Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/89hraI2p1TgDyssEKwRGxNV7ADo.roa
File: 89hraI2p1TgDyssEKwRGxNV7ADo.roa (raw, json)
Hash identifier: RphhJnbKUcUf/ISuSB5P6Uw4CgTdGGJQRLw/7jw27n4=
Subject key identifier: F3:D8:6B:68:8D:A9:D5:38:03:CA:CB:04:2B:04:46:C4:D5:7B:00:3A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01963367C209519D68B961A666844D22D47C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/89hraI2p1TgDyssEKwRGxNV7ADo.roa
Signing time: Mon 14 Apr 2025 08:25:59 +0000
ROA not before: Mon 14 Apr 2025 08:25:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3233
IP address blocks: 80.96.17.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.115.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
80.96.183.0/24 maxlen: 24
80.96.190.0/24 maxlen: 24
80.96.196.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
80.96.230.0/23 maxlen: 23
80.96.238.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.8.0/24 maxlen: 24
80.97.15.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.180.239.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
81.181.100.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.152.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
81.181.213.0/24 maxlen: 24
85.120.12.0/23 maxlen: 23
85.120.40.0/23 maxlen: 23
85.120.66.0/23 maxlen: 23
85.120.155.0/24 maxlen: 24
85.120.170.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
85.121.6.0/23 maxlen: 23
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
85.121.60.0/22 maxlen: 22
85.121.64.0/21 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.151.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
85.121.160.0/22 maxlen: 22
85.121.184.0/24 maxlen: 24
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
85.121.252.0/22 maxlen: 22
85.122.82.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.112.0/23 maxlen: 23
85.122.114.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
85.123.64.0/18 maxlen: 18
85.123.128.0/17 maxlen: 17
192.162.16.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.45.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
193.230.134.0/23 maxlen: 23
193.230.141.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
193.230.170.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.191.0/24 maxlen: 24
193.230.192.0/24 maxlen: 24
193.230.207.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
193.231.119.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
193.231.202.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
194.62.122.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.163.0/24 maxlen: 24
194.102.168.0/24 maxlen: 24
194.102.169.0/24 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.171.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
194.105.11.0/24 maxlen: 24
194.105.16.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.238.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
194.176.189.0/24 maxlen: 24
212.35.128.0/19 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
217.156.84.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
217.156.101.0/24 maxlen: 24
217.156.106.0/24 maxlen: 24
217.156.107.0/24 maxlen: 24
217.156.108.0/24 maxlen: 24
