:a3:10:49:2e:3f:f1:52:06:62:37:
0f:b5:48:ab:46:4d:8d:f3:66:cd:90:ca:fc:2b:3d:
8e:af:5a:bd:3c:7f:6c:f4:d3:1f:0c:17:a8:4d:ba:
ed:b6:86:37:ed:23:d5:e5:de:63:07:c7:e4:fe:cf:
d0:56:09:0d:ed:b5:db:9f:0b:f9:3c:86:2d:aa:43:
47:f2:8a:c2:a8:1e:f9:e2:6e:f8:1b:5b:5c:5e:86:
b2:f1:e7:89:97:b2:2c:c6:46:d5:47:03:31:34:ca:
63:4f:eb:b2:59:98:c1:a0:f8:72:13:03:7a:45:21:
d6:75:b1:58:73:3c:a5:50:a4:df:a6:ab:8e:ea:78:
d5:45:f0:62:24:22:5b:ea:0b:81:ca:75:1a:5e:53:
2d:32:8a:5f:9a:5f:da:cb:2a:42:a8:14:7e:d7:cf:
f6:de:3d:9e:1f:3b:00:27:31:c5:8d:10:9e:ac:53:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:71:F6:9C:58:35:44:82:A6:B2:93:5C:2B:9D:43:E7:64:9D:6D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m-hx9pxYNUSCprKTXCudQ-dknW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.13.0/24
37.18.23.0/24
37.18.25.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.140.0/24
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.229.0-37.230.231.255
37.230.238.0/24
37.230.254.0/23
46.243.137.0-46.243.140.255
46.243.148.0-46.243.150.255
46.243.163.0/24
46.243.173.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.175.255
141.101.179.0/24
141.101.189.0-141.101.191.255
141.101.198.0/23
141.101.209.0/24
141.101.216.0/24
141.101.230.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.248.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
178.170.247.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:a8:7a:d2:ff:e1:65:4a:30:c9:2b:06:a7:58:d6:56:63:cd:
32:cc:f8:dc:0a:78:3e:23:80:98:4f:b7:43:31:79:c6:e1:74:
11:00:b5:9f:fc:6a:cc:c8:25:24:67:4f:d5:06:b9:21:7e:b3:
c8:a1:4e:bf:df:0e:1f:c4:ca:b4:12:11:af:11:7a:49:1c:b4:
e5:a1:ea:9d:4c:e3:21:e1:6d:92:6c:f8:7b:d7:98:9a:c1:70:
7d:3e:cb:2c:3e:5a:ac:ad:22:8e:22:3f:18:5c:76:93:bc:3f:
a9:f7:8f:82:5f:92:7e:57:b8:2e:d6:71:68:d6:c3:3d:60:44:
9a:32:ac:06:d8:b0:c9:a2:32:fb:b6:f6:d1:ee:0d:26:9e:b6:
ad:22:b7:a8:ba:82:70:28:b1:e6:bd:00:75:a6:2c:6f:a6:ec:
82:45:21:53:ee:a6:22:79:8b:ea:82:0f:93:24:de:f7:4d:d4:
a4:8f:c5:3d:03:cf:0c:88:40:ff:1d:3c:45:7e:ed:34:2e:a5:
74:79:39:e0:5e:23:c3:10:c9:ce:0b:8b:f2:f2:8d:63:f3:b3:
39:f9:ef:4a:b9:07:a0:c8:1d:e3:20:df:07:47:c1:0d:2f:2b:
