Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XOHVcejLuVD-rcs-3QzSRqaoMC0.roa
File: XOHVcejLuVD-rcs-3QzSRqaoMC0.roa (raw, json)
Hash identifier: RyBxGbT9UP2yVWbP4zjjjSLHrIaSaFlxsruj8I4qJHI=
Subject key identifier: 5C:E1:D5:71:E8:CB:B9:50:FE:AD:CB:3E:DD:0C:D2:46:A6:A8:30:2D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01970FF8D5CBCDB2F7BDD1ECEBC3E589BF4A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XOHVcejLuVD-rcs-3QzSRqaoMC0.roa
Signing time: Tue 27 May 2025 04:20:55 +0000
ROA not before: Tue 27 May 2025 04:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.193.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.197.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 14:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:f8:d5:cb:cd:b2:f7:bd:d1:ec:eb:c3:e5:89:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 27 04:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce1d571e8cbb950feadcb3edd0cd246a6a8302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:88:bf:17:de:55:73:fc:bd:e1:5d:90:54:
df:03:42:b4:80:d5:7a:4f:9a:27:4c:0b:ee:73:ec:
89:4b:6c:0e:32:6a:7b:c0:47:72:f3:0b:73:65:7c:
32:3a:c6:12:be:b1:d9:da:62:5f:bf:b0:be:ab:ae:
c9:41:2a:6d:44:7b:57:6f:98:4f:66:4e:8c:b5:91:
de:64:f3:bc:fc:76:bd:c2:13:e1:55:15:d2:72:07:
0b:64:77:ca:a3:a4:26:8b:fe:74:87:b3:3b:f4:06:
b2:63:7f:4f:1f:10:d4:48:f6:4b:fe:79:95:c6:3b:
8e:25:d4:ba:cf:85:e5:68:99:24:a1:11:f3:d5:0d:
3c:8f:a6:62:e7:da:96:0d:f3:9d:d0:24:be:fd:1c:
8e:ff:0a:82:66:e1:c2:43:65:1f:ef:3f:48:96:5b:
8f:5d:10:e0:90:03:57:99:88:85:0b:89:ba:fd:e1:
44:ac:ac:c1:fb:09:04:ad:37:f6:84:d1:48:f2:a9:
d5:e8:5e:2c:28:e3:ac:5f:c3:f2:e1:f7:2c:83:3f:
00:26:46:26:20:a3:1a:36:27:f8:8e:24:98:ba:da:
14:93:56:75:56:94:c6:48:37:f5:4c:76:dd:53:b6:
f0:e9:54:59:fb:ce:bc:0c:08:38:5d:7e:d7:f3:84:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:D5:71:E8:CB:B9:50:FE:AD:CB:3E:DD:0C:D2:46:A6:A8:30:2D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XOHVcejLuVD-rcs-3QzSRqaoMC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.193.0/24
5.175.196.0/22
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
d9:7e:e1:35:f4:63:b7:c4:cd:62:23:32:1c:a6:9e:c1:88:13:
90:69:a3:d3:c0:1a:ef:8e:d7:81:2d:9a:2a:48:a8:73:0c:fa:
57:95:18:1b:80:57:75:bd:ed:c2:bf:c5:f4:01:06:3f:9e:5c:
4a:ad:5f:55:78:bc:44:d2:6e:9f:24:92:97:21:b8:b8:cb:6b:
13:7e:cd:bf:29:8d:25:79:45:80:c9:08:fb:58:a9:73:50:ca:
8a:94:e5:40:ef:39:52:ea:bc:ef:d0:31:a8:89:9a:f3:b8:33:
63:19:6f:a7:76:a6:75:84:a0:fe:f6:c8:fb:5c:27:b7:5e:a8:
00:bc:04:d0:d9:2c:89:97:92:23:0d:36:94:3d:cd:67:86:f5:
be:64:26:37:a4:cd:e6:e7:4e:79:62:35:d7:16:1e:88:c6:31:
38:ea:74:7e:58:aa:dd:7f:bf:2c:5c:fa:e8:4d:3b:35:5f:bc:
9a:01:e3:ba:e2:37:bb:0c:7d:09:e1:15:9d:53:a0:ec:97:3d:
c2:8e:c6:84:b6:72:ce:11:f5:33:78:cc:b3:03:2e:ff:e5:8f:
e1:05:7c:94:c7:dd:74:2b:c6:d0:18:6f:5c:ab:35:3f:c0:d1:
c3:cd:24:c0:22:c3:d3:55:97:8e:8e:2c:3b:03:0b:fa:80:50:
d9:fd:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:47:58 2025 by rpki-client