217.156.112.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Apr 2025 12:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:67:c2:09:51:9d:68:b9:61:a6:66:84:4d:22:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 14 08:25:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3d86b688da9d53803cacb042b0446c4d57b003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:c7:46:a9:8a:b0:74:de:13:bb:e6:29:f1:
d4:8a:5f:49:55:a4:d5:c7:80:90:df:61:72:10:0e:
db:53:62:1c:c0:58:ce:a6:d7:a9:01:41:dc:b2:52:
85:79:c2:70:6e:fa:cd:b3:12:55:41:68:80:c3:3a:
13:a2:47:1b:49:11:d7:e1:2e:d8:97:a8:9f:d5:f4:
86:28:7d:af:3f:7b:de:1c:b5:9d:4b:de:0b:99:1c:
66:93:70:78:fa:e8:da:b1:bf:f1:19:81:9c:00:af:
56:52:ee:81:fa:f8:8f:20:d8:c7:b6:15:b3:3f:fa:
74:22:3e:58:7d:d3:94:51:97:28:d4:b9:2c:af:18:
3b:3f:ef:18:16:12:8c:de:fa:c7:15:42:aa:f1:c9:
bf:d6:62:fa:37:91:f2:15:69:aa:1c:1c:1f:18:b0:
ee:b5:1d:ce:70:15:ec:f3:19:57:4e:84:47:6f:5a:
a2:b0:40:1a:78:22:85:35:ca:4f:a2:d4:1b:13:74:
20:f8:32:51:24:46:eb:e9:e9:2f:c0:1e:6f:bc:8f:
d1:52:a4:e7:30:4a:5b:70:18:87:61:c7:fd:c0:8b:
89:7b:05:11:1f:73:e0:53:43:49:3e:d5:93:33:41:
28:2e:db:13:db:0d:53:d9:11:93:8a:43:02:ac:70:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:6B:68:8D:A9:D5:38:03:CA:CB:04:2B:04:46:C4:D5:7B:00:3A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/89hraI2p1TgDyssEKwRGxNV7ADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.73.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.115.0/24
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.183.0/24
80.96.190.0/24
80.96.196.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.230.0/23
80.96.238.0/24
80.96.255.0/24
80.97.8.0/24
80.97.15.0/24
80.97.54.0/24
80.97.171.0/24
80.97.176.0/23
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
85.120.12.0/23
85.120.40.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0-85.121.71.255
85.121.88.0/21
85.121.151.0/24
85.121.156.0-85.121.163.255
85.121.184.0/24
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.82.0/23
85.122.106.0/24
85.122.112.0-85.122.114.255
85.122.181.0-85.122.183.255
85.123.64.0-85.123.255.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.45.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.170.0/24
193.230.184.0/23
193.230.191.0-193.230.192.255
193.230.207.0-193.230.208.255
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.112.0/24
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.202.0/24
193.231.204.0/24
193.231.226.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.62.122.0/24
194.102.65.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.168.0/22
194.102.177.0/24
194.102.247.0/24
194.105.6.0/24
194.105.11.0/24
194.105.16.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.176.189.0/24
212.35.128.0/19
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.71.0/24
217.156.77.0/24
217.156.84.0/24
217.156.96.0/24
217.156.101.0/24
217.156.106.0-217.156.108.255
217.156.112.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
95:7a:16:1e:b9:49:4e:38:46:b0:d1:87:f7:87:dc:67:d6:4a:
d2:60:b9:60:aa:22:49:4b:d8:d1:d7:10:74:71:7b:22:e6:37:
40:fb:90:d1:eb:55:50:f9:8c:d4:43:22:72:60:70:71:1c:ff:
c8:9b:a1:ec:f2:f2:06:d9:bc:56:e6:a5:95:2c:52:b3:9d:3e:
