Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1K8dX1mTs0c4_qleC2FpI9Io7dM.roa
File: 1K8dX1mTs0c4_qleC2FpI9Io7dM.roa (raw, json)
Hash identifier: zcQMQkPumGKHy9Csuz/oTDrf4S6qMDm+gGRFENH0c8I=
Subject key identifier: D4:AF:1D:5F:59:93:B3:47:38:FE:A9:5E:0B:61:69:23:D2:28:ED:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961445F0545288C4FFDDC2BF2047D08D81
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1K8dX1mTs0c4_qleC2FpI9Io7dM.roa
Signing time: Tue 08 Apr 2025 07:20:49 +0000
ROA not before: Tue 08 Apr 2025 07:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Apr 2025 17:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:45:f0:54:52:88:c4:ff:dd:c2:bf:20:47:d0:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 07:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4af1d5f5993b34738fea95e0b616923d228edd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:9f:11:0b:6a:86:bd:14:5b:e7:0c:e4:4b:
3f:94:9e:d4:93:45:27:a3:70:0f:a8:60:ce:d1:bf:
65:33:dd:10:9c:b2:6e:da:ec:b3:b6:69:9a:f5:ad:
da:0b:40:84:95:f0:2b:8b:ef:37:99:f5:43:3f:4b:
90:2d:44:98:c7:37:02:77:8d:a1:0c:df:44:b4:3e:
a6:28:02:fe:e7:c3:07:ac:c5:81:5d:79:dc:51:49:
86:da:bb:ed:a1:24:d9:c7:6d:59:54:33:62:58:9d:
cb:6e:9f:0a:74:f1:67:cc:8a:23:41:ed:aa:f7:9f:
df:8a:e8:81:18:96:80:b2:9b:72:61:07:b0:eb:c6:
fc:7c:c1:22:15:5c:6a:f4:2d:1c:b8:c3:78:14:a8:
82:59:56:74:f8:0a:a8:4c:9d:03:b1:35:2d:2d:f1:
f7:90:be:30:61:f7:f6:0f:22:9f:05:a5:65:56:17:
13:d5:54:94:08:d9:d0:6e:c2:cc:57:3e:51:f1:d9:
ba:0b:80:69:bc:6f:4e:d6:fd:a1:f2:2d:87:cb:11:
0e:99:bd:0f:ed:23:84:62:b4:4e:d3:95:5f:dd:f9:
1e:1f:bb:7e:f1:6f:fc:1c:f7:44:0f:a4:d9:ec:30:
cd:22:2a:46:b4:b1:cc:c7:b7:69:ef:d3:c4:22:e8:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:1D:5F:59:93:B3:47:38:FE:A9:5E:0B:61:69:23:D2:28:ED:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1K8dX1mTs0c4_qleC2FpI9Io7dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e3:8a:ce:82:8d:13:fc:42:e0:33:99:c3:14:15:f2:29:b3:14:
62:95:2f:4d:84:f6:e5:6d:9d:a2:6d:2e:bd:a0:23:c0:b5:bd:
99:71:4f:d4:32:26:f9:d9:76:1b:4e:a3:ee:9b:90:67:a9:85:
11:c3:ec:3c:6c:e2:e1:7e:e2:79:12:b3:11:8a:aa:71:8e:1f:
e1:63:88:94:52:86:6c:da:60:12:51:d5:dd:38:a2:c9:25:e1:
dc:58:bd:03:da:56:8a:91:d9:cd:83:51:90:74:08:dc:ac:b8:
70:25:5c:a0:24:a5:fa:aa:95:b2:2e:2e:ee:83:b5:fd:b2:35:
8e:39:80:34:3a:21:b5:9c:ea:9d:50:39:43:f3:ec:ed:7d:31:
5b:6b:59:91:83:7f:b8:24:e0:e6:ef:cc:f7:2c:4a:e5:6f:a0:
ed:28:ef:c8:32:4a:1c:be:8f:53:42:ff:54:ab:40:12:83:a6:
03:02:44:33:40:d0:49:74:06:e8:62:bd:1c:47:e2:83:94:f8:
b0:e6:46:80:c0:d8:c1:a3:95:78:ab:7e:f3:c9:5e:8f:13:8e:
c5:ef:d5:a3:41:ac:aa:26:34:c3:da:15:37:f7:dd:e9:e9:bc:
98:39:6c:80:2a:f8:6c:dc:c2:e0:e1:5f:a5:d1:96:b5:3d:37:
24:fd:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:09 2025 by rpki-client