Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3HCEotVb2PjIFh-Yu6j5Ois5ho.roa
File: B3HCEotVb2PjIFh-Yu6j5Ois5ho.roa (raw, json)
Hash identifier: 1Ob7rIF1u8azhStjE61Dw6i04mBQSn3wp9Y+RUthwNY=
Subject key identifier: 07:71:C2:12:8B:55:6F:63:E3:20:58:7E:62:EE:A3:E4:E8:AC:E6:1A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196D275FEC6958FD5E82EB28063EAE25EF2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3HCEotVb2PjIFh-Yu6j5Ois5ho.roa
Signing time: Thu 15 May 2025 05:41:10 +0000
ROA not before: Thu 15 May 2025 05:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
83.243.86.0/24 maxlen: 24
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.167.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.70.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.3.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.32.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 13:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:75:fe:c6:95:8f:d5:e8:2e:b2:80:63:ea:e2:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 15 05:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0771c2128b556f63e320587e62eea3e4e8ace61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:b9:28:e3:29:e5:85:16:e7:45:a8:14:3b:
35:db:53:34:9f:dc:b3:5d:32:88:fa:56:5d:36:59:
16:a6:25:e1:b0:c8:9f:5b:82:9f:a6:3e:02:db:8b:
6f:89:eb:6b:e0:85:89:08:29:00:73:6d:b6:08:69:
02:46:27:3d:f9:8c:4d:47:0e:ad:f1:e1:be:39:31:
5c:9e:32:55:1c:0f:ae:61:1e:93:cc:52:cc:ce:70:
06:a6:43:32:8d:65:31:2d:33:95:26:db:ef:42:66:
61:65:d6:40:52:f0:56:08:7f:2b:fe:98:c6:73:0c:
08:1c:e4:8c:f0:b3:7f:13:91:58:59:48:86:ad:8c:
0e:f8:c4:fb:be:ac:91:5c:68:6b:28:70:13:c3:69:
97:ad:5c:d3:ce:45:51:28:ec:68:97:6a:bc:b8:08:
b1:36:b1:0e:63:2b:c5:10:3b:7a:a1:69:49:7a:f8:
4b:f2:19:be:5e:28:99:db:54:75:c7:a0:de:a4:21:
b6:0d:91:b1:94:09:57:dc:e8:d9:e7:ea:60:8b:d5:
fb:5c:86:26:bf:2e:7d:9a:8d:cb:59:f0:0e:09:aa:
a9:d2:cf:48:9b:76:e2:97:df:d9:b3:3c:7f:33:98:
60:6c:fb:50:71:53:f1:1c:4a:ce:d1:04:97:38:9a:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:C2:12:8B:55:6F:63:E3:20:58:7E:62:EE:A3:E4:E8:AC:E6:1A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B3HCEotVb2PjIFh-Yu6j5Ois5ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.204.0/23
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:b3:17:a0:37:36:d7:18:96:4a:7d:59:81:d1:c8:02:cd:b4:
2c:cc:84:f9:1a:6f:b7:78:4c:1e:32:7e:9a:a0:46:15:8f:24:
ad:52:46:7f:4d:15:d8:70:fd:8f:1f:dc:c6:74:86:91:c3:4f:
68:c6:66:03:40:57:d0:03:89:d1:b2:c3:db:64:e0:c4:2f:10:
42:e7:cc:23:bb:4f:29:53:25:54:6e:9c:d2:56:17:6f:a0:9c:
45:16:0e:3e:50:7e:04:aa:c8:78:f7:8f:0c:bb:db:e3:81:ff:
fd:c2:92:1f:16:bd:3e:83:38:6a:39:51:79:99:f6:10:da:04:
7a:79:2c:97:d2:55:d0:fe:63:d7:22:b5:74:ae:2c:3f:d3:b5:
09:6c:f8:f2:36:72:31:81:b7:68:b8:8a:4d:69:29:2b:11:d5:
ef:68:60:5a:d3:d0:4b:1c:be:5d:ce:77:5a:85:e9:d2:b6:ca:
a4:7c:2c:3e:5e:2f:57:08:af:39:d3:3c:05:0a:92:9a:e8:a3:
ad:04:8f:19:68:e9:e3:f4:a2:a4:8b:f2:b6:65:c6:2e:df:95:
17:89:cc:3a:11:d4:dc:c7:00:0c:71:eb:e0:40:b8:03:e5:17:
9b:23:b5:4e:3f:80:67:19:f1:58:71:4d:ab:92:f1:71:e5:09:
72:92:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:53 2025 by rpki-client