Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/07G5bdxOpEz6BpKo12DSI5vNKR8.roa
File: 07G5bdxOpEz6BpKo12DSI5vNKR8.roa (raw, json)
Hash identifier: fHaosCJ5Od/AzGPSvVrWC+5xLaRJn5DdNgUWb43YWdM=
Subject key identifier: D3:B1:B9:6D:DC:4E:A4:4C:FA:06:92:A8:D7:60:D2:23:9B:CD:29:1F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019700143A50825BF8BB6C85040E2556B545
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/07G5bdxOpEz6BpKo12DSI5vNKR8.roa
Signing time: Sat 24 May 2025 02:16:55 +0000
ROA not before: Sat 24 May 2025 02:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 04:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:14:3a:50:82:5b:f8:bb:6c:85:04:0e:25:56:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 24 02:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b1b96ddc4ea44cfa0692a8d760d2239bcd291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:f3:d4:f8:12:80:80:df:44:fb:da:34:84:
72:99:e6:46:11:60:eb:7b:40:49:a0:cf:1c:e3:b9:
a8:f3:06:74:67:80:20:5e:4d:b8:96:13:74:6c:3b:
a1:1d:3f:9e:45:9f:8e:45:26:2b:23:f5:47:8f:ba:
9c:ca:52:45:b2:27:eb:d6:55:fa:6f:94:93:95:13:
c8:2c:78:df:96:fb:9b:d5:83:f1:fd:e0:6f:bb:1d:
4e:77:25:f6:1b:15:c7:ef:89:da:05:9d:7a:27:f1:
00:e4:82:f7:c2:bd:eb:b2:d4:07:69:a9:09:aa:f0:
14:e4:7b:22:2a:5c:84:59:5d:e5:0a:f6:80:cf:c6:
29:e0:bf:5b:3a:f8:a9:b5:0c:9a:ec:79:c5:2f:15:
c9:75:fe:e0:b7:ae:88:3a:56:3e:26:2f:64:44:f1:
dd:35:4d:b4:6b:04:36:ce:f4:34:e3:c6:4d:8c:4a:
36:0d:7e:72:18:93:32:20:6c:2b:69:87:ed:1b:eb:
9f:9e:31:7a:8a:35:8c:0d:be:08:44:8d:4d:e8:c0:
da:4d:8b:2c:29:df:cf:2b:47:8e:a8:67:ca:94:32:
6b:ba:f5:f9:bc:2f:9b:35:d3:16:b1:99:a8:b4:f7:
ef:1d:df:19:f6:47:ec:35:9e:87:95:a4:7d:55:39:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:B9:6D:DC:4E:A4:4C:FA:06:92:A8:D7:60:D2:23:9B:CD:29:1F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/07G5bdxOpEz6BpKo12DSI5vNKR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.196.0/24
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
22:dd:5c:a1:47:75:06:89:d0:16:41:29:26:62:80:71:68:85:
45:19:17:d4:c7:65:87:e1:60:c7:75:e3:d4:30:6a:aa:ed:04:
2a:3d:2d:dd:fd:45:62:d4:9d:84:1e:f2:b4:b6:84:37:16:fd:
9c:4d:dd:b3:f8:00:41:6a:9f:ec:84:5d:c7:c9:a7:ba:fc:2f:
32:39:1a:48:8d:fe:99:d9:86:2c:77:ee:e3:f6:fc:d6:32:51:
58:be:fd:d0:fa:7d:1a:7d:77:d0:de:e8:8e:a6:49:7a:24:61:
34:73:3d:05:86:75:9d:f0:cc:5d:d5:f0:2d:39:3f:e9:0b:f0:
fc:48:37:83:66:00:c2:e5:23:7a:5c:d7:03:a1:12:ef:92:9b:
2e:94:73:4d:62:ed:85:2f:75:d7:a1:61:b6:24:53:ac:cc:1e:
91:df:16:42:08:ba:fb:1e:16:9e:6f:32:eb:50:94:88:c6:cf:
58:4b:a3:ae:29:22:20:24:68:f9:8d:64:fc:4c:38:77:99:d9:
69:a1:f6:66:ce:ae:27:d1:6c:57:58:00:c6:0f:59:28:f7:7c:
23:1f:15:77:26:11:65:f0:80:09:0c:2c:8b:eb:ce:5c:69:ce:
65:9e:36:7c:b8:7c:84:e4:c4:df:da:0f:4d:0f:16:40:40:d4:
16:19:26:2e
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgISAZcAFDpQglv4u2yFBA4lVrVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTI0MDIxNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2IxYjk2ZGRjNGVhNDRjZmEwNjkyYThkNzYwZDIyMzliY2QyOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqHz1PgSgIDfRPvaNIRymeZGEWDr
e0BJoM8c47mo8wZ0Z4AgXk24lhN0bDuhHT+eRZ+ORSYrI/VHj7qcylJFsifr1lX6
b5STlRPILHjflvub1YPx/eBvux1OdyX2GxXH74naBZ16J/EA5IL3wr3rstQHaakJ
qvAU5HsiKlyEWV3lCvaAz8Yp4L9bOviptQya7HnFLxXJdf7gt66IOlY+Ji9kRPHd
NU20awQ2zvQ048ZNjEo2DX5yGJMyIGwraYftG+ufnjF6ijWMDb4IRI1N6MDaTYss
Kd/PK0eOqGfKlDJruvX5vC+bNdMWsZmotPfvHd8Z9kfsNZ6HlaR9VTl6dwIDAQAB
o4IDJTCCAyEwHQYDVR0OBBYEFNOxuW3cTqRM+gaSqNdg0iObzSkfMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMDdHNWJkeE9wRXo2QnBLbzEyRFNJNXZOS1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCB7wQCAAEwgegD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr4oDBAAFr48DBAAFr8QDBAEFr8YDBAAFr8sw
DAMEAAWvzwMEAAWv0DAMAwQABa/hAwQABa/oMAwDBAAFr+sDBAAFr+wwDAMEBAWv
8AMEAAWv9DALAwQABa/7AwMEBaADAwEF5gMEBk1aAAMEA1PzUAMEBVVdAAMEA1V2
oAMEA1fvgAMEBVlqQAMEBlmQAAMEBF5noAMEB175gAMEAl/XIAMEBLISkAMEArkN
nDAMAwQCuS+MAwQAuS+OAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAEAgACMCoD
BQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8AwDQYJKoZI
hvcNAQELBQADggEBACLdXKFHdQaJ0BZBKSZigHFohUUZF9THZYfhYMd149Qwaqrt
BCo9Ld39RWLUnYQe8rS2hDcW/ZxN3bP4AEFqn+yEXcfJp7r8LzI5GkiN/pnZhix3
7uP2/NYyUVi+/dD6fRp9d9De6I6mSXokYTRzPQWGdZ3wzF3V8C05P+kL8PxIN4Nm
AMLlI3pc1wOhEu+Smy6Uc01i7YUvddehYbYkU6zMHpHfFkIIuvseFp5vMutQlIjG
z1hLo64pIiAkaPmNZPxMOHeZ2Wmh9mbOrifRbFdYAMYPWSj3fCMfFXcmEWXwgAkM
LIvrzlxpzmWeNny4fITkxN/aD00PFkBA1BYZJi4=
-----END CERTIFICATE-----
Generated at Wed Jun 18 07:03:35 2025 by rpki-client