Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8tZ1eGDr4meWX7BT8Q6IOwZbBkg.roa
File: 8tZ1eGDr4meWX7BT8Q6IOwZbBkg.roa (raw, json)
Hash identifier: ZdyGnAswXJD43trzJ/eYHM6uvUm3jpuRLUsQC7fxABc=
Subject key identifier: F2:D6:75:78:60:EB:E2:67:96:5F:B0:53:F1:0E:88:3B:06:5B:06:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019701C19B8E845C2FEC3BD75748B403183E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8tZ1eGDr4meWX7BT8Q6IOwZbBkg.roa
Signing time: Sat 24 May 2025 10:05:54 +0000
ROA not before: Sat 24 May 2025 10:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 04:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:c1:9b:8e:84:5c:2f:ec:3b:d7:57:48:b4:03:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 24 10:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d6757860ebe267965fb053f10e883b065b0648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:81:cf:d3:e1:5b:94:b8:e5:25:07:26:d3:
48:ea:e6:68:8a:1c:7d:26:a1:2d:8b:bc:71:aa:d0:
0e:75:26:9a:1c:31:0a:22:b6:76:e8:f4:91:94:08:
d4:f2:fe:a1:38:dc:e7:72:de:14:39:83:9e:13:31:
41:31:04:35:c9:fd:2f:36:4e:e8:6d:be:33:b5:66:
15:90:31:0b:0e:a9:de:45:bf:28:7d:76:58:81:f5:
a3:ba:d0:20:27:21:bf:05:52:04:72:c7:4b:10:c4:
2f:1f:2e:67:95:8c:79:c4:68:78:ee:24:19:9a:00:
93:20:ba:97:fd:c5:ca:8d:3e:c1:44:5d:86:84:89:
42:69:89:06:62:e4:07:1e:29:7c:9e:d5:45:49:48:
5a:17:2c:8e:db:96:85:39:0e:84:27:cc:44:0d:6b:
ed:75:be:4c:fe:e9:3f:d7:b3:68:c6:e1:66:1e:a7:
75:2b:72:c0:75:3d:b0:73:77:1a:b9:cc:aa:af:82:
b1:89:1a:b0:82:3d:ab:bd:63:41:f4:a7:3f:b0:04:
3c:64:01:5e:b4:20:78:be:ff:7c:d0:f5:21:83:a3:
e2:c7:bf:53:d8:8f:f2:a9:7a:b0:5b:64:d5:d2:50:
0c:80:5f:da:7f:6e:97:57:5f:ad:a5:ff:19:18:63:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:75:78:60:EB:E2:67:96:5F:B0:53:F1:0E:88:3B:06:5B:06:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8tZ1eGDr4meWX7BT8Q6IOwZbBkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.196.0/24
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
33:c3:ee:b7:fe:df:e2:33:78:5d:6b:21:64:82:1a:ea:9e:c7:
1f:fa:98:4c:d9:ab:f4:c5:b2:6f:e5:e0:d5:88:99:ae:e4:b6:
c8:5a:c6:cf:9a:92:f3:39:c4:60:0d:60:cc:11:fe:5d:9f:5d:
f3:90:0f:35:08:2d:99:8f:a1:70:3d:62:01:f5:e7:29:d2:c4:
78:0f:0d:93:f2:1f:d7:f0:dc:22:0c:3b:73:80:55:0a:be:75:
54:e7:ec:b9:b8:c4:6e:f6:a5:b3:dd:14:a2:12:7b:50:21:5a:
9a:52:10:4a:0b:fa:e3:f5:df:1f:2a:69:db:96:39:cf:05:ee:
e9:e9:6a:d1:69:07:b1:2e:71:85:d3:fd:a6:8b:80:01:f9:36:
3c:b9:74:37:c3:5d:9d:8e:2b:22:40:c0:e4:36:dc:c7:f5:af:
e8:aa:13:01:f7:24:84:29:cc:37:63:ec:d2:56:ea:08:28:7b:
99:b6:22:88:ad:b5:b6:1e:bf:ce:6d:06:84:80:43:00:d4:7b:
21:69:b9:c5:23:97:b6:61:7c:ab:30:7e:89:57:71:0f:eb:c2:
66:ae:ef:e2:65:4d:bf:d3:1b:d2:32:54:2f:36:31:d7:1a:8f:
37:5a:02:5c:fb:6a:c0:62:b1:a3:24:c9:64:f9:c2:e2:51:53:
4c:f5:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:25:10 2025 by rpki-client