Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7plf_ddV_jq9g8U1N_bzooLe2DA.roa
File: 7plf_ddV_jq9g8U1N_bzooLe2DA.roa (raw, json)
Hash identifier: S5RI+izSfuZ9iA7W57kR59cqvXEO98lXW9VM34XF1ME=
Subject key identifier: EE:99:5F:FD:D7:55:FE:3A:BD:83:C5:35:37:F6:F3:A2:82:DE:D8:30
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019639DD5BDE626E3A9EEC57A7B410198C79
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7plf_ddV_jq9g8U1N_bzooLe2DA.roa
Signing time: Tue 15 Apr 2025 14:32:10 +0000
ROA not before: Tue 15 Apr 2025 14:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.2.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.32.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Apr 2025 16:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:dd:5b:de:62:6e:3a:9e:ec:57:a7:b4:10:19:8c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 14:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee995ffdd755fe3abd83c53537f6f3a282ded830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:5c:9d:c2:31:ad:bc:f0:51:44:2f:43:ac:
4b:a4:4f:96:1a:cd:5a:d7:81:65:eb:1a:f5:fa:03:
f9:ad:f8:77:4c:ae:b4:e2:01:bf:3a:3f:f4:fd:1b:
2c:ed:8d:88:c5:0a:f4:b8:f6:b4:c3:23:6f:04:e9:
cc:d1:e3:87:ce:f6:9d:3a:93:6e:b4:15:b1:56:50:
f4:df:7b:e1:d7:bb:27:37:2d:cf:ee:05:c4:7f:5f:
f6:b8:ea:49:72:e5:2c:04:f8:6d:d0:63:af:e4:47:
56:3b:1b:8c:0e:06:e3:d7:01:5d:33:6d:31:59:00:
3c:14:fc:58:6e:34:92:f0:ef:20:f9:e3:c0:5d:c3:
80:9a:f1:c3:7d:6c:a5:3e:86:cc:9a:df:b7:7a:75:
f6:a9:a0:ba:ce:36:d4:86:4d:18:f8:6e:13:b8:e7:
e1:5d:84:6f:b0:44:53:30:54:df:ea:54:69:2b:ad:
fb:13:61:8a:3c:95:87:dc:4a:ae:f2:54:f6:1d:63:
4a:1d:8b:bf:38:e2:49:63:8f:87:3f:7c:7c:6b:15:
3b:a1:2a:f3:8a:70:aa:79:da:d5:b9:76:a6:4a:bb:
44:24:83:af:4f:58:8e:43:a5:e1:80:1f:a1:c3:9c:
ae:e0:b7:41:7c:d9:8e:65:5d:52:45:48:ae:ba:48:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:5F:FD:D7:55:FE:3A:BD:83:C5:35:37:F6:F3:A2:82:DE:D8:30
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7plf_ddV_jq9g8U1N_bzooLe2DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:e7:a3:9b:dc:d9:41:4e:ea:b1:31:10:68:39:17:b3:cf:77:
ff:b4:07:7d:06:eb:0f:20:fd:36:b2:f9:42:35:fe:4c:c8:0c:
22:c9:22:1b:6b:30:9a:80:dd:dc:c8:6a:0e:a6:ec:f4:6e:10:
cb:2c:ce:59:b8:55:d5:ae:92:d5:8d:2b:f0:ab:22:cb:7c:23:
19:ca:b7:3d:9f:86:3e:65:e9:35:ae:ec:8f:a7:6f:f0:8a:8b:
45:cd:93:c3:90:bb:7b:2a:9f:cf:30:6a:c7:09:2a:99:7d:71:
7d:1c:86:04:1c:30:ce:ac:3f:da:46:37:14:f1:68:89:41:60:
fa:91:79:fa:2d:ed:e1:7a:0d:1e:d6:49:6e:c8:9a:d2:a2:db:
08:5c:53:e1:db:5b:03:57:06:86:d9:2a:e4:23:7c:a0:98:9e:
f4:e9:cd:92:e5:07:c5:7c:20:36:6d:da:ea:34:3e:4c:ff:ef:
3f:4b:50:6f:5f:da:ea:9e:31:97:6a:6b:97:6f:1f:d3:f1:40:
41:11:01:87:4d:e6:35:3e:7f:37:f7:d5:48:59:57:c3:ab:eb:
f8:00:99:1d:8f:5e:74:b0:2f:9f:e5:43:d7:f7:1f:db:60:c0:
9e:a3:c4:5a:9c:05:ef:3e:07:33:2a:b4:49:b2:75:29:78:0c:
b1:ca:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:44 2025 by rpki-client