Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/FErKdrNv8nj9CKROIO433fXjW58.roa
File: FErKdrNv8nj9CKROIO433fXjW58.roa (raw, json)
Hash identifier: WtbBOlTQSBm9SixQYuHnHfIxpFtPtei5HoweckBv48M=
Subject key identifier: 14:4A:CA:76:B3:6F:F2:78:FD:08:A4:4E:20:EE:37:DD:F5:E3:5B:9F
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01956528AED8D6767EF7240043848C8FD7D0
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/FErKdrNv8nj9CKROIO433fXjW58.roa
Signing time: Wed 05 Mar 2025 07:15:19 +0000
ROA not before: Wed 05 Mar 2025 07:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197207
IP address blocks: 5.22.0.0/17 maxlen: 24
5.52.0.0/16 maxlen: 24
5.106.0.0/16 maxlen: 24
5.201.192.0/18 maxlen: 24
5.208.0.0/16 maxlen: 24
5.208.1.0/24 maxlen: 24
5.209.0.0/16 maxlen: 24
5.210.0.0/16 maxlen: 24
5.211.0.0/16 maxlen: 24
5.212.0.0/16 maxlen: 24
5.213.0.0/16 maxlen: 24
5.213.255.0/26 maxlen: 26
5.214.0.0/16 maxlen: 24
5.215.0.0/16 maxlen: 24
5.216.0.0/16 maxlen: 24
5.217.0.0/16 maxlen: 24
5.218.0.0/16 maxlen: 24
5.250.0.0/17 maxlen: 24
31.2.128.0/17 maxlen: 24
37.63.128.0/17 maxlen: 24
37.98.0.0/18 maxlen: 24
37.129.0.0/16 maxlen: 24
46.51.0.0/17 maxlen: 24
46.164.64.0/18 maxlen: 24
62.102.128.0/21 maxlen: 22
62.102.136.0/22 maxlen: 22
69.194.64.0/18 maxlen: 24
80.242.0.0/20 maxlen: 24
80.242.0.64/27 maxlen: 27
82.180.192.0/18 maxlen: 24
82.180.192.0/19 maxlen: 20
82.180.224.0/19 maxlen: 20
83.120.0.0/16 maxlen: 24
83.120.0.0/17 maxlen: 20
83.121.0.0/16 maxlen: 24
83.122.0.0/16 maxlen: 24
83.123.0.0/16 maxlen: 24
83.123.129.192/26 maxlen: 26
83.123.255.0/24 maxlen: 28
85.239.192.0/19 maxlen: 24
86.55.0.0/16 maxlen: 24
86.55.0.0/17 maxlen: 20
86.55.128.0/17 maxlen: 20
86.107.0.0/20 maxlen: 24
86.107.208.0/20 maxlen: 24
86.107.208.0/24 maxlen: 24
86.107.209.0/24 maxlen: 24
86.107.210.0/27 maxlen: 27
86.107.211.0/24 maxlen: 24
89.45.48.0/20 maxlen: 24
89.45.48.0/24 maxlen: 29
89.45.49.0/24 maxlen: 24
89.45.54.0/24 maxlen: 24
89.196.0.0/16 maxlen: 24
89.198.0.0/15 maxlen: 24
89.198.0.0/16 maxlen: 20
89.198.0.0/17 maxlen: 20
89.198.128.0/17 maxlen: 20
89.199.0.0/16 maxlen: 20
89.199.0.0/17 maxlen: 20
89.199.128.0/17 maxlen: 20
91.133.128.0/17 maxlen: 24
91.133.128.0/18 maxlen: 20
91.133.192.0/18 maxlen: 20
91.251.0.0/16 maxlen: 24
91.251.128.0/17 maxlen: 20
93.110.0.0/16 maxlen: 24
93.110.0.0/20 maxlen: 20
93.110.64.0/18 maxlen: 20
94.101.240.0/20 maxlen: 24
95.64.0.0/17 maxlen: 24
109.108.160.0/19 maxlen: 24
109.203.128.0/19 maxlen: 24
109.225.128.0/18 maxlen: 24
113.203.0.0/17 maxlen: 24
113.203.0.0/18 maxlen: 20
113.203.0.8/29 maxlen: 29
113.203.64.0/18 maxlen: 20
130.255.192.0/18 maxlen: 24
130.255.224.0/19 maxlen: 20
158.58.0.0/17 maxlen: 24
164.138.128.0/18 maxlen: 24
164.138.128.0/24 maxlen: 32
164.138.130.0/24 maxlen: 24
172.80.128.0/17 maxlen: 24
172.80.160.0/19 maxlen: 20
