Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3z-q5Q3jT0ZQAcpkzq_cXvAV8Ng.roa
File: 3z-q5Q3jT0ZQAcpkzq_cXvAV8Ng.roa (raw, json)
Hash identifier: bdxmxYADxRIMxPyB++7oQBN2p8vJaMRCwR6Zls747Xo=
Subject key identifier: DF:3F:AA:E5:0D:E3:4F:46:50:01:CA:64:CE:AF:DC:5E:F0:15:F0:D8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196DAF8099CBA3CDDB2D54D60465AC4C755
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3z-q5Q3jT0ZQAcpkzq_cXvAV8Ng.roa
Signing time: Fri 16 May 2025 21:20:10 +0000
ROA not before: Fri 16 May 2025 21:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
83.243.86.0/24 maxlen: 24
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.167.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.70.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.147.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 21:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:f8:09:9c:ba:3c:dd:b2:d5:4d:60:46:5a:c4:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 21:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df3faae50de34f465001ca64ceafdc5ef015f0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:aa:14:a9:14:88:e4:a0:c0:16:9a:80:ae:
01:8a:13:e3:f5:af:06:8a:d9:53:99:39:7f:40:76:
8c:27:e7:95:99:cc:f3:ba:83:e8:e1:87:1f:0a:da:
33:db:2b:97:06:e1:af:75:8f:27:5b:2e:ef:6c:d5:
06:4d:38:7f:76:43:30:13:14:66:f5:0f:f2:1d:79:
46:07:05:76:4a:d1:6f:a6:c7:ce:a3:f4:05:97:d0:
2d:c1:01:e3:c4:a3:62:f0:18:38:20:4f:85:3d:0f:
65:15:bc:76:33:45:87:d1:7a:36:e4:b4:91:2e:2d:
25:e8:f6:a4:a1:ee:e1:47:2a:af:dd:0e:39:98:c3:
1e:5f:d2:f4:5a:17:be:83:de:e6:62:67:58:8a:28:
77:e3:09:97:9f:8b:5b:41:d1:53:00:4a:37:4d:63:
41:4a:53:70:bb:64:2f:31:86:3b:cc:30:27:03:c5:
76:76:3a:9b:34:15:49:0b:42:2d:77:c5:53:0c:36:
d9:6b:23:32:e0:8a:4d:d4:17:51:dd:4d:5b:73:4b:
c6:8b:6e:12:cd:f0:a1:ca:31:c6:e1:81:37:7b:48:
88:8a:60:f1:b3:05:fd:4f:e0:38:83:43:ed:85:69:
9f:2f:9a:d7:fe:20:d8:f0:00:0c:2f:79:a5:92:68:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:AA:E5:0D:E3:4F:46:50:01:CA:64:CE:AF:DC:5E:F0:15:F0:D8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3z-q5Q3jT0ZQAcpkzq_cXvAV8Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.204.0/23
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
31:f3:81:46:26:34:62:82:ac:85:44:fd:88:30:49:06:e2:99:
29:76:4a:a8:b8:9a:01:39:ca:86:e6:74:58:9c:79:30:24:72:
70:1c:df:e8:29:71:6e:6e:f8:e5:0e:6b:1c:5d:ec:56:0b:3b:
57:fc:72:3e:80:e1:40:cc:88:11:0b:bd:25:b1:f7:f3:16:93:
41:9c:96:a0:37:f0:79:c4:71:be:cd:a5:c5:1a:24:4d:2c:fb:
8a:1a:40:3c:5f:7e:3b:5d:d7:e6:85:51:c1:3d:22:9c:a2:10:
e8:56:f8:0f:8f:f8:31:1c:b1:a8:ed:c1:28:97:a5:64:bc:17:
4c:54:14:96:7c:37:df:0b:7f:59:50:c7:b3:70:5f:1b:03:1c:
44:94:b7:39:66:f2:79:11:37:c7:80:3c:43:3a:b7:3e:61:26:
2d:5a:38:c3:ac:08:e2:18:6c:cc:3a:d1:5f:02:f9:d6:14:a5:
55:bb:5d:4a:01:b6:cb:af:26:25:74:27:82:96:93:12:aa:cb:
dd:53:56:04:19:1e:84:f0:e8:e1:a3:39:7c:e1:f8:a8:6d:0f:
f7:40:7c:24:ae:0a:c1:e4:07:67:15:ba:09:8a:95:f8:3d:89:
07:ed:92:11:ef:83:57:6e:5a:32:89:da:47:d0:d1:79:ea:1f:
10:ff:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:48:00 2025 by rpki-client