Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xx891kp30GnWhnMzOieKh47JIQ8.roa
File: Xx891kp30GnWhnMzOieKh47JIQ8.roa (raw, json)
Hash identifier: 9apUyB9/vKIoMVGdYVUrDzunjf8X2Rpma+1XQg9v4Lk=
Subject key identifier: 5F:1F:3D:D6:4A:77:D0:69:D6:86:73:33:3A:27:8A:87:8E:C9:21:0F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01968248CA93DFA7A19D5A77757E74EEC42B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xx891kp30GnWhnMzOieKh47JIQ8.roa
Signing time: Tue 29 Apr 2025 16:02:10 +0000
ROA not before: Tue 29 Apr 2025 16:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.21.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Apr 2025 23:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:48:ca:93:df:a7:a1:9d:5a:77:75:7e:74:ee:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 16:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f1f3dd64a77d069d68673333a278a878ec9210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:0a:9e:36:ac:d9:b7:78:a4:28:d5:41:d7:
be:ac:f4:77:5c:48:62:08:a7:5c:fa:36:94:d7:58:
b1:19:a4:84:66:9d:4d:6d:02:40:e1:a6:14:ce:8d:
44:f6:71:fb:10:8e:36:48:cc:f4:09:09:79:91:ac:
52:a5:7f:27:52:f3:0d:4c:d3:03:29:53:13:a3:67:
be:a2:1e:bf:d1:14:63:87:7f:6c:ef:ea:5e:4f:cf:
25:85:f7:3e:fe:2a:f4:cb:06:a3:e2:20:13:9f:54:
1e:30:ce:6e:4a:52:cb:32:0c:39:1f:3b:73:4c:fe:
44:bf:42:e0:e4:a2:f2:17:e2:0d:1b:46:39:a3:6a:
b4:fb:a2:4a:e0:42:0f:c9:e9:d0:23:38:6b:96:d1:
0a:ed:06:95:6c:a6:1e:f2:db:e1:05:e2:42:2a:a9:
6d:c4:1f:9f:25:1b:54:ab:ec:3f:5f:a6:cc:89:7c:
a4:9d:5b:d6:d2:6f:87:61:cf:3a:4b:3f:e2:df:aa:
8f:4e:07:eb:83:27:31:34:dc:fd:92:6e:15:e0:3c:
5e:fe:be:42:94:89:3f:a0:c4:64:e7:b3:78:27:d3:
a4:b1:27:6a:d9:a4:5f:88:1c:ff:e1:73:f2:cb:bb:
19:cc:53:67:79:e8:fe:32:ee:88:43:7c:ec:ee:54:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1F:3D:D6:4A:77:D0:69:D6:86:73:33:3A:27:8A:87:8E:C9:21:0F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xx891kp30GnWhnMzOieKh47JIQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:73:15:78:b6:cb:41:ec:53:e4:af:2c:f3:ca:33:ab:9f:66:
9e:78:0b:24:34:62:b1:30:0e:e0:f3:57:c8:25:09:01:ca:a8:
81:ac:00:5f:a1:39:29:ea:0a:ce:8e:3b:85:30:ee:d4:fd:e5:
30:a9:43:4a:f8:6c:f5:7f:11:91:9a:b7:03:9d:23:a4:71:55:
e0:ed:9c:8d:fd:be:a8:b4:18:63:9a:51:1c:84:67:f9:67:e3:
8c:57:a9:88:cd:92:61:a4:1f:d2:47:08:f3:58:aa:83:0e:02:
23:fa:53:25:2f:43:78:eb:2d:e1:69:f0:72:b4:84:23:fa:4c:
5e:20:8c:11:a7:37:85:38:90:c6:ae:26:57:21:f3:4d:5a:e9:
33:d3:e3:17:f0:7b:b2:c8:40:78:23:a0:13:eb:86:3a:9e:aa:
d9:75:6e:73:68:ba:96:62:53:6d:45:79:dc:f8:45:17:11:f7:
2c:2e:37:73:a3:e7:80:8c:01:fc:85:f3:03:6f:f3:38:25:06:
e4:00:8f:72:96:22:42:4a:f6:65:f5:d3:ed:f9:f4:10:bc:ab:
74:c8:4e:34:7f:2b:5e:08:28:c5:da:97:9d:50:c0:77:ac:11:
1d:25:40:76:ee:4c:9c:c6:68:94:e1:74:72:1a:46:08:58:1a:
22:2e:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:11:39 2025 by rpki-client