Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/rJUknctgyquz3YMDqxdqNLkE2E0.roa
File: rJUknctgyquz3YMDqxdqNLkE2E0.roa (raw, json)
Hash identifier: RuxacfbaDgdfMBQEu9+XaznekdBW59yiY3jSwxP7tYA=
Subject key identifier: AC:95:24:9D:CB:60:CA:AB:B3:DD:83:03:AB:17:6A:34:B9:04:D8:4D
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0194F3FAB1299F20052F6A6EDC60CD600A4C
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/rJUknctgyquz3YMDqxdqNLkE2E0.roa
Signing time: Tue 11 Feb 2025 07:48:00 +0000
ROA not before: Tue 11 Feb 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.80.0/20 maxlen: 20
31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
77.241.48.0/20 maxlen: 20
78.30.0.0/18 maxlen: 18
78.30.0.0/21 maxlen: 21
78.30.8.0/21 maxlen: 21
78.30.16.0/21 maxlen: 21
78.30.24.0/21 maxlen: 21
78.30.32.0/20 maxlen: 20
78.30.48.0/20 maxlen: 20
81.0.0.0/18 maxlen: 18
81.0.0.0/20 maxlen: 20
81.0.16.0/20 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
85.239.136.0/22 maxlen: 22
85.239.140.0/22 maxlen: 22
87.124.128.0/18 maxlen: 18
87.124.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.248.0/22 maxlen: 22
119.12.248.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.64.0/19 maxlen: 19
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
185.197.242.0/23 maxlen: 23
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.150.0/23 maxlen: 23
206.204.152.0/22 maxlen: 22
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.130.0/24 maxlen: 24
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.14.96.0/22 maxlen: 22
212.14.100.0/22 maxlen: 22
212.14.104.0/23 maxlen: 23
212.14.108.0/22 maxlen: 22
212.14.118.0/23 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.0.0/15 maxlen: 15
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.157.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.178.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.94.0.0/21 maxlen: 21
213.94.16.0/22 maxlen: 22
213.94.40.0/22 maxlen: 22
213.177.192.0/19 maxlen: 21
213.177.208.0/21 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:7000::/37 maxlen: 37
2a00:d100:7800::/37 maxlen: 37
2a00:d100:8000::/37 maxlen: 37
2a00:d100:8800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:3800::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:3000::/37 maxlen: 37
2a00:d102:3800::/37 maxlen: 37
2a00:d102:4000::/37 maxlen: 37
2a00:d102:4800::/37 maxlen: 37
2a00:d102:5000::/37 maxlen: 37
2a00:d102:5800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: Failed, certificate revoked on Tue 25 Mar 2025 09:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f3:fa:b1:29:9f:20:05:2f:6a:6e:dc:60:cd:60:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Feb 11 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac95249dcb60caabb3dd8303ab176a34b904d84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:70:87:ec:5b:de:3b:03:be:9d:0c:29:84:
6c:4e:4f:e9:3c:5d:cd:2d:da:d8:a1:20:5b:87:07:
68:0e:3e:0c:96:28:19:2a:e9:d2:0c:f0:62:0c:8b:
33:11:2c:f1:78:1f:18:a6:45:4a:e8:fc:76:ca:bb:
6a:3b:f2:93:1f:41:7a:90:9f:3e:08:1e:7d:de:9b:
6d:1a:7d:31:6a:ad:22:96:01:ca:58:06:11:43:bd:
7b:fb:c0:9f:32:57:74:ef:a6:60:34:b5:2d:62:97:
e3:0c:a3:bd:08:7d:62:83:f0:d1:0a:18:9f:7d:53:
e8:b1:3b:6c:32:41:fa:8b:f4:5b:19:5f:c1:88:d6:
1d:c2:c4:79:b9:8a:76:81:3f:55:b7:8c:7d:5c:a1:
c7:ef:15:3b:25:64:4d:b2:b6:74:60:37:01:83:4b:
80:81:72:83:68:60:9e:dc:45:83:70:53:68:e1:ce:
03:0a:d0:a6:5b:84:fa:4e:2f:b5:46:b3:9e:ad:a5:
b5:11:7a:2b:86:d8:89:2b:c2:3f:d9:48:8b:f3:05:
f4:11:48:aa:6d:1a:ca:d3:ba:dd:47:ee:99:7d:31:
9b:2f:72:6d:04:1c:3d:e5:e9:47:26:2c:77:b6:f3:
