Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/V3PuWcRUFkzmgDldVRF84xXi3cY.roa
File: V3PuWcRUFkzmgDldVRF84xXi3cY.roa (raw, json)
Hash identifier: bR/fWExXjUhLxoEUrMrx3qbTuFpabDjgcYoNL5/1C5Y=
Subject key identifier: 57:73:EE:59:C4:54:16:4C:E6:80:39:5D:55:11:7C:E3:15:E2:DD:C6
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01961EC77B273BA2EED6BA626D2A9DE5112A
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/V3PuWcRUFkzmgDldVRF84xXi3cY.roa
Signing time: Thu 10 Apr 2025 08:18:31 +0000
ROA not before: Thu 10 Apr 2025 08:18:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
46.173.24.0/22 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
82.202.128.0/22 maxlen: 24
83.222.16.0/22 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.207.0.0/23 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 May 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:c7:7b:27:3b:a2:ee:d6:ba:62:6d:2a:9d:e5:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Apr 10 08:18:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5773ee59c454164ce680395d55117ce315e2ddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:16:e8:c3:92:cd:0d:31:0e:65:ba:01:45:
9e:d0:d7:c3:5f:00:be:1f:29:c6:b8:6e:27:d5:65:
7d:75:94:a5:91:67:6e:1d:78:43:99:8e:e6:49:1f:
7f:c8:1d:c3:c6:fb:09:e6:02:5c:62:74:bf:83:15:
e3:d1:fc:2a:7c:bb:01:13:4d:1b:25:f1:2e:00:14:
3a:c6:ff:3d:88:a1:94:dd:12:91:2c:07:1c:35:b5:
93:03:23:6d:16:40:a7:13:d5:b9:0c:0e:d7:f5:08:
a5:13:26:5a:8d:72:e1:09:38:2b:1d:1a:e8:b6:02:
7e:de:c5:74:53:81:8c:6e:ee:ff:63:a3:f7:59:54:
b2:8a:d3:60:d6:47:0a:d8:36:c2:ea:96:98:4d:dd:
eb:f5:1d:4a:74:27:60:31:9e:da:be:dc:1e:22:49:
80:97:e2:d6:b0:1d:aa:89:31:8f:12:a9:65:90:1f:
fc:7f:54:bd:05:21:7d:1c:ac:26:1a:4f:c2:3c:f5:
c7:91:fd:fa:07:bf:34:79:b4:c5:07:93:49:7e:c3:
66:c2:ee:eb:39:d9:63:a4:87:c3:16:e2:6a:7d:b0:
4f:fa:97:ac:c7:f5:5c:2d:33:19:1b:e1:b9:27:7e:
6e:84:3a:76:95:ef:e3:17:60:74:55:dc:cb:d0:0d:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:EE:59:C4:54:16:4C:E6:80:39:5D:55:11:7C:E3:15:E2:DD:C6
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/V3PuWcRUFkzmgDldVRF84xXi3cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
46.173.24.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
82.202.128.0/22
83.222.16.0/22
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.207.0.0/23
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:d0:f2:4e:7e:e0:0a:ae:c5:9d:d6:e8:0f:80:40:ef:6c:ef:
2b:ed:e5:16:29:38:4c:6f:b4:3b:5b:9c:9e:7a:d0:3e:41:de:
