Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcdT2yjyNKgEaCMRPtlBMkERHbo.roa
File: PcdT2yjyNKgEaCMRPtlBMkERHbo.roa (raw, json)
Hash identifier: MT1+lkahn6zMWQeLCoUT5oGtc6uLg6dBnfL7nJLiId8=
Subject key identifier: 3D:C7:53:DB:28:F2:34:A8:04:68:23:11:3E:D9:41:32:41:11:1D:BA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196DD5E5AAB590A1123FCE44D9BD31CAE4B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcdT2yjyNKgEaCMRPtlBMkERHbo.roa
Signing time: Sat 17 May 2025 08:31:10 +0000
ROA not before: Sat 17 May 2025 08:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.49.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
83.243.86.0/24 maxlen: 24
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.167.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.70.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.147.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 10:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:5e:5a:ab:59:0a:11:23:fc:e4:4d:9b:d3:1c:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 17 08:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dc753db28f234a8046823113ed9413241111dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:6d:e1:fe:28:87:da:b9:4c:1c:ac:35:f0:
97:1d:4b:ed:ac:9b:e7:1f:74:35:13:21:17:9d:7f:
0d:a3:7e:8d:c0:30:72:91:97:5b:c5:c7:ce:7f:dd:
90:78:c4:b6:6b:9b:b6:00:50:68:64:7f:af:de:3e:
01:3c:b0:26:64:d6:d3:bb:3f:1d:ad:b2:65:eb:56:
1e:19:52:cd:60:69:33:54:aa:a0:c0:2f:81:bf:69:
d6:1d:78:0a:b5:24:6f:ad:a5:8e:73:80:e8:c1:d7:
b2:3e:60:bd:e4:74:33:e0:85:bc:e4:34:bc:e8:8e:
84:3a:1c:b8:f1:90:f9:9b:61:af:8c:f2:38:61:56:
bc:68:94:0d:65:90:f5:07:0e:ac:32:e3:f0:82:3d:
e9:78:88:df:6a:4b:77:52:e5:32:69:73:00:89:e3:
21:63:1b:e5:c1:9b:61:56:aa:f4:de:de:d8:a6:0c:
51:6f:57:5b:cf:1c:7a:dd:0f:9f:06:d7:c8:73:da:
48:e5:70:58:85:02:a6:5a:11:41:53:ed:c0:c3:77:
2a:53:d8:0f:30:00:29:79:2d:17:80:ab:8b:2e:48:
0b:fc:38:e4:63:ef:8b:12:aa:b3:09:bd:17:27:cf:
d6:e4:f6:19:5c:ca:72:75:f9:ee:bc:57:e6:18:0d:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:53:DB:28:F2:34:A8:04:68:23:11:3E:D9:41:32:41:11:1D:BA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcdT2yjyNKgEaCMRPtlBMkERHbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.204.0/23
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e9:47:1d:89:56:49:b4:f1:ee:0c:cd:be:30:31:a8:f8:01:fb:
fb:03:ce:30:d9:40:65:4d:44:b1:0a:d6:a6:b4:53:3e:4a:00:
dc:5c:03:9f:14:be:3d:fa:37:61:48:d6:30:4a:92:25:f6:20:
36:6f:7c:84:f5:2f:40:22:e0:68:19:60:8e:b7:84:6d:d9:7d:
36:f6:06:02:77:59:9a:a7:35:4b:6e:55:ce:88:18:a8:45:7f:
ec:2c:ad:2b:ae:b5:dd:05:52:59:ac:4d:b2:f6:ad:52:1a:89:
01:19:35:97:67:69:2f:9c:5b:92:7e:bc:8e:a7:28:94:8c:19:
a9:73:26:20:f7:4b:c4:7a:51:86:f6:c0:38:02:ae:5d:95:6c:
eb:1f:f0:fd:1c:b1:a3:ba:2f:83:a8:df:ed:4a:05:01:b2:19:
e8:e1:12:2a:c9:eb:89:40:48:c5:9a:24:7e:0a:3f:ac:e0:fe:
62:57:ea:db:2b:bd:20:97:bc:ac:f2:39:4f:0f:71:9c:5a:4c:
0e:22:3d:95:b3:a7:7a:19:ac:46:1a:29:d7:cd:de:6f:1f:36:
bc:78:9f:34:59:92:89:82:06:a1:7d:a5:a6:7b:08:87:76:e6:
df:63:84:54:2e:99:7a:48:7d:c5:f6:7b:d7:78:37:31:34:c8:
9d:5d:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:34:05 2025 by rpki-client