Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/FJfVEFpyTrzKx2EA64QeLcCecCk.roa
File: FJfVEFpyTrzKx2EA64QeLcCecCk.roa (raw, json)
Hash identifier: Hm15Ougb5O3MHckxmW/s5zx+TlrqZZ9qmmyMzap3+WA=
Subject key identifier: 14:97:D5:10:5A:72:4E:BC:CA:C7:61:00:EB:84:1E:2D:C0:9E:70:29
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194FF84381652118CC4304012FA5293814C
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/FJfVEFpyTrzKx2EA64QeLcCecCk.roa
Signing time: Thu 13 Feb 2025 13:34:02 +0000
ROA not before: Thu 13 Feb 2025 13:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:e080::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:84:38:16:52:11:8c:c4:30:40:12:fa:52:93:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 13:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1497d5105a724ebccac76100eb841e2dc09e7029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:13:75:c9:5b:a6:20:78:67:1a:77:c9:88:
e3:77:f3:a9:59:f3:25:a7:8b:8a:5e:f5:c0:3f:a9:
fc:8b:b4:b6:05:de:d8:ab:00:24:3b:81:e5:b0:f9:
79:4e:4e:03:68:c2:86:0a:43:ae:64:8f:54:ae:7f:
bb:1d:26:bf:64:97:c5:d8:b8:a3:27:e4:cb:f8:48:
3e:53:30:fc:a8:03:0e:14:42:e5:58:5d:06:4b:07:
ea:f7:b1:2f:8c:53:e1:ad:71:42:c5:6f:5e:f4:53:
6e:41:4c:9f:64:9f:85:99:a3:53:51:24:ea:e7:44:
84:7e:53:bd:aa:96:cb:f0:f7:82:bb:45:79:7e:f6:
86:06:0f:fc:6b:ae:8e:96:e8:03:4f:c2:a1:9c:ef:
05:f2:b9:a6:80:9e:df:88:4f:ea:62:15:9c:d6:54:
1b:a5:6a:af:27:f2:ca:8c:38:b1:e6:9c:e8:3c:3f:
74:3d:d4:72:f2:1e:5c:d7:84:59:ad:dc:00:84:78:
87:f0:a7:48:3d:63:3d:f2:3c:c5:52:0d:74:fb:64:
44:ef:68:c5:68:23:e4:aa:ff:8b:25:eb:f0:8c:bb:
c2:86:7e:b3:bd:6a:b0:61:96:c2:d8:7e:0f:9c:fa:
3d:36:f6:f0:38:0b:d4:c4:42:e2:2f:cb:19:5c:2d:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:97:D5:10:5A:72:4E:BC:CA:C7:61:00:EB:84:1E:2D:C0:9E:70:29
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/FJfVEFpyTrzKx2EA64QeLcCecCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:cc80::/32
2a00:e080::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::/46
Signature Algorithm: sha256WithRSAEncryption
4b:a0:df:56:43:5b:b4:f8:f5:1f:d1:9a:c6:f6:0c:58:23:96:
d4:f2:a6:dd:67:5a:a6:c0:ca:7b:b1:32:df:78:2b:8e:71:0b:
7d:38:c3:30:a9:a5:be:2f:29:4a:db:64:34:0f:54:6f:70:7c:
c9:96:38:fe:da:32:52:77:57:85:db:c6:c7:1a:13:1b:90:93:
80:c5:a5:7b:05:4b:0e:d0:15:a8:c7:ec:0e:5b:af:c8:7c:91:
dd:a4:f5:ce:ba:0e:31:f8:5c:90:9f:01:92:54:b5:d6:9f:13:
22:e4:18:2e:8e:c3:08:f5:7e:05:a4:bc:ef:c6:a8:50:67:88:
2c:3f:89:13:dd:e0:d1:64:12:82:30:26:c0:76:f1:fb:bb:76:
81:2c:e0:b4:37:21:02:f0:e2:6d:55:8c:ae:0d:06:e4:5c:e3:
ea:0f:f6:79:4b:d2:6a:4b:59:37:02:4d:6e:fe:72:75:d7:9e:
a2:d4:3b:eb:43:52:33:5a:02:40:68:28:ed:eb:e2:d0:3c:01:
25:4a:f0:d1:8f:d1:fd:f2:c2:af:d3:09:c7:8b:68:fb:37:56:
93:e0:56:27:e4:0c:1a:cd:c7:b3:de:82:0b:c0:fd:f2:2d:6c:
56:86:a2:40:d1:03:61:22:49:19:e7:fa:2a:10:71:52:a1:ca:
17:ad:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:29 2025 by rpki-client