87:41:c6:34:b8:4f:61:a9:b3:51:36:5f:5f:81:b7:6f:27:c5:
b4:ed:ee:fa:5e:b9:d1:43:e2:89:70:87:a5:a7:83:86:02:ff:
85:a0:76:9c:c6:1e:5f:72:7f:89:4d:50:f1:73:9c:4d:d6:8b:
83:f3:0c:09:21:78:63:cf:25:fd:af:19:c0:61:d0:c1:6a:a9:
6f:94:11:69:10:fb:05:7a:4b:1e:0e:a4:7c:7c:25:fa:ec:da:
d9:76:36:41:2e:97:41:d5:94:d1:97:c4:a2:aa:5b:13:eb:bb:
78:18:41:c1:0a:83:29:83:73:56:7b:b2:e7:30:d8:b1:da:fa:
0a:05:44:c4:dc:4d:a6:a8:be:f6:1a:df:00:77:05:11:ec:d3:
fa:88:b8:cf:e4:7f:18:86:f9:f7:9d:b6:25:98:dc:40:73:0b:
0b:21:2c:d5:bc:30:c2:8c:f5:2d:b9:9c:4f:d9:86:ac:fb:52:
cf:2f:1a:6a:b4:2d:a5:3d:be:75:6b:69:5a:8a:aa:03:31:f9:
d8:9f:9f:23:35:b2:35:95:1c:bc:94:3a:b7:53:02:46:9f:fc:
c1:1f:d0:b9
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgISAZYex3snO6Lu1rpibSqd5REqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUwNDEwMDgxODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzczZWU1OWM0NTQxNjRjZTY4MDM5NWQ1NTExN2NlMzE1ZTJkZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQW6MOSzQ0xDmW6AUWe0NfDXwC+
HynGuG4n1WV9dZSlkWduHXhDmY7mSR9/yB3DxvsJ5gJcYnS/gxXj0fwqfLsBE00b
JfEuABQ6xv89iKGU3RKRLAccNbWTAyNtFkCnE9W5DA7X9QilEyZajXLhCTgrHRro
tgJ+3sV0U4GMbu7/Y6P3WVSyitNg1kcK2DbC6paYTd3r9R1KdCdgMZ7avtweIkmA
l+LWsB2qiTGPEqllkB/8f1S9BSF9HKwmGk/CPPXHkf36B780ebTFB5NJfsNmwu7r
OdljpIfDFuJqfbBP+pesx/VcLTMZG+G5J35uhDp2le/jF2B0VdzL0A0FmwIDAQAB
o4IDOjCCAzYwHQYDVR0OBBYEFFdz7lnEVBZM5oA5XVURfOMV4t3GMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvVjNQdVdjUlVGa3ptZ0RsZFZSRjg0eFhpM2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTgYIKwYBBQUHAQcBAf8EggE9MIIBOTCCASYEAgABMIIB
HgMEBAUjUAMEAwVlmAMEAgW1bAMEBB+AIAMEBB+BYAMEAi0JKAMEAi0MEAMEAi0M
SAMEAi0M7AMEAi1DOAMEAi1QRAMEAi1U4AMEAi1aIAMEAi2CKAMEAi2NTAMEAi2S
pAMEAi2TsAMEAi2ZvAMEAi6tGAMEBD5xYAMEAz7ZsAMEA1HIcAMEAlLKgAMEAlPe
EAMEAlPeGAMEA1fsEAMEAVmpJgMEAlqcqAMEA1tqyAMEAl/WPAMEArkTzAMEArky
GAMEArlOHAMEALmbdgMEAbnPAAMEArnhIDAMAwQBwaguAwQBwagwAwQCwbBMAwQC
wchIAwQD1EMIAwQC1YvQMAwDBADZDCUDBADZDCYDBADZDCgDBATZcgADBALZrBgw
DQQCAAIwBwMFAyoEusAwDQYJKoZIhvcNAQELBQADggEBAKXQ8k5+4AquxZ3W6A+A
QO9s7yvt5RYpOExvtDtbnJ560D5B3odBxjS4T2Gps1E2X1+Bt28nxbTt7vpeudFD
4olwh6Wng4YC/4WgdpzGHl9yf4lNUPFznE3Wi4PzDAkheGPPJf2vGcBh0MFqqW+U
EWkQ+wV6Sx4OpHx8Jfrs2tl2NkEul0HVlNGXxKKqWxPru3gYQcEKgymDc1Z7sucw
2LHa+goFRMTcTaaovvYa3wB3BRHs0/qIuM/kfxiG+fedtiWY3EBzCwshLNW8MMKM
9S25nE/Zhqz7Us8vGmq0LaU9vnVraVqKqgMx+difnyM1sjWVHLyUOrdTAkaf/MEf
0Lk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:42:35 2025 by rpki-client