Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2LTm4GMX8QHK2Y4OVPm-FRvYkc.roa
File: C2LTm4GMX8QHK2Y4OVPm-FRvYkc.roa (raw, json)
Hash identifier: aZKmM/McO4/QI3adG3Z0UptvGrLyuess4+LdYJYrCLg=
Subject key identifier: 0B:62:D3:9B:81:8C:5F:C4:07:2B:66:38:39:53:E6:F8:54:6F:62:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196ACAE5DD224CB28DF1DB947272531CAA8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2LTm4GMX8QHK2Y4OVPm-FRvYkc.roa
Signing time: Wed 07 May 2025 21:37:10 +0000
ROA not before: Wed 07 May 2025 21:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 04:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:ae:5d:d2:24:cb:28:df:1d:b9:47:27:25:31:ca:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 7 21:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b62d39b818c5fc4072b66383953e6f8546f6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:d6:76:7a:a6:28:93:a1:c6:b9:ea:e5:5d:
e7:6d:21:e7:0b:e4:42:7e:c0:08:80:81:8e:a9:64:
d2:f1:70:17:30:6b:ca:8a:e8:bb:a5:e2:29:c8:68:
e1:49:1e:51:f0:b7:dc:7f:5e:32:f2:a9:bd:4b:f2:
08:57:12:d9:54:d8:e7:26:c2:25:7b:70:9a:f7:92:
02:76:16:b0:f7:8c:1e:c3:38:53:bd:19:e7:d3:d1:
41:8a:9b:77:44:75:3e:d3:43:2b:e9:26:1e:71:6b:
5f:25:06:70:49:6f:ad:50:9c:e8:fb:68:df:e6:81:
05:2c:24:a7:51:b3:3a:65:56:ee:c3:89:1d:f2:75:
cc:0e:d4:70:cb:3c:1a:35:18:35:ec:64:c2:62:eb:
00:14:e9:4d:bd:59:03:1f:39:04:8d:f6:c8:2c:02:
f7:e3:d7:70:1a:e3:57:4c:4e:e3:4a:fa:27:7d:73:
dc:6f:65:b0:e2:e4:93:15:4c:eb:d5:7d:9c:0d:99:
ea:4c:a1:00:15:34:1c:ee:f2:79:66:6b:96:73:db:
7c:67:8e:38:83:0c:84:6b:59:73:52:74:a6:a7:24:
33:0e:69:78:98:e1:7f:ac:ce:8b:43:74:1a:d7:bb:
7e:d8:8f:7c:4d:87:65:ca:c7:e3:81:ff:a9:91:36:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:D3:9B:81:8C:5F:C4:07:2B:66:38:39:53:E6:F8:54:6F:62:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2LTm4GMX8QHK2Y4OVPm-FRvYkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.106.0-5.231.110.255
5.231.116.0-5.231.123.255
89.144.53.0-89.144.55.255
94.103.166.0/24
94.103.172.0-94.103.174.255
94.249.183.0-94.249.190.255
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
94.249.243.0-94.249.252.255
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:22:63:f0:16:6a:98:9b:1d:b9:e6:b4:1c:47:15:8c:71:7d:
c1:b7:e8:a9:a8:9e:ca:64:ba:94:63:3b:a3:b7:4e:c0:f4:19:
48:72:b8:40:17:af:11:6d:28:f3:8d:9b:3f:68:29:59:b2:d5:
e7:74:2f:6c:b5:cb:46:be:66:99:b7:a9:63:3a:cb:9a:28:a6:
5a:1a:69:62:d9:27:4a:32:6f:1c:86:81:5f:e7:39:6c:98:60:
df:d7:22:27:60:dd:27:df:ba:c8:01:1c:35:1d:58:6a:b5:91:
b9:e2:28:f5:4d:6b:59:43:26:3f:40:96:5c:c6:03:42:3c:c4:
fa:93:7e:f7:05:c2:43:fb:4a:60:68:12:05:d4:4d:81:cb:cb:
1c:ce:48:f1:b7:19:45:ad:b9:27:38:a0:ae:01:dc:3d:8f:fc:
53:c1:66:b6:a4:cf:c5:8a:7f:00:3d:6e:20:f2:1e:dd:df:e4:
c0:95:c6:52:1e:95:18:f5:d3:26:cc:cc:83:85:33:fc:76:d5:
81:d8:26:8f:a5:e9:ed:e5:ca:94:3f:f6:d0:15:51:0a:df:e5:
04:ed:7b:00:bb:93:e7:69:a6:e3:31:2b:be:aa:89:df:3a:bf:
94:ae:93:a3:f9:b6:e5:61:96:32:ff:e0:07:64:b1:49:e4:94:
ab:aa:42:9c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZasrl3SJMso3x25RyclMcqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTA3MjEzNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjYyZDM5YjgxOGM1ZmM0MDcyYjY2MzgzOTUzZTZmODU0NmY2MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9DWdnqmKJOhxrnq5V3nbSHnC+RC
fsAIgIGOqWTS8XAXMGvKiui7peIpyGjhSR5R8Lfcf14y8qm9S/IIVxLZVNjnJsIl
e3Ca95ICdhaw94wewzhTvRnn09FBipt3RHU+00Mr6SYecWtfJQZwSW+tUJzo+2jf
5oEFLCSnUbM6ZVbuw4kd8nXMDtRwyzwaNRg17GTCYusAFOlNvVkDHzkEjfbILAL3
49dwGuNXTE7jSvonfXPcb2Ww4uSTFUzr1X2cDZnqTKEAFTQc7vJ5ZmuWc9t8Z444
gwyEa1lzUnSmpyQzDml4mOF/rM6LQ3Qa17t+2I98TYdlysfjgf+pkTbplQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFAti05uBjF/EBytmODlT5vhUb2JHMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQzJMVG00R01YOFFISzJZNE9WUG0tRlJ2WWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfDAMAwQB
BedqAwQABeduMAwDBAIF53QDBAIF53gwDAMEAFmQNQMEA1mQMAMEAF5npjAMAwQC
XmesAwQAXmeuMAwDBABe+bcDBABe+b4wDAMEAF75xQMEAF75zjAMAwQAXvnhAwQA
XvnmMAwDBABe+fMDBABe+fwDBACyEpMwDQYJKoZIhvcNAQELBQADggEBAEsiY/AW
apibHbnmtBxHFYxxfcG36KmonspkupRjO6O3TsD0GUhyuEAXrxFtKPONmz9oKVmy
1ed0L2y1y0a+Zpm3qWM6y5ooploaaWLZJ0oybxyGgV/nOWyYYN/XIidg3SffusgB
HDUdWGq1kbniKPVNa1lDJj9AllzGA0I8xPqTfvcFwkP7SmBoEgXUTYHLyxzOSPG3
GUWtuSc4oK4B3D2P/FPBZrakz8WKfwA9biDyHt3f5MCVxlIelRj10ybMzIOFM/x2
1YHYJo+l6e3lypQ/9tAVUQrf5QTtewC7k+dppuMxK76qid86v5Suk6P5tuVhljL/
4AdksUnklKuqQpw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:46:56 2025 by rpki-client