Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RtrQuS6tEWwT1DM16aqGEb0_xvk.roa
File: RtrQuS6tEWwT1DM16aqGEb0_xvk.roa (raw, json)
Hash identifier: mOD/8gJiAOOgMQNvewowhw13fWqh+KtMZrMb/3/h6qQ=
Subject key identifier: 46:DA:D0:B9:2E:AD:11:6C:13:D4:33:35:E9:AA:86:11:BD:3F:C6:F9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019664946B238CA5A8CAE799023DE1214EA1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RtrQuS6tEWwT1DM16aqGEb0_xvk.roa
Signing time: Wed 23 Apr 2025 21:36:10 +0000
ROA not before: Wed 23 Apr 2025 21:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.231.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 21:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:94:6b:23:8c:a5:a8:ca:e7:99:02:3d:e1:21:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 23 21:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46dad0b92ead116c13d43335e9aa8611bd3fc6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:3c:77:69:a9:9f:4d:6f:7f:a8:2d:49:02:
00:80:44:c9:24:84:f8:b7:bb:75:06:a9:aa:f6:30:
0c:96:0f:3c:0c:4e:66:85:f8:be:1e:28:9d:1d:23:
e6:0b:ca:5f:14:df:0e:80:fb:ed:f9:fc:33:64:13:
d3:ac:ac:2f:a1:99:c2:4d:78:8b:82:7e:10:96:b7:
5e:00:94:75:02:4f:b9:a5:ec:e2:4a:49:13:40:35:
2a:25:22:6f:c2:42:0a:86:30:3a:cc:1f:c5:a0:f4:
57:59:da:2d:b3:ed:af:af:5e:a8:95:9a:5e:98:66:
28:0f:20:13:0c:5c:ab:a6:35:fd:af:5d:39:36:d8:
9c:eb:4f:de:6e:2d:09:c0:14:40:4e:21:a7:92:9b:
73:f1:16:1b:f8:55:ef:76:b9:af:05:4e:fb:97:24:
bb:2d:d8:8b:d9:ae:6d:62:d9:92:dd:82:9c:46:4a:
9e:3e:3d:e7:4a:65:9a:c8:f8:a0:94:c2:df:44:d0:
28:0a:03:25:c0:9a:a6:18:50:cc:71:26:83:78:2a:
a1:dd:8b:40:f7:de:24:ec:16:a7:73:85:73:55:f1:
12:52:61:24:3f:9a:2c:64:0c:a3:4a:df:2c:18:ba:
d3:8b:e8:d6:8d:33:a1:31:cc:e4:9c:ec:c4:57:a2:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:D0:B9:2E:AD:11:6C:13:D4:33:35:E9:AA:86:11:BD:3F:C6:F9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RtrQuS6tEWwT1DM16aqGEb0_xvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
39:b8:f6:1d:4f:87:75:45:f1:88:a7:92:23:72:20:90:79:91:
3c:b6:6e:8d:90:aa:78:21:70:28:d1:03:7a:94:58:c3:5c:9d:
e7:94:f7:59:f7:da:80:1f:04:b0:30:7c:15:18:93:03:4d:71:
96:c1:0d:90:f5:6b:e0:30:9e:bb:11:a1:f0:e9:55:b4:e7:f5:
d1:d2:34:1f:5f:91:f1:35:12:25:61:20:8b:54:86:7e:ce:9c:
14:7b:ef:17:3a:e1:6b:76:a9:b9:93:3b:45:10:8d:94:a0:b7:
b6:7f:eb:57:bf:16:60:1b:94:8a:ae:1a:63:54:6b:2d:90:d1:
21:f7:aa:ee:13:70:e9:32:98:c3:42:a8:f6:20:cc:df:62:f9:
ca:d0:e6:98:17:67:81:47:f4:b1:e7:47:6d:24:de:63:9a:e8:
dc:e1:39:ca:92:db:84:37:19:d8:8c:c5:73:76:cd:5d:a0:0f:
2c:11:42:fd:e4:55:85:c3:d5:e9:2d:9a:eb:24:76:92:24:7c:
97:50:57:3a:f3:40:33:fd:4f:37:fb:a9:12:a1:a5:54:df:99:
75:1f:c7:11:e7:cc:cf:09:db:9c:36:9d:d2:72:bb:a1:95:8c:
9c:31:45:15:24:e4:73:8c:84:87:95:75:84:a0:95:36:2b:2c:
99:ed:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:53 2025 by rpki-client