Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vb8PMTKGV95whensaygEehg-3k0.roa
File: vb8PMTKGV95whensaygEehg-3k0.roa (raw, json)
Hash identifier: kSy27KDbjiJS2TRPPo1hZDmt8uK3Gpoo5Fj6IRszDkU=
Subject key identifier: BD:BF:0F:31:32:86:57:DE:70:85:E9:EC:6B:28:04:7A:18:3E:DE:4D
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0196CFD08139C677F7AEB8E08783ED82DCD2
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vb8PMTKGV95whensaygEehg-3k0.roa
Signing time: Wed 14 May 2025 17:21:10 +0000
ROA not before: Wed 14 May 2025 17:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.25.104.0/22 maxlen: 24
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/24 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/24 maxlen: 24
37.191.81.0/24 maxlen: 24
37.191.82.0/24 maxlen: 24
37.191.83.0/24 maxlen: 24
37.191.84.0/24 maxlen: 24
37.191.85.0/24 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.87.0/24 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
46.34.184.0/22 maxlen: 22
46.34.188.0/22 maxlen: 22
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
213.207.193.0/24 maxlen: 24
213.207.194.0/24 maxlen: 24
213.207.201.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: Failed, certificate revoked on Sat 17 May 2025 06:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:d0:81:39:c6:77:f7:ae:b8:e0:87:83:ed:82:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: May 14 17:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdbf0f31328657de7085e9ec6b28047a183ede4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:d9:57:84:b2:51:b2:75:5c:a3:32:00:31:
f0:f0:63:ba:13:c7:a5:9d:ce:84:77:d6:6a:67:bb:
47:65:83:b8:9b:28:ab:12:ac:80:15:f1:f9:23:b7:
70:4a:0c:ef:88:ea:b1:02:7f:26:42:4f:0c:a6:5b:
55:a9:53:88:b1:78:85:2e:ec:4a:15:e1:46:98:f2:
c8:35:ea:68:93:98:eb:4d:95:3d:d4:93:c8:b8:ae:
0a:2c:56:8c:1c:55:eb:2d:56:d0:4e:19:d7:e1:23:
d1:b1:bd:9a:bf:c1:32:65:8f:32:74:19:59:24:62:
d3:be:0d:5d:36:df:57:7f:70:21:71:8f:06:ce:4e:
8d:bd:49:08:5f:12:e8:08:07:ce:db:30:9c:94:04:
d1:31:a7:d6:60:8c:2d:20:8e:42:45:7c:04:ea:b7:
a0:02:a2:ad:a0:2e:da:25:65:f8:8d:a6:09:c2:73:
81:bb:e7:f0:e9:a1:8b:99:b4:6c:61:86:15:86:e5:
37:94:f5:05:bf:53:b8:1a:57:1e:86:f4:a8:7f:57:
73:54:fd:cb:a1:75:9e:a3:5b:dd:a3:f1:74:b5:5f:
70:34:5f:58:3e:da:8e:d2:ab:ee:65:19:dd:1b:a7:
99:e3:7d:66:32:95:f5:bd:64:10:ad:8c:a4:d7:10:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:0F:31:32:86:57:DE:70:85:E9:EC:6B:28:04:7A:18:3E:DE:4D
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vb8PMTKGV95whensaygEehg-3k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.148.0/24
188.136.158.0/24
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.203.255
188.136.208.0/23
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
87:45:62:d2:7c:42:7a:07:ef:ff:a0:71:19:af:49:13:d9:08:
da:4a:98:bb:e9:47:01:0b:34:c4:6c:5c:07:59:53:17:f0:f4:
