Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/IyYUpKw0--_xTxRl9d3th5rv4g0.roa
File: IyYUpKw0--_xTxRl9d3th5rv4g0.roa (raw, json)
Hash identifier: K/UYIV6b9yF/7WAvBYAC99C040cplsRzeBT0uVL7Sj0=
Subject key identifier: 23:26:14:A4:AC:34:FB:EF:F1:4F:14:65:F5:DD:ED:87:9A:EF:E2:0D
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0195D1A2EAA15FC10C6024322F31E6DEF34E
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/IyYUpKw0--_xTxRl9d3th5rv4g0.roa
Signing time: Wed 26 Mar 2025 08:47:49 +0000
ROA not before: Wed 26 Mar 2025 08:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
82.202.128.0/22 maxlen: 24
83.222.16.0/22 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.207.0.0/23 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 10 Apr 2025 08:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:a2:ea:a1:5f:c1:0c:60:24:32:2f:31:e6:de:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 26 08:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232614a4ac34fbeff14f1465f5dded879aefe20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:8b:1e:e7:da:69:7d:1e:a8:31:90:47:25:
db:2c:9c:9a:e8:6d:12:77:6f:13:80:61:6e:14:b8:
19:ec:7e:39:48:2f:72:52:00:05:18:88:ed:69:c7:
2f:29:2d:b4:04:7a:13:31:f2:66:e5:34:53:c2:6a:
1d:05:71:00:65:18:89:a7:eb:3b:9f:03:6c:9e:07:
56:fd:ad:c4:d6:91:a6:82:70:de:51:0c:dd:34:2b:
9f:d3:87:41:ad:15:45:e8:5c:3c:55:0f:2a:99:62:
91:3b:72:8b:d4:fe:2e:a6:e1:47:3e:57:ba:c7:99:
8f:95:68:63:25:73:b5:f8:b6:32:6c:a4:a1:30:7d:
0e:65:84:bb:62:4e:dd:42:72:14:01:71:c5:28:e6:
c7:30:88:7f:c6:b4:4b:4d:d9:52:4f:13:cc:36:e8:
cd:22:c3:8e:c3:42:bc:c0:2f:f9:58:f1:f8:dd:05:
ad:e8:17:e2:83:05:2f:a8:80:84:a3:69:48:f2:83:
cc:77:8b:65:ba:24:4b:aa:7f:8f:be:a1:ed:bf:86:
70:23:c2:b4:cf:5b:f6:7e:6c:a2:98:55:d1:5f:4c:
d0:a4:e8:22:b1:b0:41:b9:ae:6e:cc:59:41:69:5f:
8b:05:41:6a:10:18:29:b7:8b:4c:46:b3:dd:3b:8d:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:14:A4:AC:34:FB:EF:F1:4F:14:65:F5:DD:ED:87:9A:EF:E2:0D
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/IyYUpKw0--_xTxRl9d3th5rv4g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
82.202.128.0/22
83.222.16.0/22
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.207.0.0/23
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:f9:f5:4f:8a:ea:ab:85:c6:e0:d3:1b:a4:ae:e4:1a:d3:2e:
02:5b:22:c3:66:c4:32:99:19:24:69:fc:e5:74:fb:3a:ce:74:
cb:da:f0:cd:e9:38:5f:65:3e:e3:db:aa:f2:75:b4:2a:80:f0:
cf:e5:de:e5:21:a1:e1:88:8d:26:11:45:fe:11:08:c0:c2:a5:
a8:9b:da:b7:11:41:a3:71:46:89:b0:58:05:ed:05:1b:0a:4b:
3b:12:8d:8b:41:6f:48:c9:ea:fd:1e:f6:3e:e1:f7:b0:61:2c:
6a:a2:02:3b:d7:12:71:09:73:8f:b2:54:91:a6:62:18:b5:32:
a7:72:80:dd:45:30:6f:7f:28:7c:ad:68:06:51:28:b3:9a:9e:
4a:03:d9:01:1a:68:cf:2d:ce:0b:71:ec:cf:03:40:3e:ea:35:
e3:38:0d:86:5d:1d:c0:90:12:0e:0a:c6:ee:67:07:ae:f6:3a:
27:01:01:57:49:a7:4c:86:18:06:20:76:89:d7:1f:9e:4a:45:
ef:f6:68:5e:01:a9:a7:4c:71:a7:04:29:e3:dd:c5:07:5e:cf:
d7:d9:a0:bb:cc:e3:03:27:76:19:d0:62:32:d5:e0:94:d4:c6:
ce:70:c0:ec:ff:bc:e5:f0:1f:cd:57:7c:f6:d4:e2:44:44:5c:
42:2b:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:02 2025 by rpki-client