78:c9:0c:c8:6c:ca:b2:f5:a8:6a:c5:09:db:d0:d9:9f:cd:c5:
e7:63:b4:cd:29:08:a1:f2:b0:02:2a:9c:3d:0b:a9:e0:a8:8d:
36:b7:dd:87:bc:be:32:26:2e:e4:a4:69:b4:1e:2a:1f:2c:e9:
9f:35:f5:a0:59:15:92:e3:3e:03:a3:c9:e1:e6:1e:6a:bd:63:
bd:4f:29:70:9d:8e:66:02:36:30:d6:32:35:9e:f4:01:99:cb:
e1:0f:54:9e:9a:d1:ca:e1:c9:77:ab:8d:ce:5d:bf:5e:8b:03:
56:fc:63:f0:10:83:cf:6d:b6:25:f2:e9:84:dd:08:4a:c3:25:
0e:b9:8a:4c:b1:32:0c:b6:ce:29:a8:7b:0b:3c:18:a0:0c:cc:
73:4a:fc:0d:49:e8:7d:4a:a2:b2:3b:bd:39:00:7f:13:2e:a4:
57:ad:33:41:98:43:62:5a:e6:60:58:f1:ff:1b:6a:92:57:c0:
24:52:13:d9
-----BEGIN CERTIFICATE-----
MIIIszCCB5ugAwIBAgISAZYzZ8IJUZ1ouWGmZoRNItR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwNDE0MDgyNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Q4NmI2ODhkYTlkNTM4MDNjYWNiMDQyYjA0NDZjNGQ1N2IwMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8jHRqmKsHTeE7vmKfHUil9JVaTV
x4CQ32FyEA7bU2IcwFjOptepAUHcslKFecJwbvrNsxJVQWiAwzoTokcbSRHX4S7Y
l6if1fSGKH2vP3veHLWdS94LmRxmk3B4+ujasb/xGYGcAK9WUu6B+viPINjHthWz
P/p0Ij5YfdOUUZco1Lksrxg7P+8YFhKM3vrHFUKq8cm/1mL6N5HyFWmqHBwfGLDu
tR3OcBXs8xlXToRHb1qisEAaeCKFNcpPotQbE3Qg+DJRJEbr6ekvwB5vvI/RUqTn
MEpbcBiHYcf9wIuJewURH3PgU0NJPtWTM0EoLtsT2w1T2RGTikMCrHB/ewIDAQAB
o4IFvzCCBbswHQYDVR0OBBYEFPPYa2iNqdU4A8rLBCsERsTVewA6MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvODlocmFJMnAxVGdEeXNzRUt3Ukd4TlY3QURvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIID0wYIKwYBBQUHAQcBAf8EggPCMIIDvjCCA6sEAgABMIID
owMEAFBgEQMEAFBgSTAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGBzAwQAUGCIAwQA
UGCqAwQAUGC1AwQAUGC3AwQAUGC+AwQAUGDEAwQAUGDPAwQAUGDRAwQAUGDYAwQA
UGDcAwQAUGDkAwQBUGDmAwQAUGDuAwQAUGD/AwQAUGEIAwQAUGEPAwQAUGE2AwQA
UGGrAwQBUGGwAwQAUbSPAwQAUbTqAwQAUbTvAwQAUbUAAwQAUbVKAwQAUbVkAwQA
UbWUAwQAUbWYMAwDBABRtZsDBABRtZwDBABRtcADBABRtccDBAFRtdQDBAFVeAwD
BAFVeCgDBAFVeEIDBABVeJsDBABVeKoDBABVeLIDBANVeMADBAFVeQYDBABVeSYD
BANVeSgwDAMEAlV5PAMEA1V5QAMEA1V5WAMEAFV5lzAMAwQCVXmcAwQCVXmgAwQA
VXm4AwQAVXnGAwQCVXncAwQCVXn8AwQBVXpSAwQAVXpqMAwDBARVenADBABVenIw
DAMEAFV6tQMEA1V6sDALAwQGVXtAAwMCVXgDBADAohADBADB4hsDBADB4iMDBADB
4i0DBADB4kEDBAHB4lADBADB4lQDBADB4mMDBADB4mUwDAMEAMHibwMEAMHicAME
AMHieAMEAMHiewMEB8HmAAMEAcHmhgMEAMHmjQMEAMHmjwMEAcHmpAMEAMHmqgME
AcHmuDAMAwQAwea/AwQAwebAMAwDBADB5s8DBADB5tAwDAMEAMHm0wMEAMHm1AME
AMHm2wMEAMHm4QMEAMHm9AMEAMHnUQMEAMHncAMEAMHncgMEAcHndAMEAMHndwME
AMHnowMEAMHnqAMEAMHnwAMEAMHnygMEAMHnzAMEAMHn4gMEAMHn8AMEAMHn9AME
AMHn9wMEAMHn+QMEAMHn/gMEAMI+egMEAMJmQQMEAMJmhwMEAMJmjwMEAMJmmgME
AMJmnQMEAMJmowMEAsJmqAMEAMJmsQMEAMJm9wMEAMJpBgMEAMJpCwMEAMJpEAME
AMKZ6gMEAMKZ7gMEAcKZ8gMEAMKZ9QMEAMKwvQMEBdQjgAMEANmcAAMEANmcAgME
AdmcBgMEANmcDQMEANmcDwMEANmcEwMEANmcJTAMAwQA2ZwxAwQC2ZwwAwQA2Zw5
AwQA2Zw7AwQA2Zw+AwQA2ZxHAwQA2ZxNAwQA2ZxUAwQA2ZxgAwQA2ZxlMAwDBAHZ
nGoDBADZnGwDBADZnHADBADZnHcwDQQCAAIwBwMFAyoDXoAwDQYJKoZIhvcNAQEL
BQADggEBAJV6Fh65SU44RrDRh/eH3GfWStJguWCqIklL2NHXEHRxeyLmN0D7kNHr
VVD5jNRDInJgcHEc/8iboezy8gbZvFbmpZUsUrOdPnjJDMhsyrL1qGrFCdvQ2Z/N
xedjtM0pCKHysAIqnD0LqeCojTa33Ye8vjImLuSkabQeKh8s6Z819aBZFZLjPgOj
yeHmHmq9Y71PKXCdjmYCNjDWMjWe9AGZy+EPVJ6a0crhyXerjc5dv16LA1b8Y/AQ
g89ttiXy6YTdCErDJQ65ikyxMgy2zimoews8GKAMzHNK/A1J6H1KorI7vTkAfxMu
pFetM0GYQ2Ja5mBY8f8bapJXwCRSE9k=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:51 2025 by rpki-client