Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vHeMcJeKKXQb7DttMHEJi3NTyVk.roa
File: vHeMcJeKKXQb7DttMHEJi3NTyVk.roa (raw, json)
Hash identifier: QD1rN68CiHBzD++5NI27FBB+rMH27gBcjcsY7grqKtY=
Subject key identifier: BC:77:8C:70:97:8A:29:74:1B:EC:3B:6D:30:71:09:8B:73:53:C9:59
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019638A1BD0785D970653C4393DD285DED71
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vHeMcJeKKXQb7DttMHEJi3NTyVk.roa
Signing time: Tue 15 Apr 2025 08:47:25 +0000
ROA not before: Tue 15 Apr 2025 08:47:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.176.0/21 maxlen: 21
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.136.0/21 maxlen: 21
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.176.0/21 maxlen: 21
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.160.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.184.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
89.247.80.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.192.0/20 maxlen: 20
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.236.0/22 maxlen: 22
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: Failed, certificate revoked on Tue 15 Apr 2025 09:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:a1:bd:07:85:d9:70:65:3c:43:93:dd:28:5d:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Apr 15 08:47:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc778c70978a29741bec3b6d3071098b7353c959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:1d:7f:8b:7a:81:8a:03:03:3a:c4:93:4f:
1d:86:9e:34:ea:14:1f:73:d7:a9:e9:dc:8d:55:5b:
af:bf:45:3c:57:0b:e1:18:20:5b:ad:89:10:e9:53:
18:e6:c5:d0:be:c2:e0:93:c4:32:7a:23:bc:20:e2:
79:7d:39:54:94:f1:af:04:2b:12:68:2f:f8:a2:a1:
37:c1:47:a4:dc:83:49:a9:b9:82:ef:c4:44:c9:7e:
4d:4c:04:38:cc:05:f4:f5:64:40:96:2a:17:af:2e:
12:03:ac:b1:a7:da:33:14:a0:bc:9b:6e:bd:1a:45:
74:de:74:50:a2:1f:9f:d9:28:7a:b1:4f:9c:41:b1:
ff:71:a0:0e:fa:7e:72:00:f4:48:d0:88:32:e1:4b:
b1:cf:db:7c:7d:fa:f8:1d:7c:36:bf:2e:af:60:07:
c6:7b:d5:6d:29:6c:fa:1b:cf:4f:87:6e:61:3b:c4:
b1:a7:79:60:af:6a:87:0b:88:2f:30:9e:a3:27:3c:
82:57:12:6a:3e:f9:ac:fd:2e:61:25:23:e6:b2:73:
44:dc:21:c7:2b:53:b6:4d:eb:23:aa:f4:4a:f0:1b:
5f:7a:76:89:de:d7:c9:3d:34:8f:7b:ef:46:76:4c:
43:68:31:44:0d:7a:6c:f9:74:76:6a:3d:65:65:9d:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:8C:70:97:8A:29:74:1B:EC:3B:6D:30:71:09:8B:73:53:C9:59
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vHeMcJeKKXQb7DttMHEJi3NTyVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
31:78:84:0a:87:6c:69:2e:e3:a8:30:f2:f2:f3:df:4a:74:44:
a4:42:5e:96:e3:f5:b0:1d:a7:e0:84:e6:aa:e7:7f:71:79:fd:
d3:00:69:a2:61:d8:8e:a1:e9:49:e3:5d:86:f8:b0:1e:cc:52:
90:df:95:8c:83:70:92:74:86:9d:07:03:65:35:91:bd:e1:0a:
ab:c9:48:1f:75:70:fc:20:23:2b:67:28:d6:ed:42:48:c5:20:
d2:d5:35:e4:e4:16:73:a1:c5:7d:8f:2a:7e:c3:68:ef:c1:60:
f5:c1:b2:28:26:e1:84:97:00:88:c6:45:26:db:3b:b7:04:6f:
5e:89:ef:f8:a8:3e:87:8c:2e:34:11:24:ba:b5:88:dd:a9:e0:
0f:71:dd:e8:4f:4c:ed:90:08:c8:4c:a8:d6:07:93:b2:b1:21:
eb:08:42:7e:76:3c:d4:9e:76:bd:e0:64:6a:65:78:19:32:b1:
c8:b1:a7:6c:4c:b6:37:29:09:75:6c:88:04:45:3d:52:f9:24:
3c:b7:10:5a:02:86:a7:aa:fd:d3:1a:4b:75:c4:3d:31:71:57:
cb:81:bb:91:8f:dd:d8:e6:e2:1e:de:ec:1c:14:43:bc:99:03:
c8:4a:13:d0:a7:b9:10:cc:b6:ab:d8:82:f9:85:de:51:15:16:
e5:e1:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:07:31 2025 by rpki-client