Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DBcWs0K4PmINvN6NSmosWNXlaCw.roa
File: DBcWs0K4PmINvN6NSmosWNXlaCw.roa (raw, json)
Hash identifier: WoxI65eNmXSkkzG+nbYkafIIZ7xOrdNA8QWQzHd7/MM=
Subject key identifier: 0C:17:16:B3:42:B8:3E:62:0D:BC:DE:8D:4A:6A:2C:58:D5:E5:68:2C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962C55C174D03618330763A12A396CE5BB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DBcWs0K4PmINvN6NSmosWNXlaCw.roa
Signing time: Sat 12 Apr 2025 23:28:59 +0000
ROA not before: Sat 12 Apr 2025 23:28:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.164.0/24 maxlen: 24
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Apr 2025 00:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:55:c1:74:d0:36:18:33:07:63:a1:2a:39:6c:e5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 23:28:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1716b342b83e620dbcde8d4a6a2c58d5e5682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:84:1d:b8:e3:e4:6a:e0:d7:f8:dd:72:75:
1b:fd:ec:cc:3b:e9:8f:af:8f:8b:c1:7b:ca:f6:7d:
ac:f2:38:54:59:e6:17:1c:a3:9e:d8:8a:2f:66:cf:
df:2e:90:b6:a0:0a:ff:3c:0f:58:39:ac:22:9e:03:
ec:1d:8f:15:ca:27:f1:54:cd:4d:71:65:f8:58:f6:
2b:65:7f:c1:2f:27:69:67:42:aa:3c:a1:a9:c4:ff:
14:0a:0e:df:23:60:f7:33:cc:8e:4e:9b:56:b5:ed:
58:01:ce:39:01:69:2b:9e:da:25:4b:3f:1c:3a:05:
1b:90:d2:f8:43:c8:f1:64:0e:da:ca:70:b1:d8:ac:
26:57:b0:9c:8b:44:d3:f7:70:9d:d8:c3:62:47:51:
19:ad:a3:5a:48:d4:d1:40:f0:62:c9:7f:95:fb:30:
7f:a5:07:fe:34:f1:7a:58:42:6b:8f:22:e5:8f:72:
43:51:d6:f1:53:26:18:13:eb:d2:e1:81:b4:f8:e6:
e5:70:42:c4:14:4b:0b:57:9a:d3:77:3a:7f:22:d4:
55:13:c2:82:6a:b2:03:0b:02:18:a4:5d:53:8f:7e:
e9:55:86:4b:5b:80:f2:52:d6:69:1f:cc:06:60:aa:
e6:d4:42:5b:b6:af:13:36:34:7a:9a:56:06:40:1f:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:16:B3:42:B8:3E:62:0D:BC:DE:8D:4A:6A:2C:58:D5:E5:68:2C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DBcWs0K4PmINvN6NSmosWNXlaCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e6:43:74:6a:c1:3f:ec:d6:d2:0c:ce:df:68:1c:83:95:0a:dd:
16:2f:99:c2:98:50:c7:c8:3f:b1:88:1b:44:dc:88:87:96:5b:
e8:47:9c:3e:da:aa:fe:3a:46:96:7f:31:aa:0b:9d:24:6d:42:
14:e0:08:1b:73:7c:f5:59:57:55:1d:d8:43:53:b8:73:1c:3e:
74:da:d0:f4:63:43:c4:df:b9:a4:ef:db:42:c9:cc:f3:fd:39:
57:c0:25:81:85:69:5b:78:28:78:e7:80:2e:6c:dc:19:a3:e4:
8b:8b:77:91:45:58:a9:8c:88:d6:eb:85:2d:39:bf:89:89:92:
e2:b3:7c:93:6d:e4:20:c5:cc:b8:97:a1:43:e8:b7:b0:6d:a5:
bb:8b:9a:65:ac:95:f3:fc:f8:be:fc:ec:99:e8:a0:04:10:50:
00:07:90:85:eb:ff:19:d3:15:98:7a:02:7e:75:1a:f6:bd:aa:
a2:38:c4:19:84:d8:b9:1c:6f:bb:1c:0a:cc:ec:e8:33:66:0f:
08:17:1b:5c:75:16:88:ce:9c:a1:cb:31:6b:0b:28:ba:43:ea:
cc:c8:74:a0:8e:1e:79:d1:96:70:96:c2:5c:97:89:fc:96:1f:
cd:68:4f:f2:7b:85:de:39:5f:28:ba:40:dc:7f:91:a2:c1:eb:
26:f8:ae:68
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgISAZYsVcF00DYYMwdjoSo5bOW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDEyMjMyODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzE3MTZiMzQyYjgzZTYyMGRiY2RlOGQ0YTZhMmM1OGQ1ZTU2ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvqEHbjj5Grg1/jdcnUb/ezMO+mP
r4+LwXvK9n2s8jhUWeYXHKOe2IovZs/fLpC2oAr/PA9YOawingPsHY8VyifxVM1N
cWX4WPYrZX/BLydpZ0KqPKGpxP8UCg7fI2D3M8yOTptWte1YAc45AWkrntolSz8c
OgUbkNL4Q8jxZA7aynCx2KwmV7Cci0TT93Cd2MNiR1EZraNaSNTRQPBiyX+V+zB/
pQf+NPF6WEJrjyLlj3JDUdbxUyYYE+vS4YG0+OblcELEFEsLV5rTdzp/ItRVE8KC
arIDCwIYpF1Tj37pVYZLW4DyUtZpH8wGYKrm1EJbtq8TNjR6mlYGQB/EQwIDAQAB
o4IDCzCCAwcwHQYDVR0OBBYEFAwXFrNCuD5iDbzejUpqLFjV5WgsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvREJjV3MwSzRQbUlOdk42TlNtb3NXTlhsYUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB1QQCAAEwgc4D
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA
Ba/oAwQABa/rMAwDBAAFr+8DBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYDBAZNWgAD
BANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6ADBAde+YAD
BAJf1yADBASyEpADBAK5DZwwDAMEArkvjAMEALkvjgMEALl5RQMEALl5RwMEAMEc
+wMEAcNuDgMEBNlFoDAwBAIAAjAqAwUDKgAS2AMFAyoAGdADBQAqAM3AAwUDKgG9
QAMFAyoCB6ADBQMqAi/AMA0GCSqGSIb3DQEBCwUAA4IBAQDmQ3RqwT/s1tIMzt9o
HIOVCt0WL5nCmFDHyD+xiBtE3IiHllvoR5w+2qr+OkaWfzGqC50kbUIU4Agbc3z1
WVdVHdhDU7hzHD502tD0Y0PE37mk79tCyczz/TlXwCWBhWlbeCh454AubNwZo+SL
i3eRRVipjIjW64UtOb+JiZLis3yTbeQgxcy4l6FD6LewbaW7i5plrJXz/Pi+/OyZ
6KAEEFAAB5CF6/8Z0xWYegJ+dRr2vaqiOMQZhNi5HG+7HArM7OgzZg8IFxtcdRaI
zpyhyzFrCyi6Q+rMyHSgjh550ZZwlsJcl4n8lh/NaE/ye4XeOV8oukDcf5Giwesm
+K5o
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:00 2025 by rpki-client