Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P9jvTvy_Dhy9c-XGQECU7Asl-nE.roa
File: P9jvTvy_Dhy9c-XGQECU7Asl-nE.roa (raw, json)
Hash identifier: 00gypsWhcNArrHFQXAp2kGV/wgSYQDGbE2jOlEkDrMU=
Subject key identifier: 3F:D8:EF:4E:FC:BF:0E:1C:BD:73:E5:C6:40:40:94:EC:0B:25:FA:71
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F75219D372698E958BEC5733CAA746DC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P9jvTvy_Dhy9c-XGQECU7Asl-nE.roa
Signing time: Thu 22 May 2025 09:27:55 +0000
ROA not before: Thu 22 May 2025 09:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.106.78.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:52:19:d3:72:69:8e:95:8b:ec:57:33:ca:a7:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 09:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd8ef4efcbf0e1cbd73e5c6404094ec0b25fa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:d8:a3:25:ca:35:82:2b:da:dd:87:0f:01:
62:80:c5:69:22:e3:b7:7c:21:9d:5d:f4:ff:49:e6:
0f:eb:de:39:b8:c6:50:36:d3:6e:34:9b:b1:f6:70:
ad:d0:e0:42:bc:52:2a:30:f3:cd:25:23:9f:8e:f2:
1c:ba:ee:a1:77:11:d9:2c:b8:c2:4a:93:e0:d1:e5:
58:6c:84:a6:70:cc:4e:c6:8a:66:91:e9:40:31:d5:
d0:d9:bc:f3:7d:c4:76:9b:2b:71:5b:9b:84:2d:f7:
42:4b:ed:d2:5d:80:ef:d4:28:04:ad:47:db:0c:86:
31:d8:fa:08:25:e6:11:09:71:42:13:5c:8e:12:14:
85:57:86:3d:47:f2:cd:68:41:f5:86:71:5d:c0:9a:
13:53:aa:ab:b0:03:89:1c:f4:83:2b:3a:07:1e:bb:
f5:7e:df:7c:ba:91:e2:cb:56:93:65:78:71:86:28:
e5:94:e8:83:e7:66:f2:55:6e:44:79:c8:49:1f:ff:
fb:b3:42:46:93:cd:b5:d6:36:93:5a:19:90:0e:99:
35:3e:0c:d5:fc:a5:51:c1:fb:14:26:5a:20:a1:8b:
a2:06:1a:67:c2:2d:c7:56:38:db:17:f7:79:3f:30:
25:30:cb:c9:bc:3b:05:a8:37:e6:98:9e:ff:dc:9d:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:EF:4E:FC:BF:0E:1C:BD:73:E5:C6:40:40:94:EC:0B:25:FA:71
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P9jvTvy_Dhy9c-XGQECU7Asl-nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.195.0-5.175.196.255
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:d4:25:f9:17:a6:47:af:37:38:e8:c7:33:5e:d4:91:8e:96:
7d:b5:7c:7a:a3:c3:40:30:58:38:5b:59:8f:1d:56:7d:42:6d:
f2:b5:14:b6:fa:9c:bb:8f:87:78:a7:c0:dc:6d:5c:ab:c0:11:
08:1b:e3:3e:1b:79:87:ba:16:66:b1:93:10:8d:05:44:86:ae:
38:5a:df:57:f4:15:35:0e:eb:22:54:4d:b6:e8:0c:fc:e3:5b:
7a:fb:bf:b2:f3:0b:ff:d0:8e:a0:9e:e8:83:ee:f9:a9:e4:90:
b3:1b:20:34:6a:c6:49:8a:da:25:66:7b:05:a5:d3:ad:d8:cb:
c1:c9:ba:17:bf:e2:22:25:b7:62:0b:05:f0:39:3f:72:36:bb:
50:cc:d4:92:16:ea:8a:87:0c:eb:5d:76:b1:48:bc:3d:4c:c3:
7c:c1:92:d5:e9:77:f6:43:8f:6a:4e:c3:9b:e4:e3:d4:f1:17:
6d:6f:d3:60:82:c4:99:c9:e3:86:3f:44:97:43:79:58:67:d3:
5a:0e:f4:c4:49:26:2d:85:19:86:63:62:cd:a4:e7:c5:85:7f:
79:d8:4c:c3:36:2c:b6:ff:0a:8f:fb:1d:0f:d2:af:57:35:c6:
dd:ec:d1:3b:a3:88:a0:08:0b:32:08:2d:90:1d:73:f9:32:65:
9d:f9:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:45 2025 by rpki-client