Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dsr91ohDKZd2zseFf357khNk8s0.roa
File: Dsr91ohDKZd2zseFf357khNk8s0.roa (raw, json)
Hash identifier: vV/Hh8Z1M72UNMRTSeYpi2r6cgjcFbHxd+dWgkE07S8=
Subject key identifier: 0E:CA:FD:D6:88:43:29:97:76:CE:C7:85:7F:7E:7B:92:13:64:F2:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966B22955C58BDC1EC2FC1958B4AB7795F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dsr91ohDKZd2zseFf357khNk8s0.roa
Signing time: Fri 25 Apr 2025 04:09:10 +0000
ROA not before: Fri 25 Apr 2025 04:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Apr 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:22:95:5c:58:bd:c1:ec:2f:c1:95:8b:4a:b7:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 25 04:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ecafdd68843299776cec7857f7e7b921364f2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:53:da:24:a2:20:74:a0:bd:33:29:1b:20:
2c:6f:a7:71:3e:5a:63:52:3d:15:5f:2c:07:3d:9b:
80:87:6a:62:6b:94:9b:87:f7:f4:4c:4f:ee:a0:fd:
fc:ee:c2:ea:1a:e6:16:a7:65:b2:75:06:97:51:11:
5f:6a:72:22:f5:b3:f5:78:e0:ab:e1:88:d4:ea:e1:
47:db:b4:55:ef:f1:51:e1:48:76:4a:4c:38:c7:a2:
92:2b:8c:fb:24:1c:a1:97:e5:61:9c:c7:93:b8:ed:
1f:2e:cb:d0:ca:6f:66:eb:94:8c:4c:e7:55:5f:43:
a5:a3:87:57:0f:8a:82:89:7f:9a:14:5e:a3:37:ad:
e7:3f:51:bd:fd:cc:a0:fd:dc:d3:23:50:c9:75:59:
78:2e:ee:c5:8e:88:2f:34:69:53:9b:bd:b2:94:5c:
fa:d7:3d:ca:db:32:93:9f:2b:c2:9b:1d:35:f5:d5:
e3:26:7c:07:74:3d:b0:92:dd:6e:0a:ea:c6:18:6b:
f1:e8:1c:66:11:1d:04:b4:33:02:f2:2a:f6:2f:38:
b7:cd:60:e8:7c:8b:87:c3:09:4d:ec:54:70:f2:de:
17:ad:7a:d3:49:c0:2d:8a:8e:86:3e:a5:34:62:46:
c0:8a:78:72:26:e2:10:da:92:2c:6f:85:63:5f:97:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:FD:D6:88:43:29:97:76:CE:C7:85:7F:7E:7B:92:13:64:F2:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dsr91ohDKZd2zseFf357khNk8s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:f0:98:fc:e2:9b:98:5e:77:e9:3b:79:a0:c8:10:2c:f6:bc:
ca:7a:29:de:5f:35:90:14:5c:3c:58:fa:c2:c5:f3:e2:d3:e4:
cc:28:88:42:9f:cd:4a:e5:fb:51:da:9d:46:76:78:27:dc:af:
59:a4:8e:3d:58:27:f6:ca:7e:88:8e:2e:f0:c5:72:31:9c:8c:
65:fe:3f:90:36:34:05:0c:4f:7a:2f:9e:1f:aa:95:fa:bf:dc:
0b:df:2b:3a:41:03:86:12:26:e2:44:a9:ce:7a:73:0a:52:8e:
c3:2b:04:f0:f4:20:39:74:39:a3:e0:15:dd:68:c0:f0:7e:01:
29:0a:d1:c3:d9:d1:c0:f5:ac:9f:3b:25:e8:f6:1f:ab:5f:1e:
4e:04:67:03:e0:38:78:a4:cb:48:c9:ba:6d:44:fb:6b:6f:4a:
39:ec:aa:57:43:d7:c3:f3:1a:da:a1:68:f8:5e:3f:21:f6:de:
ff:f7:97:59:58:aa:b2:6e:96:0b:68:ac:01:f9:7d:72:10:27:
e1:08:5d:58:9f:8b:d2:c1:bb:44:88:7c:e5:73:74:b5:bc:f8:
f9:58:22:f6:65:db:c9:4a:88:b4:a7:7f:b7:01:11:9f:09:04:
44:38:66:46:3b:bc:37:bd:cc:73:da:12:28:81:bb:33:12:97:
fe:f6:9d:63
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgISAZZrIpVcWL3B7C/BlYtKt3lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI1MDQwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWNhZmRkNjg4NDMyOTk3NzZjZWM3ODU3ZjdlN2I5MjEzNjRmMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmddT2iSiIHSgvTMpGyAsb6dxPlpj
Uj0VXywHPZuAh2pia5Sbh/f0TE/uoP387sLqGuYWp2WydQaXURFfanIi9bP1eOCr
4YjU6uFH27RV7/FR4Uh2Skw4x6KSK4z7JByhl+VhnMeTuO0fLsvQym9m65SMTOdV
X0Olo4dXD4qCiX+aFF6jN63nP1G9/cyg/dzTI1DJdVl4Lu7FjogvNGlTm72ylFz6
1z3K2zKTnyvCmx019dXjJnwHdD2wkt1uCurGGGvx6BxmER0EtDMC8ir2Lzi3zWDo
fIuHwwlN7FRw8t4XrXrTScAtio6GPqU0YkbAinhyJuIQ2pIsb4VjX5fJNQIDAQAB
o4IDCzCCAwcwHQYDVR0OBBYEFA7K/daIQymXds7HhX9+e5ITZPLNMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRHNyOTFvaERLWmQyenNlRmYzNTdraE5rOHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB1QQCAAEwgc4D
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA
Ba/oAwQABa/rMAwDBAQFr/ADBAAFr/QDBAAFr/gwCwMEAAWv+wMDBAWgAwMBBeYD
BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD
BAde+YADBAJf1yADBASyEpADBAK5DZwwDAMEArkvjAMEALkvjgMEALl5RwMEAMEc
+wMEAcNuDgMEBNlFoDAwBAIAAjAqAwUDKgAS2AMFAyoAGdADBQAqAM3AAwUDKgG9
QAMFAyoCB6ADBQMqAi/AMA0GCSqGSIb3DQEBCwUAA4IBAQCK8Jj84puYXnfpO3mg
yBAs9rzKeineXzWQFFw8WPrCxfPi0+TMKIhCn81K5ftR2p1Gdngn3K9ZpI49WCf2
yn6Iji7wxXIxnIxl/j+QNjQFDE96L54fqpX6v9wL3ys6QQOGEibiRKnOenMKUo7D
KwTw9CA5dDmj4BXdaMDwfgEpCtHD2dHA9ayfOyXo9h+rXx5OBGcD4Dh4pMtIybpt
RPtrb0o57KpXQ9fD8xraoWj4Xj8h9t7/95dZWKqybpYLaKwB+X1yECfhCF1Yn4vS
wbtEiHzlc3S1vPj5WCL2ZdvJSoi0p3+3ARGfCQREOGZGO7w3vcxz2hIogbszEpf+
9p1j
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:11 2025 by rpki-client