Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fhyd0ItTNxlhbGdAWAJ4pnxTTDg.roa
File: fhyd0ItTNxlhbGdAWAJ4pnxTTDg.roa (raw, json)
Hash identifier: DevQeq3Sk3q2jArOb8rwANXKeaJ+PzalWk5Thwk17H8=
Subject key identifier: 7E:1C:9D:D0:8B:53:37:19:61:6C:67:40:58:02:78:A6:7C:53:4C:38
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019615AC8DC920932E8A42E29A01B96F6233
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fhyd0ItTNxlhbGdAWAJ4pnxTTDg.roa
Signing time: Tue 08 Apr 2025 13:52:32 +0000
ROA not before: Tue 08 Apr 2025 13:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.232.152.0/21 maxlen: 21
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
80.253.48.0/20 maxlen: 20
80.253.52.0/24 maxlen: 24
80.253.53.0/24 maxlen: 24
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.24.54.0/24 maxlen: 24
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Apr 2025 13:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:ac:8d:c9:20:93:2e:8a:42:e2:9a:01:b9:6f:62:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 8 13:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e1c9dd08b533719616c6740580278a67c534c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:35:90:6c:82:8c:1b:1e:2e:2d:62:ad:b9:
5d:37:97:13:5d:b8:c4:b8:2b:19:e2:79:5c:c8:3d:
71:10:41:e6:9d:02:d0:fc:ad:03:c3:a6:c6:0f:71:
70:d8:fe:3d:f4:e8:65:49:90:12:8a:c0:3e:85:6c:
8b:a0:45:26:a9:e7:a0:a9:cd:e7:89:53:3d:83:d5:
45:c0:25:6e:6e:b4:10:a9:d2:c9:7b:cc:94:c7:31:
c7:3b:61:89:da:be:76:67:4b:6d:81:78:c1:aa:5d:
e7:64:10:22:64:10:aa:9a:05:28:10:84:88:2d:d3:
37:45:b9:86:b5:bc:61:f3:ba:73:c2:e8:a1:8b:37:
f0:54:8c:8b:44:8f:47:68:8e:40:d8:99:7f:aa:fb:
13:4b:39:0d:45:78:19:6d:ae:06:85:9f:f8:60:75:
f3:3f:a9:c4:c6:c8:f3:0f:26:54:d3:c8:b3:34:c5:
19:a7:38:48:63:00:78:ac:4f:ca:d7:d5:23:90:10:
56:e9:48:5e:3f:e2:58:3b:bc:7c:7e:83:c0:b1:0d:
af:81:18:b3:54:c7:45:1a:4f:91:a2:bc:af:f2:91:
60:59:04:a6:80:f8:a2:3b:53:b4:08:9c:cc:8e:ce:
90:ef:30:88:bd:2e:40:ee:06:3e:fe:3c:39:f1:79:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:9D:D0:8B:53:37:19:61:6C:67:40:58:02:78:A6:7C:53:4C:38
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fhyd0ItTNxlhbGdAWAJ4pnxTTDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.232.152.0/21
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
8f:4e:0d:c3:af:c2:a3:3f:c3:03:f7:29:c1:db:f7:90:1c:fe:
48:19:2b:20:e5:7c:d5:c0:52:6f:f4:c8:05:2c:1f:87:89:d3:
51:cf:69:33:05:7c:5b:5c:39:27:3c:59:ab:67:db:62:43:b0:
9d:99:61:6b:7b:7c:90:ae:56:b8:e2:2d:a3:d8:0d:91:65:44:
7b:d8:fc:d8:5f:8f:a9:44:c4:60:47:de:ba:d6:72:d4:39:8c:
f9:0a:41:e3:45:55:15:48:7e:55:0f:48:9e:45:39:88:6e:71:
a4:61:5e:46:c4:79:64:02:f7:9f:3b:db:59:5d:4b:36:70:13:
0a:5f:d6:11:20:c8:af:f1:9b:a6:3b:4e:ae:f1:24:d7:8d:42:
70:1f:be:03:a3:80:48:ec:8a:28:19:88:97:65:df:88:9b:49:
98:d6:08:f6:3d:c8:57:3b:d4:cf:d3:65:88:e7:b1:51:b3:5e:
8f:37:cb:b8:44:44:73:32:bc:10:09:10:07:3f:5e:4b:f0:2b:
bc:06:d4:d4:4c:4f:b9:7e:d7:8f:d9:43:ce:02:57:9c:ff:5a:
09:ff:0f:cf:fa:d4:63:c6:8c:ab:c5:d1:58:9d:4e:0b:ec:98:
16:7c:e0:2e:e2:5d:45:fd:30:2a:99:57:8e:2e:80:4c:9c:70:
00:e8:a7:da
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZYVrI3JIJMuikLimgG5b2IzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwNDA4MTM1MjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTFjOWRkMDhiNTMzNzE5NjE2YzY3NDA1ODAyNzhhNjdjNTM0YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRs1kGyCjBseLi1irbldN5cTXbjE
uCsZ4nlcyD1xEEHmnQLQ/K0Dw6bGD3Fw2P499OhlSZASisA+hWyLoEUmqeegqc3n
iVM9g9VFwCVubrQQqdLJe8yUxzHHO2GJ2r52Z0ttgXjBql3nZBAiZBCqmgUoEISI
LdM3RbmGtbxh87pzwuihizfwVIyLRI9HaI5A2Jl/qvsTSzkNRXgZba4GhZ/4YHXz
P6nExsjzDyZU08izNMUZpzhIYwB4rE/K19UjkBBW6UheP+JYO7x8foPAsQ2vgRiz
VMdFGk+Roryv8pFgWQSmgPiiO1O0CJzMjs6Q7zCIvS5A7gY+/jw58Xk4fQIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFH4cndCLUzcZYWxnQFgCeKZ8U0w4MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvZmh5ZDBJdFROeGxoYkdkQVdBSjRwbnhUVERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB
MgMEBwU1gAMEByU/AAMEAy7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3s
oAMDAE5TAwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AAD
BAVVW4ADBAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgD
BAVZvsADAwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAM
AAMEAMEWZwMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AMEBdQkAAMEBdQyAAMEBdRb
oAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ
4AMEBNkK8AMEBNkS8AMEBNlPIDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZI
hvcNAQELBQADggEBAI9ODcOvwqM/wwP3KcHb95Ac/kgZKyDlfNXAUm/0yAUsH4eJ
01HPaTMFfFtcOSc8Watn22JDsJ2ZYWt7fJCuVrjiLaPYDZFlRHvY/Nhfj6lExGBH
3rrWctQ5jPkKQeNFVRVIflUPSJ5FOYhucaRhXkbEeWQC958721ldSzZwEwpf1hEg
yK/xm6Y7Tq7xJNeNQnAfvgOjgEjsiigZiJdl34ibSZjWCPY9yFc71M/TZYjnsVGz
Xo83y7hERHMyvBAJEAc/XkvwK7wG1NRMT7l+14/ZQ84CV5z/Wgn/D8/61GPGjKvF
0VidTgvsmBZ84C7iXUX9MCqZV44ugEyccADop9o=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:05 2025 by rpki-client