
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nUGSB75xznUTSxUBiETBHoCkCnI.roa
File: nUGSB75xznUTSxUBiETBHoCkCnI.roa (raw, json)
Hash identifier: EgCHt36I0OoFIqbbesqp9V+HPLE9N/15+WT4aUqBg/U=
Subject key identifier: 9D:41:92:07:BE:71:CE:75:13:4B:15:01:88:44:C1:1E:80:A4:0A:72
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0194D080C264211DCEBBF7C1997FBB30B131
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nUGSB75xznUTSxUBiETBHoCkCnI.roa
Signing time: Tue 04 Feb 2025 10:28:06 +0000
ROA not before: Tue 04 Feb 2025 10:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.80.0/20 maxlen: 20
31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
77.241.48.0/20 maxlen: 20
78.30.0.0/18 maxlen: 18
78.30.0.0/21 maxlen: 21
78.30.8.0/21 maxlen: 21
78.30.16.0/21 maxlen: 21
78.30.24.0/21 maxlen: 21
78.30.32.0/20 maxlen: 20
78.30.48.0/20 maxlen: 20
81.0.0.0/18 maxlen: 18
81.0.0.0/20 maxlen: 20
81.0.16.0/20 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
87.124.128.0/18 maxlen: 18
87.124.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.248.0/22 maxlen: 22
119.12.248.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.64.0/19 maxlen: 19
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
185.197.242.0/23 maxlen: 23
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.150.0/23 maxlen: 23
206.204.152.0/22 maxlen: 22
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.130.0/24 maxlen: 24
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.14.96.0/22 maxlen: 22
212.14.100.0/22 maxlen: 22
212.14.104.0/23 maxlen: 23
212.14.108.0/22 maxlen: 22
212.14.118.0/23 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.0.0/15 maxlen: 15
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.157.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.178.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.94.0.0/21 maxlen: 21
213.94.16.0/22 maxlen: 22
213.94.40.0/22 maxlen: 22
213.177.192.0/19 maxlen: 21
213.177.208.0/21 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:7000::/37 maxlen: 37
2a00:d100:7800::/37 maxlen: 37
2a00:d100:8000::/37 maxlen: 37
2a00:d100:8800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:3800::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:3000::/37 maxlen: 37
2a00:d102:3800::/37 maxlen: 37
2a00:d102:4000::/37 maxlen: 37
2a00:d102:4800::/37 maxlen: 37
2a00:d102:5000::/37 maxlen: 37
2a00:d102:5800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: Failed, certificate revoked on Tue 11 Feb 2025 07:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:80:c2:64:21:1d:ce:bb:f7:c1:99:7f:bb:30:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Feb 4 10:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d419207be71ce75134b15018844c11e80a40a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:c9:fb:51:19:c0:ab:2a:65:e3:bc:0c:dc:
f2:61:06:88:8a:ea:9f:58:5e:ad:e1:27:c2:44:7d:
4d:4b:e5:9c:b7:74:8e:08:92:c8:ee:7a:6a:68:94:
17:e3:66:ee:8c:fc:d4:94:f2:81:7d:01:8a:ec:68:
fd:9f:80:c2:8a:00:3d:ee:48:e4:57:1a:8b:22:c9:
b5:ca:c3:ab:12:82:e4:fc:6b:e5:59:ba:dc:2c:49:
1a:ad:58:a8:fa:0a:aa:24:fe:fa:4b:ba:a9:e4:b8:
6b:67:23:14:5d:95:a4:59:dd:20:c7:e5:d4:7e:64:
79:aa:c7:e7:e5:19:04:b7:c6:d6:56:9d:23:78:25:
56:15:66:ae:07:f2:88:ff:6f:9d:cb:c5:95:4c:7f:
ac:32:1e:67:fc:e3:64:6a:eb:e8:b4:4d:0c:3d:e8:
d2:b2:32:46:ce:d5:bc:3f:ba:9f:b7:25:ab:c2:0d:
9d:bd:f6:a6:7f:27:72:4b:3c:85:38:6d:46:55:ad:
49:61:6b:85:24:a2:65:ba:1c:f4:2b:68:9d:76:f0:
34:be:95:3f:2c:9a:ef:a7:6f:c7:29:f9:97:59:4d:
9f:c6:67:55:39:da:0d:07:19:11:48:24:1f:14:f1:
c3:46:e6:d0:79:3c:f6:92:32:d9:7c:b8:b8:61:41:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:92:07:BE:71:CE:75:13:4B:15:01:88:44:C1:1E:80:A4:0A:72
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nUGSB75xznUTSxUBiETBHoCkCnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.80.0/20
66.81.160.0/19
67.218.224.0/19
77.241.48.0/20
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.235.68.0/22
85.239.128.0/21
87.124.128.0/18
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
176.222.64.0/19
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.150.0-206.204.159.255
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.0.0/15
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:8fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:4fff:ffff:ffff:ffff:ffff:ffff
2a00:d102::-2a00:d102:5fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
70:cc:98:92:16:f5:c9:8a:7d:48:fe:a4:23:c3:40:17:fe:53:
e3:4c:44:3c:f0:c2:72:9b:96:51:da:67:be:73:3c:f8:4c:43:
90:74:9b:9c:08:d1:68:d8:b9:e5:a0:0a:6a:00:7b:38:ae:18:
6c:c6:85:07:e9:f0:62:54:10:c2:ec:d1:1f:6d:4f:90:eb:d2:
8a:8b:1d:3c:51:93:15:34:29:c1:8c:08:3a:89:e7:16:f4:d2:
94:07:e5:19:8d:9f:d9:11:57:19:c7:b0:e5:9f:18:81:07:91:
e5:d9:cf:5a:64:54:92:f6:60:1c:78:1c:42:ff:6e:5f:ff:c0:
60:b8:3f:6b:c5:3b:e5:a9:e6:2a:3b:5e:94:f7:20:20:0d:ac:
b9:14:a2:ff:01:46:c8:2c:61:79:81:08:8c:fc:86:f7:07:33:
1b:56:8f:40:e9:8c:c1:49:ce:fd:b7:48:73:a2:3f:0c:c0:21:
0f:f9:1c:7a:36:81:bf:17:96:ae:2d:7a:63:ea:06:07:06:0b:
01:cb:34:62:22:1e:07:06:12:f5:b6:30:38:d0:8a:bb:ed:7d:
90:37:c8:22:5d:13:46:cc:bb:de:0b:b3:37:74:de:4f:a9:4f:
66:8b:28:9a:f6:09:5a:71:67:1d:34:48:33:e5:35:a9:03:36:
3c:b7:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:09:49 2025 by rpki-client