Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SVQITBAGTONW8gQHWUBm0z-Gmi8.roa
File: SVQITBAGTONW8gQHWUBm0z-Gmi8.roa (raw, json)
Hash identifier: gcKaSZ9HAgYebsYhAl/M6GAcrl484YJAMgWM5oPTP9I=
Subject key identifier: 49:54:08:4C:10:06:4C:E3:56:F2:04:07:59:40:66:D3:3F:86:9A:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196230D8A3046224A43DBB967AE4950F155
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SVQITBAGTONW8gQHWUBm0z-Gmi8.roa
Signing time: Fri 11 Apr 2025 04:13:31 +0000
ROA not before: Fri 11 Apr 2025 04:13:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.93.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:0d:8a:30:46:22:4a:43:db:b9:67:ae:49:50:f1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 04:13:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4954084c10064ce356f20407594066d33f869a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:39:08:58:06:34:c2:e7:de:0e:cb:79:0b:
f2:0d:01:b0:72:4d:91:91:3e:64:c0:71:65:42:20:
60:59:be:2c:e1:75:9f:ab:30:d2:f0:9f:0b:0d:55:
be:39:36:1f:22:70:45:2d:a7:5b:5a:0f:56:58:90:
af:52:f6:0b:f8:ee:85:97:e1:c2:19:87:c7:08:55:
94:50:73:45:2d:e3:5b:07:1a:63:df:70:f7:48:69:
f0:22:59:4c:88:f4:77:38:57:c9:bd:ce:13:d6:90:
53:82:4c:ec:ad:07:6a:c8:b8:5e:00:27:9a:c5:60:
03:2c:c8:a3:21:74:98:54:43:78:6b:25:ff:bb:15:
0d:f2:dd:37:aa:c8:f5:4d:84:88:1e:a7:6d:d1:bd:
81:a6:ac:29:dc:13:c6:8a:7c:5a:c7:7b:5e:8d:01:
49:0e:e2:0f:fe:03:fb:34:13:fd:0d:68:fb:0a:4e:
52:e0:12:d4:29:ed:7b:58:ef:aa:80:0d:f5:ee:72:
86:50:78:20:2a:22:e3:68:05:8e:e8:06:c5:c3:13:
df:51:0a:8f:59:ac:c0:dc:49:4b:9d:ac:ba:ea:e7:
48:15:73:ea:37:ae:75:0a:03:0c:92:25:c5:1a:a7:
93:20:d0:b7:7f:02:36:dc:5d:ef:fb:ee:6a:32:93:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:08:4C:10:06:4C:E3:56:F2:04:07:59:40:66:D3:3F:86:9A:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SVQITBAGTONW8gQHWUBm0z-Gmi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
03:9a:7d:16:b4:e7:91:5c:45:e4:5d:10:41:dc:33:ed:2f:1c:
4d:a5:e9:c9:60:a3:f1:47:5e:33:14:f3:85:79:0b:64:4d:08:
89:d0:4c:88:29:8c:ec:4b:6e:0d:6c:c9:f7:21:00:a9:84:f2:
70:79:91:4d:34:f3:ce:e5:8a:93:24:3c:5f:f2:f7:43:f9:06:
77:20:03:11:2b:7c:78:ab:be:e6:2d:37:af:33:15:9f:81:0f:
a8:f2:79:db:9f:af:81:33:f3:63:62:5a:64:62:b6:7b:2b:81:
fe:c6:22:8a:6b:50:2d:2b:25:36:fe:b8:82:cb:b5:66:69:df:
01:9d:90:6e:10:e5:0d:55:b4:f4:75:d2:4a:c6:76:17:58:73:
35:31:90:55:ba:a7:fb:37:44:3c:83:f1:49:ac:ef:82:2c:2a:
21:95:02:83:8f:26:54:ca:28:a1:c0:d2:8e:b9:73:9d:6e:20:
9a:0f:dc:0d:b8:6b:a2:ab:68:6d:a8:89:44:e3:5f:ba:81:8e:
45:49:bc:78:ea:27:d1:ed:4b:ae:2c:55:31:06:5f:ce:cf:66:
01:bf:40:bd:fc:5d:20:b6:db:fa:0b:e7:b6:ff:af:2e:5c:53:
ac:2e:86:fb:99:f8:8d:1c:d1:eb:5e:37:d2:99:92:8b:01:bf:
1d:f4:0c:6d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgISAZYjDYowRiJKQ9u5Z65JUPFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDExMDQxMzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTU0MDg0YzEwMDY0Y2UzNTZmMjA0MDc1OTQwNjZkMzNmODY5YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxU5CFgGNMLn3g7LeQvyDQGwck2R
kT5kwHFlQiBgWb4s4XWfqzDS8J8LDVW+OTYfInBFLadbWg9WWJCvUvYL+O6Fl+HC
GYfHCFWUUHNFLeNbBxpj33D3SGnwIllMiPR3OFfJvc4T1pBTgkzsrQdqyLheACea
xWADLMijIXSYVEN4ayX/uxUN8t03qsj1TYSIHqdt0b2Bpqwp3BPGinxax3tejQFJ
DuIP/gP7NBP9DWj7Ck5S4BLUKe17WO+qgA317nKGUHggKiLjaAWO6AbFwxPfUQqP
WazA3ElLnay66udIFXPqN651CgMMkiXFGqeTINC3fwI23F3v++5qMpP5gQIDAQAB
o4IDCTCCAwUwHQYDVR0OBBYEFElUCEwQBkzjVvIEB1lAZtM/hpovMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU1ZRSVRCQUdUT05XOGdRSFdVQm0wei1HbWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHQYIKwYBBQUHAQcBAf8EggEMMIIBCDCB0wQCAAEwgcwD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr4oDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQA
Ba/hAwQABa/oAwQABa/rMAwDBAAFr+8DBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYD
BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD
BAde+YADBAJf1yADBASyEpADBAK5DZwDBAK5L4wDBAC5eUUDBAC5eUcDBADBHPsD
BAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMFAyoBvUAD
BQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAA5p9FrTnkVxF5F0QQdwz
7S8cTaXpyWCj8UdeMxTzhXkLZE0IidBMiCmM7EtuDWzJ9yEAqYTycHmRTTTzzuWK
kyQ8X/L3Q/kGdyADESt8eKu+5i03rzMVn4EPqPJ525+vgTPzY2JaZGK2eyuB/sYi
imtQLSslNv64gsu1ZmnfAZ2QbhDlDVW09HXSSsZ2F1hzNTGQVbqn+zdEPIPxSazv
giwqIZUCg48mVMooocDSjrlznW4gmg/cDbhroqtobaiJRONfuoGORUm8eOon0e1L
rixVMQZfzs9mAb9AvfxdILbb+gvntv+vLlxTrC6G+5n4jRzR61430pmSiwG/HfQM
bQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:55 2025 by rpki-client