Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l70BA6tcxCUUh9-65o8NIk7uFU.roa
File: 2l70BA6tcxCUUh9-65o8NIk7uFU.roa (raw, json)
Hash identifier: O2IhhnUp42TwnwpeugrpYIuvmCMaNNakw21BrTePZlk=
Subject key identifier: DA:5E:F4:04:0E:AD:73:10:94:52:1F:7E:EB:9A:3C:34:89:3B:B8:55
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196568A1039703412AF2571B0FEF293EFBF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l70BA6tcxCUUh9-65o8NIk7uFU.roa
Signing time: Mon 21 Apr 2025 04:10:10 +0000
ROA not before: Mon 21 Apr 2025 04:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.57.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Apr 2025 07:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:8a:10:39:70:34:12:af:25:71:b0:fe:f2:93:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 21 04:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da5ef4040ead731094521f7eeb9a3c34893bb855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:5a:bb:5d:56:be:69:7c:fb:ca:02:13:d8:
e9:20:75:be:af:d4:55:1e:6b:d6:0d:c9:32:f1:63:
cf:ef:ef:fe:05:1e:e5:fc:15:60:bc:c5:bc:1a:43:
35:e0:fc:ac:cd:b4:4d:cd:eb:10:f0:33:b9:16:ef:
c3:f4:8b:52:4d:39:15:97:19:aa:33:ee:a0:95:33:
c6:33:99:14:dc:04:d1:17:29:9c:77:42:b6:35:ad:
e9:19:44:83:f7:2b:aa:87:56:8e:c7:4a:7f:a4:c0:
e0:ae:e7:f9:c1:c4:d3:87:45:1b:85:e6:aa:be:a8:
f8:78:95:fb:7f:fc:2f:a9:ee:a2:79:35:d8:59:ce:
da:e5:38:dc:71:ad:5e:0a:44:85:0b:14:62:97:7a:
8c:cb:77:d6:ea:e6:53:a5:dc:3e:10:e4:2f:21:c0:
25:bc:a1:7c:f3:69:13:78:8f:96:e0:20:8e:6e:9a:
59:09:41:c1:a3:a9:d5:10:67:c0:8e:e6:ee:3e:57:
a2:23:23:38:e6:ff:99:22:87:df:1c:ec:d9:0e:e3:
f4:8c:ab:68:d9:c9:cc:05:64:9c:d0:52:8c:87:b2:
6d:fb:d2:9b:75:98:11:91:d6:c1:c9:a9:47:f8:16:
16:56:da:6b:1e:31:c6:09:d1:d0:b2:f2:eb:84:e6:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:F4:04:0E:AD:73:10:94:52:1F:7E:EB:9A:3C:34:89:3B:B8:55
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l70BA6tcxCUUh9-65o8NIk7uFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
67:85:a8:cc:6b:b7:86:cd:9f:d5:4e:55:f7:1c:ed:96:b3:fa:
51:d1:8c:a2:97:9c:23:eb:f4:1c:d1:f0:51:1f:d7:81:c2:80:
a2:e4:35:29:77:ec:37:ba:d2:55:37:f0:31:74:a4:d5:43:44:
5a:af:8e:71:8a:35:53:67:55:f6:f3:f8:e8:70:96:fd:66:11:
23:c4:ae:da:39:98:12:4f:59:c5:d4:a4:fe:f2:5b:78:da:f7:
54:ec:c0:13:e1:c6:9e:c4:dd:d4:de:3d:6a:ce:a2:a8:5d:12:
fe:fb:57:18:eb:a0:d1:0e:f6:3d:91:2b:26:ce:14:9b:3b:67:
ba:54:49:51:d0:11:d0:88:80:42:86:6c:d2:d3:5c:da:4c:6d:
67:c9:cd:2e:f1:a2:7a:67:04:f4:16:88:42:67:52:dc:a5:8b:
38:10:bb:6c:b2:0f:f3:96:1e:d6:5e:a2:17:0e:d0:6d:bc:0b:
a6:36:34:df:d8:dd:14:83:5f:b2:fe:dd:f3:55:86:07:1d:29:
15:57:1c:ed:b2:a5:46:3f:d8:8b:62:e8:b7:76:07:58:e0:3b:
8f:8d:24:99:9a:26:d3:68:e5:a2:cb:56:c0:d9:b9:3e:bf:d1:
a7:25:d7:75:62:b2:08:91:68:8f:d0:bf:6e:a7:42:30:86:15:
68:5a:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:34:18 2025 by rpki-client