172.80.192.0/18 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
176.65.192.0/19 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.194.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
178.131.192.0/18 maxlen: 24
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
188.122.96.0/19 maxlen: 24
188.209.192.0/20 maxlen: 24
188.210.64.0/20 maxlen: 24
188.210.192.0/20 maxlen: 24
188.212.48.0/20 maxlen: 24
188.229.0.0/17 maxlen: 24
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
188.229.116.0/24 maxlen: 24
192.15.0.0/16 maxlen: 24
204.18.0.0/16 maxlen: 24
204.18.0.0/18 maxlen: 20
204.18.64.0/18 maxlen: 20
204.18.128.0/18 maxlen: 20
204.18.192.0/18 maxlen: 20
2a02:4540::/42 maxlen: 42
2a02:4540::100/120 maxlen: 120
2a02:4540:f::/49 maxlen: 49
2a02:4540:40::/42 maxlen: 42
2a02:4540:40::/44 maxlen: 44
2a02:4540:50::/44 maxlen: 44
2a02:4540:60::/44 maxlen: 44
2a02:4540:70::/44 maxlen: 44
2a02:4540:80::/42 maxlen: 42
2a02:4540:c0::/43 maxlen: 43
2a02:4540:c0::/46 maxlen: 46
2a02:4540:c4::/46 maxlen: 46
2a02:4540:f8::/45 maxlen: 49
2a02:4540:100::/46 maxlen: 46
2a02:4540:5000::/42 maxlen: 42
2a02:4540:5000::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:5040::/42 maxlen: 42
2a02:4540:5040::/46 maxlen: 46
2a02:4540:5080::/44 maxlen: 44
2a02:4540:5090::/44 maxlen: 44
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:7000::/42 maxlen: 42
2a02:4540:7000::/43 maxlen: 43
2a02:4540:7040::/42 maxlen: 42
2a02:4540:7040::/46 maxlen: 46
2a02:4540:7040::/48 maxlen: 48
2a02:4540:7040::/49 maxlen: 49
2a02:4540:7044::/46 maxlen: 46
2a02:4540:7048::/46 maxlen: 46
2a02:4540:7080::/43 maxlen: 43
2a02:4540:70a0::/43 maxlen: 43
2a02:4540:9000::/42 maxlen: 42
2a02:4540:9000::/44 maxlen: 44
2a02:4540:9000::/49 maxlen: 49
2a02:4540:9010::/44 maxlen: 44
2a02:4540:9010::/49 maxlen: 49
2a02:4540:9040::/42 maxlen: 42
2a02:4540:9040::/46 maxlen: 46
2a02:4540:9080::/42 maxlen: 42
2a02:4540:90c0::/42 maxlen: 42
2a02:4540:c000::/42 maxlen: 42
2a02:4540:c000::/43 maxlen: 43
2a02:4540:c020::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540:c040::/42 maxlen: 42
2a02:4540:c040::/46 maxlen: 46
2a02:4540:e000::/42 maxlen: 42
2a02:4540:e000::/43 maxlen: 43
2a02:4540:e000::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/48 maxlen: 48
2a02:4540:e020::/64 maxlen: 64
2a02:4540:e030::/44 maxlen: 44
2a02:4540:e040::/42 maxlen: 42
2a02:4540:e040::/46 maxlen: 46
2a02:4540:e080::/48 maxlen: 48
2a02:4544:10:200::/64 maxlen: 64
2a02:4544:e0::/46 maxlen: 46
2a02:4544:e0:300::/112 maxlen: 112
2a02:4544:e0:500::/112 maxlen: 112
2a02:4544:e4::/46 maxlen: 46
2a02:4544:e8::/46 maxlen: 46
2a02:4544:20e1::/64 maxlen: 64
2a02:4545:e0::/46 maxlen: 46
2a02:4545:e0::/48 maxlen: 48
2a02:4545:e0::/56 maxlen: 56