98:3a:f0:6a:a7:1d:28:ba:51:97:c6:90:2b:40:a6:db:50:76:
7b:ca:74:bd
-----BEGIN CERTIFICATE-----
MIIHNzCCBh+gAwIBAgISAZWOpUHWqaRlW5JJGm65JQ1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMzEzMDgzNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU4NzFmNjljNTgzNTQ0ODJhNmIyOTM1YzJiOWQ0M2U3NjQ5ZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMEqtC+b8XaVycY5KatAvU/hf20g
2uO/kQy6lDVGGGzhJz7FfK4MsXlSpChKMkkJkvgUNGUnlG5eQKbFkyXF0O9jb6Df
YOOBFmkRFH3zRqMQSS4/8VIGYjcPtUirRk2N82bNkMr8Kz2Or1q9PH9s9NMfDBeo
TbrttoY37SPV5d5jB8fk/s/QVgkN7bXbnwv5PIYtqkNH8orCqB754m74G1tcXoay
8eeJl7IsxkbVRwMxNMpjT+uyWZjBoPhyEwN6RSHWdbFYczylUKTfpquO6njVRfBi
JCJb6guBynUaXlMtMopfml/ayypCqBR+18/23j2eHzsAJzHFjRCerFNhmwIDAQAB
o4IEQzCCBD8wHQYDVR0OBBYEFJvocfacWDVEgqayk1wrnUPnZJ1tMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvbS1oeDlweFlOVVNDcHJLVFhDdWRRLWRrblcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICVwYIKwYBBQUHAQcBAf8EggJGMIICQjCCAj4EAgABMIIC
NgMEACUSAAMEACUSDQMEACUSFwMEACUSGQMEACUSPAMEACUSPwMEACUSTgMEACUS
UgMEACUSZwMEACUSajAMAwQAJRJ9AwQAJRJ+AwQAJeaCAwQAJeaEAwQBJeaGAwQA
JeaMAwQAJeaRAwQAJeaXAwQAJeajMAwDBAQl5rADBAAl5rIDBAEl5rYDBAAl5rsD
BAAl5sgDBAAl5tADBAEl5uIwDAMEACXm5QMEAyXm4AMEACXm7gMEASXm/jAMAwQA
LvOJAwQALvOMMAwDBAIu85QDBAAu85YDBAAu86MDBAAu860DBAAu88wDBAEu89Yw
DAMEAi7z3AMEAS7z4DAMAwQCLvPsAwQCLvPwMAwDBAEu8/YDBAIu8/gDBACAAEcw
DAMEAo1lhAMEAI1liAMEAY1lijAMAwQAjWWPAwQAjWWWMAwDBACNZZkDBASNZaAD
BACNZbMwDAMEAI1lvQMEBo1lgAMEAY1lxgMEAI1l0QMEAI1l2AMEAI1l5gMEAI1l
6QMEAI1l6zAMAwQAjWXtAwQAjWXuAwQAjWXyAwQAjWX1AwQAjWX4AwQCjWX8MAwD
BAOyqogDBACyqo4wDAMEBLKqkAMEALKqkgMEALKqrDAMAwQAsqq7AwQAsqq8AwQA
sqr3AwQCuQSUAwQDvEhQAwQAvEhZAwQAvEhfMAwDBAC8SGEDBAC8SGIwDAMEALxI
ZQMEALxIZjAMAwQBvEhyAwQAvEh0AwQAvEh3AwQBvEh8AwQD2ZZYMA0GCSqGSIb3
DQEBCwUAA4IBAQA8qHrS/+FlSjDJKwanWNZWY80yzPjcCng+I4CYT7dDMXnG4XQR
ALWf/GrMyCUkZ0/VBrkhfrPIoU6/3w4fxMq0EhGvEXpJHLTloeqdTOMh4W2SbPh7
15iawXB9PsssPlqsrSKOIj8YXHaTvD+p94+CX5J+V7gu1nFo1sM9YESaMqwG2LDJ
ojL7tvbR7g0mnratIreouoJwKLHmvQB1pixvpuyCRSFT7qYieYvqgg+TJN73TdSk
j8U9A88MiED/HTxFfu00LqV0eTngXiPDEMnOC4vy8o1j87M5+e9KuQegyB3jIN8H
R8ENLyuYOvBqpx0oulGXxpArQKbbUHZ7ynS9
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:54 2025 by rpki-client