Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XJOwJ1PJKZUU13LJbFaRthF0AO0.roa
File: XJOwJ1PJKZUU13LJbFaRthF0AO0.roa (raw, json)
Hash identifier: dNQwSCpIgqjMUShVN+jwSwnNyBw6IS5vEiU2B1m9q90=
Subject key identifier: 5C:93:B0:27:53:C9:29:95:14:D7:72:C9:6C:56:91:B6:11:74:00:ED
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01970CA8231731BCD717427BB074A48D7899
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XJOwJ1PJKZUU13LJbFaRthF0AO0.roa
Signing time: Mon 26 May 2025 12:53:54 +0000
ROA not before: Mon 26 May 2025 12:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.193.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 04:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:a8:23:17:31:bc:d7:17:42:7b:b0:74:a4:8d:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 26 12:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c93b02753c9299514d772c96c5691b6117400ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:a9:fc:c0:aa:7a:90:7a:0f:89:03:56:29:
9a:4c:4a:31:a6:51:86:37:17:b0:cb:44:d9:ef:ba:
84:29:c5:b6:2a:2a:47:55:44:f0:f4:1a:15:b1:af:
66:1a:ce:f3:e8:a1:e3:88:33:85:4a:f2:6c:c4:f7:
67:59:e6:c8:65:cf:27:54:d9:1d:1b:93:51:6e:e5:
2c:d0:1a:44:dd:f6:b9:65:61:b4:20:a6:a0:9b:57:
12:89:e7:4e:cd:51:34:37:6d:f5:fa:37:19:66:c6:
85:98:f4:52:fc:e1:27:13:9a:ef:56:3e:7f:72:e7:
54:30:55:42:34:53:00:42:13:8f:d1:4e:96:27:08:
1b:f1:30:4b:85:92:fd:c9:9d:c9:57:12:e0:4e:0a:
67:51:21:44:43:79:0d:aa:0e:d5:62:f3:62:3b:f7:
1a:b0:c6:b7:5a:92:c4:f2:b5:32:d5:7b:b6:9e:f5:
8a:71:68:fb:b0:20:75:17:c3:f5:82:a4:d8:1c:33:
d8:0f:75:2b:f9:09:19:8c:3a:b7:df:7a:83:c3:f2:
f3:d1:2f:fa:ba:e3:90:b1:51:a7:fe:94:ef:63:49:
f1:78:e8:08:33:d7:c0:32:42:10:86:ef:9d:88:46:
c6:58:f0:04:2b:0b:9e:34:42:2e:8c:78:85:b4:57:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:B0:27:53:C9:29:95:14:D7:72:C9:6C:56:91:B6:11:74:00:ED
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XJOwJ1PJKZUU13LJbFaRthF0AO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.193.0/24
5.175.196.0/24
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:3a:6f:bb:e2:c4:63:12:83:02:c8:45:4c:4e:03:7b:fb:0c:
62:6e:15:a0:e4:23:ac:98:df:cf:87:46:f0:57:4e:4a:81:a8:
62:8d:ae:aa:12:d3:4d:07:79:92:7d:f4:07:80:61:3c:12:48:
10:26:9c:62:01:41:91:8c:40:2a:b3:0b:c1:05:48:10:d8:15:
31:5e:82:42:d9:72:f6:f0:fa:64:96:79:06:50:27:ff:f5:05:
98:4c:77:43:98:11:e4:f0:a1:53:80:68:72:34:28:7f:35:d3:
3c:d4:9e:da:07:d4:46:dc:8c:dd:5c:c4:3e:c7:8a:02:fb:bc:
34:94:66:45:cf:43:f8:1b:7e:22:c9:81:23:ac:91:a5:da:68:
53:a3:88:42:b2:2c:c3:9c:82:f0:7b:a6:b6:ab:79:7e:1a:8a:
c3:69:28:3c:be:b9:fe:be:0e:30:89:86:5f:ff:d9:6b:a5:ea:
18:5d:33:7d:ed:79:81:26:2b:f2:e9:9f:35:e3:37:b4:3d:90:
df:c6:02:11:d1:7d:3a:23:1c:87:d3:ef:3d:df:b4:30:37:5e:
5d:cf:c2:0d:b3:60:55:ce:2e:85:d7:bf:55:f9:7e:87:3d:cd:
c8:ad:e6:c4:3a:e7:25:13:11:b2:f6:03:75:b8:80:95:bc:6e:
97:cb:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:51 2025 by rpki-client