Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dx-CoAUzblyaqzugxfDhSpg4YD0.roa
File: Dx-CoAUzblyaqzugxfDhSpg4YD0.roa (raw, json)
Hash identifier: w2LopT8uZ/Kbf8Vg5+uHdVwHcvbjB79gw2NeRIBOObY=
Subject key identifier: 0F:1F:82:A0:05:33:6E:5C:9A:AB:3B:A0:C5:F0:E1:4A:98:38:60:3D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019629A8071F52CCD3FDA318742FC4870012
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dx-CoAUzblyaqzugxfDhSpg4YD0.roa
Signing time: Sat 12 Apr 2025 10:59:59 +0000
ROA not before: Sat 12 Apr 2025 10:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 12 Apr 2025 14:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a8:07:1f:52:cc:d3:fd:a3:18:74:2f:c4:87:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 10:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1f82a005336e5c9aab3ba0c5f0e14a9838603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:2c:ef:ff:e0:53:1d:56:7b:7e:27:c0:c0:
c0:f1:e6:96:73:1f:45:34:47:c3:2b:3d:ac:0c:7f:
f6:80:65:d1:d3:36:58:07:76:83:27:73:de:ee:7e:
5a:de:9e:a5:8f:02:67:a6:06:43:b5:da:57:79:bb:
51:0d:d8:fa:b1:16:00:96:81:f8:4b:e6:ce:18:72:
32:93:d6:82:aa:b1:15:08:0f:c5:85:ab:15:b1:7f:
10:42:27:2e:4d:cf:5b:f2:33:95:c9:19:91:0b:ea:
67:e6:e2:19:33:88:eb:38:27:06:78:67:e5:e1:a4:
eb:31:2e:c6:d1:39:1a:6b:8f:b6:b9:39:cd:f4:70:
cc:36:22:dc:76:54:bd:8e:eb:ea:bc:8a:96:99:50:
67:9c:f5:f8:14:87:b0:b0:52:12:3f:44:a7:f6:a8:
02:e5:d2:61:ee:ef:bd:96:97:4c:69:45:4c:63:33:
ee:f1:a3:c2:22:37:05:87:66:04:fb:cf:4f:b9:f5:
32:48:7d:ba:06:dd:7a:1b:d9:8d:80:24:e7:a5:8b:
39:99:20:7e:ea:f9:58:a1:40:08:97:44:9e:a7:b1:
11:be:64:e9:8b:75:ba:cd:72:21:8e:9c:3d:40:91:
1e:af:80:8c:65:af:d7:c6:7b:de:28:a7:0e:53:22:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:82:A0:05:33:6E:5C:9A:AB:3B:A0:C5:F0:E1:4A:98:38:60:3D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Dx-CoAUzblyaqzugxfDhSpg4YD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:9f:ec:20:4f:1d:8e:46:13:e3:bb:7a:18:3e:9d:88:db:46:
c2:2a:dd:2f:8e:02:f2:00:86:90:62:04:eb:9c:68:c8:f1:d3:
bc:b4:9e:18:a3:b6:8e:10:08:4f:65:11:ae:47:68:ed:0e:c0:
bf:50:ea:7b:84:6a:26:0f:12:b5:16:a7:66:ee:f5:64:1a:8a:
e3:57:bf:0a:f5:ec:44:d5:bc:df:f2:f7:f9:60:d9:4f:14:33:
c3:84:4d:40:92:75:93:d3:64:d5:77:cf:35:81:b0:1a:e1:42:
65:fb:af:b2:c3:fe:69:ed:62:d8:c8:29:1f:bd:51:b1:cb:01:
55:ea:bb:07:ab:e4:db:37:1f:90:00:89:79:dc:d1:1c:98:ef:
12:9f:7c:31:49:53:49:18:7e:b6:dd:cc:67:c1:86:2f:95:6f:
58:5d:76:cb:07:8e:b1:b4:bd:5e:b3:bd:6e:8d:c4:cc:e5:be:
7d:dd:78:da:9b:bb:31:c6:be:73:c4:2a:df:2d:ff:ec:0d:13:
fd:99:b2:9c:c6:84:b8:f8:1f:19:7b:e3:a2:ed:e7:76:01:7a:
44:f1:6e:dd:07:3e:36:e6:e6:d8:c5:a3:dd:00:e2:e8:ad:9b:
9c:33:d7:d7:94:56:d8:d1:e0:5d:85:a5:98:58:57:0e:ca:d7:
7c:d8:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:32:22 2025 by rpki-client