Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/tbfKUWnq1lDLDRwqaU1TrKQhOEk.roa
File: tbfKUWnq1lDLDRwqaU1TrKQhOEk.roa (raw, json)
Hash identifier: f77HH5d2yHEx5cOLfBI/NW2bRNRl/0N1tZgxJaiVcrM=
Subject key identifier: B5:B7:CA:51:69:EA:D6:50:CB:0D:1C:2A:69:4D:53:AC:A4:21:38:49
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0195CC8D08F84901D5A6DA025842F0257EF0
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/tbfKUWnq1lDLDRwqaU1TrKQhOEk.roa
Signing time: Tue 25 Mar 2025 09:05:49 +0000
ROA not before: Tue 25 Mar 2025 09:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.80.0/20 maxlen: 20
31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
77.241.48.0/20 maxlen: 20
78.30.0.0/18 maxlen: 18
78.30.0.0/21 maxlen: 21
78.30.8.0/21 maxlen: 21
78.30.16.0/21 maxlen: 21
78.30.24.0/21 maxlen: 21
78.30.32.0/20 maxlen: 20
78.30.48.0/20 maxlen: 20
81.0.0.0/18 maxlen: 18
81.0.0.0/20 maxlen: 20
81.0.16.0/20 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.187.52.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
85.239.136.0/22 maxlen: 22
85.239.140.0/22 maxlen: 22
87.124.128.0/18 maxlen: 18
87.124.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.248.0/22 maxlen: 22
119.12.248.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.64.0/19 maxlen: 19
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
185.197.242.0/23 maxlen: 23
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.150.0/23 maxlen: 23
206.204.152.0/22 maxlen: 22
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.130.0/24 maxlen: 24
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.14.96.0/22 maxlen: 22
212.14.100.0/22 maxlen: 22
212.14.104.0/23 maxlen: 23
212.14.108.0/22 maxlen: 22
212.14.118.0/23 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.0.0/15 maxlen: 15
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.157.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.178.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.94.0.0/21 maxlen: 21
213.94.16.0/22 maxlen: 22
213.94.40.0/22 maxlen: 22
213.177.192.0/19 maxlen: 21
213.177.208.0/21 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:7000::/37 maxlen: 37
2a00:d100:7800::/37 maxlen: 37
2a00:d100:8000::/37 maxlen: 37
2a00:d100:8800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:3800::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:3000::/37 maxlen: 37
2a00:d102:3800::/37 maxlen: 37
2a00:d102:4000::/37 maxlen: 37
2a00:d102:4800::/37 maxlen: 37
2a00:d102:5000::/37 maxlen: 37
2a00:d102:5800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:8d:08:f8:49:01:d5:a6:da:02:58:42:f0:25:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Mar 25 09:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5b7ca5169ead650cb0d1c2a694d53aca4213849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:27:61:61:e3:f2:0d:3a:99:df:f7:ab:c5:
0a:27:c5:cc:8c:ac:2a:f1:c5:e1:20:d1:c6:ad:a4:
7d:5a:ac:dc:d9:34:96:f7:50:7b:e5:09:dd:fc:53:
4e:bc:02:3a:e2:57:ed:f3:4f:7f:7d:07:34:6f:52:
21:9b:49:0c:43:f0:83:e8:c1:7a:ae:15:c8:02:97:
84:80:bf:04:30:60:0d:f3:e7:55:fb:47:d8:40:8f:
0f:e6:71:91:42:a4:cb:e4:7d:68:53:07:1c:f6:3e:
f3:39:86:29:8c:74:d8:b6:81:e4:1e:e5:2f:e1:a6:
ae:56:a4:1f:ee:d3:25:5a:08:12:4b:ef:b0:7d:13:
6f:b2:7a:88:97:b1:4a:84:b9:5d:69:b2:3b:07:be:
75:78:e4:2a:7b:93:ab:bf:5e:c8:96:e0:27:84:4b:
e8:ff:4b:ed:c3:8f:1e:ee:af:c4:7a:f8:b0:1b:36:
28:29:58:1b:72:53:65:fe:c3:71:a2:b1:50:ce:26:
60:6f:95:a4:d5:0e:4a:d6:7a:29:41:b1:d6:71:73:
9d:cc:11:e9:2b:55:2e:d3:c1:09:19:4e:36:f5:61:
90:3e:04:ad:69:5e:ce:f0:e6:10:17:40:7b:83:5d:
88:6d:22:f8:f7:67:47:72:7a:56:bd:45:e1:d1:3d:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B7:CA:51:69:EA:D6:50:CB:0D:1C:2A:69:4D:53:AC:A4:21:38:49
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/tbfKUWnq1lDLDRwqaU1TrKQhOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.80.0/20
66.81.160.0/19
67.218.224.0/19
77.241.48.0/20
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.187.52.0/22
85.235.68.0/22
85.239.128.0/20
87.124.128.0/18
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
176.222.64.0/19
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.150.0-206.204.159.255
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.0.0/15
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:8fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:4fff:ffff:ffff:ffff:ffff:ffff
2a00:d102::-2a00:d102:5fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
4e:2f:73:35:83:e9:7f:35:92:90:91:06:d2:43:29:98:af:62:
1c:9d:67:05:a8:8f:49:4c:84:aa:53:17:7c:99:16:e9:77:33:
ee:35:e0:02:20:9f:31:c6:cf:68:be:bf:3d:38:cf:29:6a:05:
28:76:ad:ec:a4:65:57:4d:bc:c9:02:cd:1e:36:c6:ec:52:09:
b6:f0:3a:43:88:fd:32:bd:57:9a:01:95:d7:c6:0b:c3:64:ad:
89:42:6d:a4:cc:33:de:f4:7e:3a:0f:e2:a0:1a:a1:87:8f:e4:
c8:51:45:bb:d2:fa:84:b0:26:12:4b:66:ee:7b:4f:04:2d:28:
61:a8:bf:9e:fd:35:e9:f2:85:52:d8:59:0f:62:e9:60:f0:77:
d7:9c:48:18:7d:b4:7c:61:25:60:94:4d:d7:0f:a7:30:78:57:
74:91:45:ef:d9:b7:2b:32:6b:ab:54:39:04:53:b1:a2:b9:bd:
03:a9:c8:14:3f:94:e4:94:d2:eb:32:65:b6:7a:a7:f3:a1:ab:
ad:60:15:14:1f:a5:60:97:63:42:7a:cc:95:b2:f0:d8:b5:44:
af:09:73:3e:ab:6a:76:f0:e0:3e:69:6f:7c:21:1c:89:6b:09:
08:f0:c0:31:ac:51:63:c4:db:aa:23:ee:0f:a2:87:83:b4:7f:
34:20:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:07:11 2025 by rpki-client