Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DndfF48W0lkey4uUerKS8cm0xxE.roa
File: DndfF48W0lkey4uUerKS8cm0xxE.roa (raw, json)
Hash identifier: cc1nQ1g5r5kVBU+Cm2uks8vRUIdEM6hQ+iae2LLQ2Fc=
Subject key identifier: 0E:77:5F:17:8F:16:D2:59:1E:CB:8B:94:7A:B2:92:F1:C9:B4:C7:11
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01967F6420BDD42440A278892BEC5478AD30
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DndfF48W0lkey4uUerKS8cm0xxE.roa
Signing time: Tue 29 Apr 2025 02:33:10 +0000
ROA not before: Tue 29 Apr 2025 02:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.21.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Apr 2025 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:64:20:bd:d4:24:40:a2:78:89:2b:ec:54:78:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 02:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e775f178f16d2591ecb8b947ab292f1c9b4c711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:37:a5:ab:3a:a9:a9:45:7c:78:18:4f:f1:
d2:65:c0:d8:8b:1d:d5:88:6a:32:5c:72:ff:e5:b9:
de:59:fb:69:e1:ca:6d:8c:b8:81:bf:fb:a5:01:1c:
c8:14:13:d3:2b:39:f2:f9:c4:02:7e:c5:fd:a4:1d:
42:33:01:25:af:38:86:bf:c0:82:37:d3:80:71:78:
2d:94:93:f6:f3:3e:2d:75:72:e3:8c:8e:85:3a:95:
27:78:d0:18:e0:f4:eb:9c:cf:25:98:2d:da:38:fe:
96:d8:e5:be:36:cc:e7:cc:b2:64:c6:93:49:40:da:
27:c3:01:03:ed:79:46:d8:ab:1b:86:a6:13:76:a7:
79:6e:b3:37:a5:7d:c7:37:7b:05:9d:ab:31:14:86:
84:6f:ed:87:d6:db:4a:38:2b:5b:38:99:6a:8a:36:
d7:16:21:71:d0:3b:df:f3:a4:c3:39:53:d1:42:78:
61:a6:01:65:eb:f0:53:41:3c:7c:08:d3:ac:97:6c:
5f:d7:f3:99:50:70:5f:d6:23:3a:f2:31:1a:17:ce:
dd:43:3a:e3:5f:36:bf:39:67:81:31:2e:b1:ac:09:
f3:5a:2b:e0:22:fc:ca:f6:5c:b9:aa:4c:af:c1:af:
08:4e:1f:27:07:6a:64:23:0e:40:1e:24:77:8e:92:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:5F:17:8F:16:D2:59:1E:CB:8B:94:7A:B2:92:F1:C9:B4:C7:11
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DndfF48W0lkey4uUerKS8cm0xxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
da:ba:51:4e:19:f0:cf:07:54:9a:b0:56:f8:a7:6b:20:b3:00:
7a:42:79:21:58:f1:e1:8c:51:28:8b:35:41:87:19:88:96:ec:
b3:a2:74:b4:99:e4:47:fb:63:da:50:08:48:90:78:a8:ba:38:
f7:e5:e6:71:c6:57:bf:e6:e5:b9:2e:58:a9:08:35:4e:a1:01:
75:97:14:55:97:3c:04:64:62:da:a3:f2:47:d6:1d:10:9a:96:
8d:be:bb:94:a2:80:89:d3:44:8c:9c:40:ad:f6:1c:27:8e:17:
4f:9f:f7:9f:21:72:de:65:55:95:c2:d6:eb:cf:59:49:6d:60:
d6:80:e9:b8:34:65:e5:81:c0:a3:fb:8f:3e:1c:72:2c:e2:f2:
13:71:c7:5e:8d:a7:39:05:43:02:80:09:11:fa:2e:46:70:85:
5d:7a:ea:ff:a3:24:13:38:01:b3:ac:b7:36:2f:25:0f:77:d2:
d5:c6:aa:0f:6e:9b:55:0d:42:f4:e3:38:65:d0:b8:20:0d:b4:
53:ac:7b:e7:9f:62:b3:50:ea:b4:58:22:d5:6e:aa:7e:99:c6:
60:9f:b0:0d:7c:13:1c:26:a4:c4:e7:3d:34:f0:9d:d7:bc:49:
bf:f6:26:2f:e3:44:ab:68:59:27:58:3c:aa:a8:82:e5:f7:c8:
11:2a:08:a2
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgISAZZ/ZCC91CRAoniJK+xUeK0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI5MDIzMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTc3NWYxNzhmMTZkMjU5MWVjYjhiOTQ3YWIyOTJmMWM5YjRjNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskc3pas6qalFfHgYT/HSZcDYix3V
iGoyXHL/5bneWftp4cptjLiBv/ulARzIFBPTKzny+cQCfsX9pB1CMwElrziGv8CC
N9OAcXgtlJP28z4tdXLjjI6FOpUneNAY4PTrnM8lmC3aOP6W2OW+NsznzLJkxpNJ
QNonwwED7XlG2KsbhqYTdqd5brM3pX3HN3sFnasxFIaEb+2H1ttKOCtbOJlqijbX
FiFx0Dvf86TDOVPRQnhhpgFl6/BTQTx8CNOsl2xf1/OZUHBf1iM68jEaF87dQzrj
Xza/OWeBMS6xrAnzWivgIvzK9ly5qkyvwa8ITh8nB2pkIw5AHiR3jpJA7QIDAQAB
o4IDCzCCAwcwHQYDVR0OBBYEFA53XxePFtJZHsuLlHqykvHJtMcRMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRG5kZkY0OFcwbGtleTR1VWVyS1M4Y20weHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB1QQCAAEwgc4D
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA
Ba/oAwQABa/rMAwDBAQFr/ADBAAFr/QDBAAFr/gwCwMEAAWv+wMDBAWgAwMBBeYD
BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD
BAde+YADBAJf1yADBASyEpADBAK5DZwwDAMEArkvjAMEALkvjgMEALl5RwMEAMEc
+wMEAcNuDgMEBNlFoDAwBAIAAjAqAwUDKgAS2AMFAyoAGdADBQAqAM3AAwUDKgG9
QAMFAyoCB6ADBQMqAi/AMA0GCSqGSIb3DQEBCwUAA4IBAQDaulFOGfDPB1SasFb4
p2sgswB6QnkhWPHhjFEoizVBhxmIluyzonS0meRH+2PaUAhIkHioujj35eZxxle/
5uW5LlipCDVOoQF1lxRVlzwEZGLao/JH1h0QmpaNvruUooCJ00SMnECt9hwnjhdP
n/efIXLeZVWVwtbrz1lJbWDWgOm4NGXlgcCj+48+HHIs4vITccdejac5BUMCgAkR
+i5GcIVdeur/oyQTOAGzrLc2LyUPd9LVxqoPbptVDUL04zhl0LggDbRTrHvnn2Kz
UOq0WCLVbqp+mcZgn7ANfBMcJqTE5z008J3XvEm/9iYv40SraFknWDyqqILl98gR
Kgii
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:54:14 2025 by rpki-client