Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/F7h7Kbfm-gY_lEZ5rTWZfsm0XiA.roa
File: F7h7Kbfm-gY_lEZ5rTWZfsm0XiA.roa (raw, json)
Hash identifier: s/4NwKP9CuqG9anQbSJy5SIdEHB0fkXfkS3smiC80+E=
Subject key identifier: 17:B8:7B:29:B7:E6:FA:06:3F:94:46:79:AD:35:99:7E:C9:B4:5E:20
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019510105CA528B22590285B64C5BDABB6DF
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/F7h7Kbfm-gY_lEZ5rTWZfsm0XiA.roa
Signing time: Sun 16 Feb 2025 18:41:02 +0000
ROA not before: Sun 16 Feb 2025 18:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.213.255.0/26 maxlen: 26
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
80.242.0.64/27 maxlen: 27
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
83.123.129.192/26 maxlen: 26
83.123.255.0/24 maxlen: 28
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.0.8/29 maxlen: 29
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 32
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:f::/49 maxlen: 49
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:f8::/45 maxlen: 49
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 05 Mar 2025 07:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:10:5c:a5:28:b2:25:90:28:5b:64:c5:bd:ab:b6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 16 18:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b87b29b7e6fa063f944679ad35997ec9b45e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:31:1b:77:6c:de:3d:23:72:d3:ca:b1:ae:
36:b1:15:d8:b4:2b:bd:4c:80:95:99:af:26:25:5b:
8e:c6:09:7c:18:6d:f9:01:e7:3d:0e:b7:e8:90:1d:
e8:26:59:5e:e2:07:2a:34:d6:c5:0b:82:ee:71:3c:
f3:be:7d:c2:b9:44:c5:66:eb:ee:6f:ad:f4:08:c4:
ec:fb:5b:94:cb:30:c0:26:81:5f:77:de:9c:f7:46:
c5:4d:2f:73:e7:d1:6b:ab:06:3f:d3:30:c0:de:6d:
00:c2:a2:40:42:9c:54:18:a8:03:d8:d0:c6:bd:fd:
ce:17:b7:b3:c5:46:8e:1f:c7:8b:bf:68:d0:93:8b:
27:89:39:90:42:b2:06:43:4a:10:cd:29:3a:17:bc:
13:a7:cb:a3:c9:0d:c7:c9:93:f1:6c:f1:e2:77:70:
49:70:e3:09:78:aa:94:15:00:41:6b:54:4f:6e:c7:
e7:89:45:57:5b:06:61:a6:74:41:1e:6d:8a:d7:40:
c9:b3:16:d2:eb:bf:b9:bf:50:1c:9d:95:45:c4:49:
3c:dc:4c:e7:7a:66:46:02:60:f7:d8:f4:fd:78:6d:
ff:1d:71:64:b2:7e:cf:c1:80:ec:cd:69:fd:3c:e3:
b2:fb:8c:e8:99:d0:20:e4:0c:41:38:d9:50:63:81:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:7B:29:B7:E6:FA:06:3F:94:46:79:AD:35:99:7E:C9:B4:5E:20
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/F7h7Kbfm-gY_lEZ5rTWZfsm0XiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:f8::-2a02:4540:103:ffff:ffff:ffff:ffff:ffff
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
27:51:33:ad:88:14:19:b5:05:79:d2:90:9e:c3:8a:4a:10:68:
a0:d2:f2:43:14:b3:6d:71:71:e1:f3:1f:26:db:c3:8c:3e:5d:
71:6d:83:02:24:c0:65:e4:75:06:ec:7d:06:ec:1f:59:11:c8:
c0:55:c8:26:a8:99:d8:1c:ff:4c:6a:d4:28:b5:88:fc:fd:55:
82:85:1a:81:59:94:6c:97:9d:8a:0d:42:be:91:fc:a4:62:cf:
5e:bf:88:3e:a5:0a:ad:f2:bf:8f:22:3c:24:24:cb:e0:f8:ab:
18:b3:62:02:98:12:c8:91:6a:f4:ae:f8:7b:b4:be:7c:17:49:
70:fc:78:a3:79:58:2a:25:94:0a:c1:f7:16:c1:ba:3e:30:f4:
a1:eb:6c:10:58:87:82:90:4a:fb:46:b7:7c:7f:cb:9f:49:eb:
12:e4:09:b2:ff:4b:de:95:43:a0:60:0c:05:af:f1:84:21:ef:
85:62:81:4a:12:82:37:c0:f5:23:6a:1c:cd:69:eb:38:98:6c:
ca:ea:0e:f9:9d:56:87:9d:70:c5:b2:9c:ad:c7:f2:76:09:c5:
ff:3a:ce:83:6a:d6:c7:b8:af:af:53:d5:22:de:d9:ec:25:b6:
e1:e3:9a:44:05:f4:fa:f4:0a:65:d4:a2:28:19:45:55:0f:f2:
fb:11:0c:bc
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgISAZUQEFylKLIlkChbZMW9q7bfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjUwMjE2MTg0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2I4N2IyOWI3ZTZmYTA2M2Y5NDQ2NzlhZDM1OTk3ZWM5YjQ1ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OUxG3ds3j0jctPKsa42sRXYtCu9
TICVma8mJVuOxgl8GG35Aec9DrfokB3oJlle4gcqNNbFC4LucTzzvn3CuUTFZuvu
b630CMTs+1uUyzDAJoFfd96c90bFTS9z59FrqwY/0zDA3m0AwqJAQpxUGKgD2NDG
vf3OF7ezxUaOH8eLv2jQk4sniTmQQrIGQ0oQzSk6F7wTp8ujyQ3HyZPxbPHid3BJ
cOMJeKqUFQBBa1RPbsfniUVXWwZhpnRBHm2K10DJsxbS67+5v1AcnZVFxEk83Ezn
emZGAmD32PT9eG3/HXFksn7PwYDszWn9POOy+4zomdAg5AxBONlQY4Hz5wIDAQAB
o4ID4zCCA98wHQYDVR0OBBYEFBe4eym35voGP5RGea01mX7JtF4gMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvRjdoN0tiZm0tZ1lfbEVaNXJUV1pmc20wWGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB9wYIKwYBBQUHAQcBAf8EggHmMIIB4jCCATEEAgABMIIB
KQMEBwUWAAMDAAU0AwMABWoDBAYFycAwCgMDBAXQAwMABdoDBAcF+gADBAcfAoAD
BAclP4ADBAYlYgADAwAlgQMEBy4zAAMEBi6kQDAMAwQHPmaAAwQCPmaIAwQGRcJA
AwQEUPIAAwQGUrTAAwMCU3gDBAVV78ADAwBWNwMEBFZrAAMEBFZr0AMEBFktMAMD
AFnEAwMBWcYDBAdbhYADAwBb+wMDAF1uAwQEXmXwAwQHX0AAAwQFbWygAwQFbcuA
AwQGbeGAAwQHccsAAwQGgv/AAwQHnjoAAwQGpIqAAwQHrFCAAwQFsEHAAwQGsoPA
AwQCuQWcAwQBuRYcAwQFvHpgAwQEvNHAAwQEvNJAAwQEvNLAAwQEvNQwAwQHvOUA
AwMAwA8DAwDMEjCBqgQCAAIwgaMwEAMFBioCRUADBwUqAkVAAMAwEgMHAyoCRUAA
+AMHAioCRUABADARAwYEKgJFQFADBwUqAkVAUIADCQAqAkVAb8AAADARAwYEKgJF
QHADBwYqAkVAcIADBgAqAkVAkAMHByoCRUDAADARAwYFKgJFQOADBwAqAkVA4IAD
CQAqAkVEABACADASAwcFKgJFRADgAwcCKgJFRADoAwcCKgJFRQDgMA0GCSqGSIb3
DQEBCwUAA4IBAQAnUTOtiBQZtQV50pCew4pKEGig0vJDFLNtcXHh8x8m28OMPl1x
bYMCJMBl5HUG7H0G7B9ZEcjAVcgmqJnYHP9MatQotYj8/VWChRqBWZRsl52KDUK+
kfykYs9ev4g+pQqt8r+PIjwkJMvg+KsYs2ICmBLIkWr0rvh7tL58F0lw/HijeVgq
JZQKwfcWwbo+MPSh62wQWIeCkEr7Rrd8f8ufSesS5Amy/0velUOgYAwFr/GEIe+F
YoFKEoI3wPUjahzNaes4mGzK6g75nVaHnXDFspytx/J2CcX/Os6DatbHuK+vU9Ui
3tnsJbbh45pEBfT69Apl1KIoGUVVD/L7EQy8
-----END CERTIFICATE-----
Generated at Thu May 15 13:29:52 2025 by rpki-client