b2:d9:08:00:97:59:c3:9e:d8:42:d3:ab:8e:58:f2:fe:7d:ff:
d8:af:cb:15:ef:8c:f7:c2:ff:d6:fe:de:39:01:68:ac:63:71:
25:81:2a:bd:c3:f1:f3:90:65:0c:08:34:76:62:44:fe:04:5a:
04:82:78:1b:98:2e:7c:1e:ac:64:80:69:71:60:19:6e:6b:3e:
ac:fb:ad:2b:db:94:ea:4b:b7:32:39:a7:47:86:b4:59:41:c4:
f7:a2:84:52:36:98:58:24:34:7e:be:ac:5d:f5:d2:d7:dd:ff:
37:c9:09:f2:80:8b:c3:d9:14:09:e9:12:82:b9:ca:8f:e1:22:
60:7b:7c:cc:65:d0:8e:cb:c4:c1:39:41:b9:fb:72:0c:b4:66:
9e:a9:d3:a6:a6:4a:06:bf:b2:1b:8b:dd:32:f3:24:84:08:2a:
50:f5:fb:5f:bf:d1:b6:10:38:ed:d7:36:05:8e:f9:b1:51:7d:
6e:d6:4f:40:4d:a1:50:78:f3:6d:4a:e4:66:00:3a:1f:f5:d2:
f5:e2:8b:01:7e:6f:56:80:46:b6:de:f4:b3:7b:cf:de:43:61:
b9:05:e5:39
-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgISAZbP0IE5xnf3rrjgh4PtgtzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjUwNTE0MTcyMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGJmMGYzMTMyODY1N2RlNzA4NWU5ZWM2YjI4MDQ3YTE4M2VkZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7/ZV4SyUbJ1XKMyADHw8GO6E8el
nc6Ed9ZqZ7tHZYO4myirEqyAFfH5I7dwSgzviOqxAn8mQk8MpltVqVOIsXiFLuxK
FeFGmPLINepok5jrTZU91JPIuK4KLFaMHFXrLVbQThnX4SPRsb2av8EyZY8ydBlZ
JGLTvg1dNt9Xf3AhcY8Gzk6NvUkIXxLoCAfO2zCclATRMafWYIwtII5CRXwE6reg
AqKtoC7aJWX4jaYJwnOBu+fw6aGLmbRsYYYVhuU3lPUFv1O4GlcehvSof1dzVP3L
oXWeo1vdo/F0tV9wNF9YPtqO0qvuZRndG6eZ431mMpX1vWQQrYyk1xAEqQIDAQAB
o4IEKDCCBCQwHQYDVR0OBBYEFL2/DzEyhlfecIXp7GsoBHoYPt5NMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvdmI4UE1US0dWOTV3aGVuc2F5Z0VlaGctM2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICPAYIKwYBBQUHAQcBAf8EggIrMIICJzCCAhQEAgABMIIC
DAMEAx8ZaAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/SzAMAwQEJb9QAwQCJb9YAwQG
Jd0AAwQEJesQAwQCLYCMAwQCLZB8AwQALiAFAwQALiAJAwQALiAOMAwDBAIuIqQD
BAQuIqAwDAMEAS4isgMEBi4igAMEAU6etgMEAk+EyAMEAE+E1TAMAwQAT4TZAwQB
T4TcAwQAUEdxMAwDBAFQR3oDBAFQR3wDBABQR38DBABRHfMDBANRHfgDBARRW5AD
BAFWbSADBAJWbSQDBABWbSkDBAFWbS4DBABWbTUDBAJWbTgDBAFWbT4DBAFX97QD
BARbuEADBANcPbgDBAJcd0QDBARei6ADBANt5kADBARt5lADBACw3UEDBAC5DD4D
BAK5FUwDBAK5HkwDBAK5KPADBAK5LbwDBAK5RjwDBAG5UqQDBAK5VUQDBAC5aOQD
BAK5hZgwDAMEALmO6QMEArmO6AMEArmsAAMEArm+FAMEArnFRAMEAbnQlgMEALxL
XAMEALxLXgMEAbxLZgMEALxLawMEAbxLbjAMAwQAvEtxAwQBvEt0AwQBvEt6AwQF
vHmAAwQAvIiUAwQAvIieMAwDBAG8iK4DBAG8iLwDBAK8iMAwDAMEALyIxQMEAryI
yAMEAbyI0DAMAwQCvIjUAwQFvIjAAwQC1cMQAwQE1c/AAwQA2ULQAwQA2ULTMA0E
AgACMAcDBQMqDAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCHRWLSfEJ6B+//oHEZr0kT
2QjaSpi76UcBCzTEbFwHWVMX8PSy2QgAl1nDnthC06uOWPL+ff/Yr8sV74z3wv/W
/t45AWisY3ElgSq9w/HzkGUMCDR2YkT+BFoEgngbmC58HqxkgGlxYBluaz6s+60r
25TqS7cyOadHhrRZQcT3ooRSNphYJDR+vqxd9dLX3f83yQnygIvD2RQJ6RKCucqP
4SJge3zMZdCOy8TBOUG5+3IMtGaeqdOmpkoGv7Ibi90y8ySECCpQ9ftfv9G2EDjt
1zYFjvmxUX1u1k9ATaFQePNtSuRmADof9dL14osBfm9WgEa23vSze8/eQ2G5BeU5
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:29 2025 by rpki-client