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 05 Mar 2025 10:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:28:ae:d8:d6:76:7e:f7:24:00:43:84:8c:8f:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Mar 5 07:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144aca76b36ff278fd08a44e20ee37ddf5e35b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:e8:dd:11:0e:1b:f2:e9:d7:f8:4b:81:40:
9d:12:74:8a:af:4c:d9:a4:b0:4c:66:68:5f:1a:2a:
4e:c9:23:02:30:cf:38:75:4c:a2:12:4b:c9:e2:e2:
42:38:19:7f:de:7c:1d:4e:b1:20:8f:ec:af:34:83:
f8:53:07:35:a4:71:33:9a:16:60:6c:6e:61:f0:bf:
f3:00:cc:28:a9:2a:84:8e:62:79:38:f4:75:77:99:
d0:ba:17:77:7e:ae:d3:c2:a1:2d:66:9e:4d:85:48:
81:0e:5c:87:7b:e8:4d:54:78:3e:d2:db:21:ee:06:
86:ce:1f:da:b9:fd:00:54:78:11:7d:b5:2e:a4:9e:
13:26:b4:d1:72:72:6e:2c:61:5d:0b:22:bc:d7:93:
bb:9b:a1:6a:7b:80:80:41:89:27:f7:77:1f:34:8b:
7e:11:43:5e:3e:9c:e6:0a:98:49:94:37:c1:f4:e3:
bf:aa:bb:75:75:cd:61:61:7f:13:b3:d6:c1:df:fb:
1f:b8:07:e6:7d:29:15:c0:b4:44:d8:cf:65:89:18:
2f:90:b5:3f:d3:2a:56:08:c8:22:94:3c:e7:4a:20:
3b:5d:29:f4:de:55:b1:05:00:29:58:df:88:51:be:
98:da:52:8b:c7:9f:f3:21:4c:63:d1:8e:35:27:a6:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:CA:76:B3:6F:F2:78:FD:08:A4:4E:20:EE:37:DD:F5:E3:5B:9F
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/FErKdrNv8nj9CKROIO433fXjW58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
62.102.128.0-62.102.139.255
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
109.203.128.0/19
109.225.128.0/18
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
178.131.192.0/18
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::-2a02:4540:df:ffff:ffff:ffff:ffff:ffff
2a02:4540:f8::-2a02:4540:103:ffff:ffff:ffff:ffff:ffff
2a02:4540:5000::-2a02:4540:509f:ffff:ffff:ffff:ffff:ffff
2a02:4540:6fc0::/64
2a02:4540:7000::-2a02:4540:70bf:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/40
2a02:4540:c000::/41
2a02:4540:e000::-2a02:4540:e080:ffff:ffff:ffff:ffff:ffff
2a02:4544:10:200::/64
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4544:20e1::/64
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
04:10:4b:bb:e3:01:27:28:6e:3e:20:1a:50:12:e9:60:03:64:
f2:6f:40:1a:2d:01:b9:49:78:63:dc:de:04:19:7c:8b:cc:48:
34:87:ac:7e:02:e7:a8:c8:2b:5d:5b:60:3d:ad:2a:18:77:2a:
51:6a:1c:3b:49:16:80:67:ac:e2:6d:68:c3:2a:95:0e:6c:19:
c1:42:2d:a6:6d:fb:5c:37:b8:54:b3:42:08:26:3b:bc:d5:a9:
a4:ea:0f:1c:9d:80:50:b0:b6:7d:0c:56:16:13:a0:92:68:6f:
96:68:3a:37:5c:ee:d0:f3:60:8f:6a:d2:2b:6c:ba:63:45:42:
58:05:17:39:9e:48:bd:c6:0f:9c:0b:c9:b4:39:62:b5:97:b4:
ee:b8:0d:c8:b9:51:19:fb:d1:e6:84:ff:a2:e1:0f:5b:35:d1:
be:76:62:12:4a:de:09:72:e8:be:ab:55:6f:f7:f6:e1:09:0e:
ad:f3:c0:81:1a:6a:bd:9e:bd:4b:63:b6:13:bd:28:d0:a0:3e:
30:b5:00:c9:8b:7d:ed:2e:33:c2:36:7e:63:63:60:b7:19:d6:
ec:00:1f:73:c4:c2:03:01:9e:a8:94:75:16:61:c5:20:00:5a:
c8:b3:10:ec:db:8a:17:48:32:ac:a2:e6:ce:2d:87:40:5b:af:
fb:5e:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:04:14 2025 by rpki-client