Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ESaNsgleCR1kXFJqphXPiXGnXhs.roa
File: ESaNsgleCR1kXFJqphXPiXGnXhs.roa (raw, json)
Hash identifier: CmHObd0CV5y/EvwF02/zo33gHnOrMjlY2rWaZ+i/dRk=
Subject key identifier: 11:26:8D:B2:09:5E:09:1D:64:5C:52:6A:A6:15:CF:89:71:A7:5E:1B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196C2B16FB508612F9BD5C156F0B851043E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ESaNsgleCR1kXFJqphXPiXGnXhs.roa
Signing time: Mon 12 May 2025 04:12:10 +0000
ROA not before: Mon 12 May 2025 04:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
83.243.86.0/24 maxlen: 24
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.167.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.70.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.3.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.33.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 22:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:b1:6f:b5:08:61:2f:9b:d5:c1:56:f0:b8:51:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 12 04:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11268db2095e091d645c526aa615cf8971a75e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:5e:88:e4:c4:4e:46:67:5b:7c:ac:c4:00:
55:71:3b:7d:47:42:58:91:0e:7d:3d:6d:18:a9:b3:
bd:19:ad:2f:02:53:5e:bb:70:31:9e:69:e1:50:ec:
18:b0:9e:bb:50:3a:0a:32:9c:0d:03:c1:2b:f4:cb:
e9:df:2a:db:2c:e2:ce:c3:5b:43:a3:74:93:4c:a0:
dc:5c:75:29:66:d0:19:d8:c2:7a:4a:51:12:94:28:
5d:ca:94:17:14:e1:16:f0:4d:d0:77:c7:0c:58:9b:
0c:09:87:55:44:00:e4:fe:d1:7b:3a:ec:56:72:a7:
83:14:35:70:a6:51:5a:22:03:56:b2:0d:14:47:23:
5f:1a:4e:9a:8e:42:c6:98:5b:a4:b1:69:bd:05:f8:
ba:5d:d3:01:2a:f8:31:59:32:51:4b:07:97:85:a4:
30:51:ca:b8:41:a4:b8:2a:0f:87:36:fc:5a:32:08:
9e:4b:aa:ee:19:63:85:47:00:a6:42:eb:a7:1a:47:
10:ec:33:ee:6f:ab:7b:65:1d:54:bd:a5:5c:cf:db:
6a:9c:61:04:bc:a7:db:08:88:1b:25:9f:5b:e6:8b:
62:d2:de:c0:40:e7:56:97:04:17:e6:95:84:99:b1:
a0:9e:54:d9:2e:1a:ad:8c:1e:0b:4a:79:5b:a4:f9:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:8D:B2:09:5E:09:1D:64:5C:52:6A:A6:15:CF:89:71:A7:5E:1B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ESaNsgleCR1kXFJqphXPiXGnXhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:69:a1:dc:83:02:f8:13:e5:6f:e0:9b:e6:03:eb:fb:03:c3:
b6:69:63:0c:e0:84:c1:13:d3:de:24:5a:0b:68:06:9c:da:4e:
a7:ad:46:d1:2a:c6:14:cf:b6:e0:3e:ca:da:f7:78:73:59:5c:
2c:ee:49:4e:ce:56:c5:3d:42:8c:53:f4:3d:00:3f:46:22:88:
90:fa:15:99:48:6f:65:2a:fd:9c:c9:87:ef:d4:31:a0:25:11:
ec:6f:da:33:78:6a:37:0c:41:ac:cd:6a:14:ff:9c:e5:a0:aa:
b9:f8:e3:ca:a8:15:a2:0f:24:22:6c:fd:55:a0:0b:45:59:d5:
87:61:cb:29:14:1b:88:70:9f:4b:35:70:4b:8f:a6:94:02:85:
70:23:67:e6:af:bc:50:fb:5c:39:88:d6:98:ca:07:73:26:6a:
8d:95:e7:84:56:dc:8f:a2:fa:c6:d4:a6:46:be:36:66:e1:af:
14:bd:14:61:9a:ca:db:88:8c:86:d2:41:d9:3b:be:02:74:49:
4e:7d:48:f8:4e:f7:de:94:b7:1d:49:a2:4c:16:de:d1:a4:e5:
f1:c5:95:b7:3f:f8:13:5c:77:ed:93:2f:a8:1f:96:d3:a4:c8:
2d:5e:f6:36:52:22:23:51:6d:e9:be:0c:22:2d:60:cc:28:d5:
d9:a2:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:56 2025 by rpki-client