57:d0:fd:bb:19:51:ca:0c:ad:7f:8b:f5:7d:fd:95:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:24:9D:CB:60:CA:AB:B3:DD:83:03:AB:17:6A:34:B9:04:D8:4D
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/rJUknctgyquz3YMDqxdqNLkE2E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.80.0/20
66.81.160.0/19
67.218.224.0/19
77.241.48.0/20
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.235.68.0/22
85.239.128.0/20
87.124.128.0/18
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
176.222.64.0/19
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.150.0-206.204.159.255
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.0.0/15
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:8fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:4fff:ffff:ffff:ffff:ffff:ffff
2a00:d102::-2a00:d102:5fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
99:08:c0:0f:78:44:20:0c:ca:98:02:e4:60:dc:3f:c6:eb:14:
fd:c0:43:a5:ed:66:63:2e:b4:d2:3c:ee:b2:ab:fe:43:98:07:
08:e8:11:84:8b:cf:27:a9:a5:bc:38:49:6e:4b:8c:66:14:22:
bf:d2:7e:9a:3f:ae:5e:d2:b8:31:3d:eb:20:21:29:03:0e:bf:
01:78:67:94:9a:43:92:8b:f7:46:4f:1f:c6:79:92:10:f4:44:
f8:ad:d2:73:91:6d:6d:ce:64:14:d5:6c:8e:35:ee:b8:c8:e8:
c7:73:db:13:67:6c:f1:02:1f:8e:d2:36:6d:9c:6e:2b:46:66:
62:97:49:84:6a:ea:9d:df:bc:bc:bb:5f:93:23:d1:27:d6:2a:
ff:31:9c:9f:c0:7c:34:72:4a:bb:c0:a6:cb:66:57:f2:6c:a4:
29:90:33:86:12:6e:66:b7:ef:e2:69:04:cb:cd:be:3b:39:f3:
ca:36:f3:a1:f3:35:5a:b6:7c:f7:60:d7:d8:7c:6a:ad:e5:f9:
c8:e7:cc:1b:cc:ed:40:94:48:21:ef:91:71:da:80:07:b2:c7:
2c:aa:32:7d:40:23:20:6d:50:ea:bc:11:15:b1:fb:71:b4:14:
79:bc:44:a6:a7:c3:bf:25:e8:91:32:1f:f5:22:52:bf:02:5a:
44:b6:a1:45
-----BEGIN CERTIFICATE-----
MIIG0DCCBbigAwIBAgISAZTz+rEpnyAFL2pu3GDNYApMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi
MmUyY2QwHhcNMjUwMjExMDc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk1MjQ5ZGNiNjBjYWFiYjNkZDgzMDNhYjE3NmEzNGI5MDRkODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzStwh+xb3jsDvp0MKYRsTk/pPF3N
LdrYoSBbhwdoDj4MligZKunSDPBiDIszESzxeB8YpkVK6Px2yrtqO/KTH0F6kJ8+
CB593pttGn0xaq0ilgHKWAYRQ717+8CfMld076ZgNLUtYpfjDKO9CH1ig/DRChif
fVPosTtsMkH6i/RbGV/BiNYdwsR5uYp2gT9Vt4x9XKHH7xU7JWRNsrZ0YDcBg0uA
gXKDaGCe3EWDcFNo4c4DCtCmW4T6Ti+1RrOeraW1EXorhtiJK8I/2UiL8wX0EUiq
bRrK07rdR+6ZfTGbL3JtBBw95elHJix3tvNX0P27GVHKDK1/i/V9/ZW4AwIDAQAB
o4ID3DCCA9gwHQYDVR0OBBYEFKyVJJ3LYMqrs92DA6sXajS5BNhNMB8GA1UdIwQY
MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt
ZjEyODM1ZjAyNDdiLzEvckpVa25jdGd5cXV6M1lNRHF4ZHFOTGtFMkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi
LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB8AYIKwYBBQUHAQcBAf8EggHfMIIB2zCCAYUEAgABMIIB
fQMEBB/eUAMEBUJRoAMEBUPa4AMEBE3xMAMEBk4eAAMEBlEAAAMEBlLVwAMEA1OK
KAMEA1QnsAMEA1UfgAMEAlXrRAMEBFXvgAMEBld8gAMEAVkjPgMEBVknIAMEA1tq
EAMEAVvCPgMEA1vymAMEAF1zJQMEA11zgAMEAF1zmAMEAF1zygMEAF1z8gMEBl2w
gAMEAl2xeAMEBV5JIAMEBXcM4AMEAIk7OgMEBqr9AAMEBbDeQAMEALLawgMEA7Up
gAMEArlPFAMEArmRQAMEArmSOAMEArmZpAMEArmwBAMEArnF8AMEArnj1AMEArnk
mAMEArn8DAMEA7xBWAMEALzQ2wMEALzUFwMEAMERQgMEAsE1oAMEAsGx0AMEAsOg
4AMEBM7MgDAMAwQBzsyWAwQFzsyAAwQGz7yAAwQE1AcgAwQA1Ac/AwQF1A5gMAwD
BAHUpkIDBAPUpkADBADUpkoDBADUpkwDAwHU5gMEBtVeAAMEBdWxwAMEBNlx8DBQ
BAIAAjBKMA4DBAAqANEDBgQqANEAgDAPAwUAKgDRAQMGBCoA0QFAMA8DBQEqANEC
AwYFKgDRAkAwDwMFACoA0QMDBgQqANEDIAMFACoBhIAwDQYJKoZIhvcNAQELBQAD
ggEBAJkIwA94RCAMypgC5GDcP8brFP3AQ6XtZmMutNI87rKr/kOYBwjoEYSLzyep
pbw4SW5LjGYUIr/Sfpo/rl7SuDE96yAhKQMOvwF4Z5SaQ5KL90ZPH8Z5khD0RPit
0nORbW3OZBTVbI417rjI6Mdz2xNnbPECH47SNm2cbitGZmKXSYRq6p3fvLy7X5Mj
0SfWKv8xnJ/AfDRySrvApstmV/JspCmQM4YSbma37+JpBMvNvjs588o286HzNVq2
fPdg19h8aq3l+cjnzBvM7UCUSCHvkXHagAeyxyyqMn1AIyBtUOq8ERWx+3G0FHm8
RKanw78l6JEyH/UiUr8CWkS2oUU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:56 2025 by rpki-client