Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yoSodz6HKMPfNF2H28hLA4PDoYA.roa
File: yoSodz6HKMPfNF2H28hLA4PDoYA.roa (raw, json)
Hash identifier: K/Wz1w3nSpTp1RNaPpvcZ1WwB+e0QXqIewUdQgMvqno=
Subject key identifier: CA:84:A8:77:3E:87:28:C3:DF:34:5D:87:DB:C8:4B:03:83:C3:A1:80
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194FFFC275B1050C0498F5CA1ECAA84FB95
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yoSodz6HKMPfNF2H28hLA4PDoYA.roa
Signing time: Thu 13 Feb 2025 15:45:02 +0000
ROA not before: Thu 13 Feb 2025 15:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.134.204.0/24 maxlen: 24
77.136.0.0/16 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/14 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
79.174.232.0/21 maxlen: 21
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.124.0.0/16 maxlen: 24
80.125.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
81.185.168.0/21 maxlen: 21
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.140.0.0/16 maxlen: 24
88.141.0.0/16 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 32
2a00:8380::/32 maxlen: 32
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:c780::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:e080::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 16:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:fc:27:5b:10:50:c0:49:8f:5c:a1:ec:aa:84:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 15:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca84a8773e8728c3df345d87dbc84b0383c3a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:08:da:b6:97:97:52:20:a4:d2:86:60:b6:
a6:bb:e1:96:4a:b0:7b:6f:46:d0:d1:5f:ca:ea:ce:
03:8e:cb:d8:49:5f:cd:9b:53:83:20:0d:96:78:aa:
84:99:a0:40:8a:4b:16:ae:09:b7:81:4a:93:ec:32:
b1:81:e3:a4:cc:9a:64:9d:bb:eb:ef:68:a4:21:61:
6a:b5:80:3f:63:8e:fe:e0:3a:59:1c:8b:54:79:50:
25:48:f5:76:0c:38:41:8f:b9:54:0a:b0:88:45:80:
8f:d5:24:0b:db:48:ed:2f:fb:b6:0b:0e:a7:2e:bd:
03:6d:0b:69:58:0e:b7:09:10:59:c7:14:ab:09:18:
56:3b:18:54:3c:b4:8f:79:3a:1f:26:ad:a0:4c:aa:
0f:bc:8e:36:b2:ec:f3:e4:3c:fd:b1:f3:ba:78:2d:
47:ae:5d:b2:64:95:6d:d4:e6:6f:18:bb:a1:e9:a6:
86:74:fa:a3:dc:53:4a:57:68:a4:5b:c2:8c:b3:f0:
b3:a6:f6:73:98:44:a3:80:9f:a8:49:68:d7:41:70:
28:f1:a8:c4:05:08:d9:6b:1d:02:7d:ef:d5:24:fe:
63:a3:12:50:a1:a1:c5:72:64:e6:06:e3:61:6b:45:
7c:30:7a:e3:cc:7f:f4:22:83:08:1a:bc:79:b8:61:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:A8:77:3E:87:28:C3:DF:34:5D:87:DB:C8:4B:03:83:C3:A1:80
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yoSodz6HKMPfNF2H28hLA4PDoYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:c780::/32
2a00:cc80::/32
2a00:e080::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/30
2a04:807::/46
Signature Algorithm: sha256WithRSAEncryption
60:27:34:da:ee:dd:c1:7d:73:ba:8d:39:1b:66:60:d3:a8:a0:
a0:35:96:32:6d:be:5b:48:39:d5:1b:d6:f9:c1:cc:19:b1:f7:
5f:4a:a1:05:34:e3:e8:ee:57:83:7a:3b:ab:0d:d5:f6:ee:07:
d4:d4:39:b1:c4:4e:25:7d:cf:f2:90:56:0a:39:7c:c6:dc:4d:
19:13:43:38:b3:4c:9e:66:16:f0:1c:7e:32:b6:b8:3a:21:f4:
fe:51:23:aa:19:57:20:37:6d:46:b6:71:2d:9e:d0:c8:e6:1f:
06:aa:8a:cc:58:ba:40:2f:3d:ce:93:d0:2b:9a:ef:e7:8f:ee:
20:74:ee:2f:51:5b:53:4a:70:5f:a0:ec:3b:93:27:67:06:4a:
08:ef:62:2a:d5:dc:64:56:69:7b:4a:14:4b:4d:b9:5f:48:d4:
ce:aa:09:ea:4b:a9:2b:09:ad:5c:1c:91:d8:92:66:46:e1:b0:
6f:c3:7e:56:6d:8a:13:6e:51:d2:d4:19:3d:f1:8e:a8:96:6a:
a5:e5:97:18:d4:73:ac:ae:28:98:3c:65:60:d2:22:4d:04:8c:
1d:96:ee:7b:49:56:b2:5e:64:04:e8:86:85:13:19:e1:5f:ea:
85:da:08:af:d2:eb:49:23:b7:97:d8:ce:7d:0a:70:5e:43:d6:
50:3a:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:09 2025 by rpki-client