Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TiHq0IP1ee0Z0qYY6x-ANqKNWvQ.roa
File: TiHq0IP1ee0Z0qYY6x-ANqKNWvQ.roa (raw, json)
Hash identifier: aiO3EwNhJ72f3VV68UFz/Rdp7zoJzxfxMrd9sGPAnnQ=
Subject key identifier: 4E:21:EA:D0:83:F5:79:ED:19:D2:A6:18:EB:1F:80:36:A2:8D:5A:F4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01969425D94FCDF1B91C474BB215D0936AEA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TiHq0IP1ee0Z0qYY6x-ANqKNWvQ.roa
Signing time: Sat 03 May 2025 03:17:10 +0000
ROA not before: Sat 03 May 2025 03:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.21.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 May 2025 04:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:25:d9:4f:cd:f1:b9:1c:47:4b:b2:15:d0:93:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 3 03:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e21ead083f579ed19d2a618eb1f8036a28d5af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:51:4a:87:e3:e4:08:4f:c9:36:c9:68:08:
a5:92:de:78:a8:6b:ac:24:f2:d8:3f:7f:ad:83:38:
b0:bb:d8:47:d6:f9:17:93:96:67:39:77:e0:54:ec:
87:f0:c3:6a:67:ef:09:92:42:ec:77:84:cb:42:5a:
48:2b:9b:be:3a:c8:9a:9f:ca:0e:d7:2c:46:42:a4:
87:66:bd:09:24:d3:82:ca:a6:1f:a0:c9:b7:24:04:
82:a9:e5:4e:4d:70:6c:71:f3:9b:9a:4b:10:89:15:
d3:cb:5c:7d:b9:5d:02:d3:ec:62:46:5e:4f:a8:72:
e4:63:81:a5:fd:68:60:ca:b0:24:e0:48:63:aa:e1:
c5:94:69:8c:ee:01:eb:57:01:e3:c9:03:da:5c:96:
a8:a9:0b:50:e2:65:3c:90:ae:83:63:85:78:da:10:
24:56:9b:de:a0:10:f4:3d:ef:c0:ad:ea:9d:09:ce:
a9:4a:d8:99:c3:74:04:58:ae:29:8f:4f:b0:94:7f:
61:8e:ed:97:3a:be:d9:43:e7:ea:f6:06:02:03:fc:
aa:3c:55:ce:08:89:71:5e:8a:f2:41:11:1f:95:b6:
65:0b:33:0a:ad:30:bf:4d:99:28:fb:4a:b6:aa:9f:
39:15:5a:ed:00:fc:9a:4d:c5:ef:27:90:28:cb:c4:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:EA:D0:83:F5:79:ED:19:D2:A6:18:EB:1F:80:36:A2:8D:5A:F4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TiHq0IP1ee0Z0qYY6x-ANqKNWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
ec:54:ca:8d:dd:3a:b7:53:c0:40:a6:e6:27:d8:86:8c:f4:5a:
4d:84:48:77:0a:4a:48:fa:0e:60:86:00:e4:29:67:04:fe:9a:
c4:18:26:b9:d9:90:bf:4a:06:1d:e3:19:d0:67:15:bf:ad:c4:
63:57:85:26:42:f6:52:5b:24:dd:2b:67:b9:15:13:e9:a9:64:
5a:f3:09:f3:8c:6c:14:1b:15:3e:31:75:ad:3a:84:4f:2e:d7:
1a:c9:22:e4:34:aa:7d:b9:71:06:c2:e9:cf:f9:46:ad:5e:bc:
66:ba:ad:26:58:a1:d6:e2:1c:91:3d:f6:cf:7e:c3:c2:fb:72:
68:9d:4c:2c:6e:cb:7a:09:b8:b0:19:81:ed:34:75:4f:90:ba:
59:c5:99:21:88:82:95:9a:71:86:f9:e0:15:3d:df:50:72:e5:
8e:c2:f7:56:6b:ca:18:c9:32:56:13:a9:a1:c2:d6:fb:f6:8e:
f0:63:6f:fb:b5:c6:87:23:cd:57:bb:35:33:d9:e2:fc:f7:8e:
69:db:a4:d6:c7:c6:cc:e4:36:f2:3d:0e:39:23:58:cd:65:87:
6f:eb:d6:f8:99:c1:2a:56:0f:1a:eb:51:35:10:a1:cc:37:dd:
07:f6:95:db:e5:30:8a:b8:a8:79:10:f1:44:aa:d9:45:c0:f8:
83:d7:53:37
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISAZaUJdlPzfG5HEdLshXQk2rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTAzMDMxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTIxZWFkMDgzZjU3OWVkMTlkMmE2MThlYjFmODAzNmEyOGQ1YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTlRSofj5AhPyTbJaAilkt54qGus
JPLYP3+tgziwu9hH1vkXk5ZnOXfgVOyH8MNqZ+8JkkLsd4TLQlpIK5u+Osian8oO
1yxGQqSHZr0JJNOCyqYfoMm3JASCqeVOTXBscfObmksQiRXTy1x9uV0C0+xiRl5P
qHLkY4Gl/WhgyrAk4EhjquHFlGmM7gHrVwHjyQPaXJaoqQtQ4mU8kK6DY4V42hAk
VpveoBD0Pe/AreqdCc6pStiZw3QEWK4pj0+wlH9hju2XOr7ZQ+fq9gYCA/yqPFXO
CIlxXoryQREflbZlCzMKrTC/TZko+0q2qp85FVrtAPyaTcXvJ5Aoy8REZQIDAQAB
o4IDBTCCAwEwHQYDVR0OBBYEFE4h6tCD9XntGdKmGOsfgDaijVr0MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVGlIcTBJUDFlZTBaMHFZWTZ4LUFOcUtOV3ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDCBzwQCAAEwgcgD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA
Ba/oAwQABa/rMAwDBAQFr/ADBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYDBAZNWgAD
BANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6ADBAde+YAD
BAJf1yADBASyEpADBAK5DZwwDAMEArkvjAMEALkvjgMEALl5RwMEAMEc+wMEAcNu
DgMEBNlFoDAwBAIAAjAqAwUDKgAS2AMFAyoAGdADBQAqAM3AAwUDKgG9QAMFAyoC
B6ADBQMqAi/AMA0GCSqGSIb3DQEBCwUAA4IBAQDsVMqN3Tq3U8BApuYn2IaM9FpN
hEh3CkpI+g5ghgDkKWcE/prEGCa52ZC/SgYd4xnQZxW/rcRjV4UmQvZSWyTdK2e5
FRPpqWRa8wnzjGwUGxU+MXWtOoRPLtcaySLkNKp9uXEGwunP+UatXrxmuq0mWKHW
4hyRPfbPfsPC+3JonUwsbst6CbiwGYHtNHVPkLpZxZkhiIKVmnGG+eAVPd9QcuWO
wvdWa8oYyTJWE6mhwtb79o7wY2/7tcaHI81XuzUz2eL8945p26TWx8bM5DbyPQ45
I1jNZYdv69b4mcEqVg8a61E1EKHMN90H9pXb5TCKuKh5EPFEqtlFwPiD11M3
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:22 2025 by rpki-client