Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZvhEOmDGJiV3Qu7vqT59nzOUkf4.roa
File: ZvhEOmDGJiV3Qu7vqT59nzOUkf4.roa (raw, json)
Hash identifier: RS7bg6ueEF4AXlHNX2icisITImWvvJVq1f6+ki27fLk=
Subject key identifier: 66:F8:44:3A:60:C6:26:25:77:42:EE:EF:A9:3E:7D:9F:33:94:91:FE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019609479B3F328DEDD775B1149EE3D08F53
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZvhEOmDGJiV3Qu7vqT59nzOUkf4.roa
Signing time: Sun 06 Apr 2025 04:06:49 +0000
ROA not before: Sun 06 Apr 2025 04:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Apr 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:47:9b:3f:32:8d:ed:d7:75:b1:14:9e:e3:d0:8f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 6 04:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f8443a60c626257742eeefa93e7d9f339491fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:57:18:7c:7d:9d:93:b4:a7:cf:a9:6b:1c:
b3:47:c8:9d:e3:8e:93:c0:c0:6f:64:7a:03:6c:f0:
0e:25:0e:29:09:99:2e:c1:e1:3c:36:7a:e9:39:74:
71:6d:6f:2c:9f:42:93:86:d1:4b:c4:57:8c:70:b6:
61:56:82:c9:30:8d:01:c1:0b:78:62:46:1a:f3:23:
a6:be:76:05:bd:e3:4e:e7:15:28:5e:dd:42:44:77:
ef:8d:3e:92:21:dc:93:d0:be:d2:36:62:74:fa:29:
96:ee:40:71:cb:0f:b9:a3:96:7f:aa:5e:d3:cb:e8:
a0:28:84:cb:93:21:b8:eb:07:0c:c7:1d:bc:dc:0c:
21:81:f1:57:49:09:1d:58:0f:3f:84:22:26:be:2b:
8a:f5:15:f2:61:ec:97:67:dd:4b:ab:a8:52:31:f7:
cf:33:4e:65:54:9d:4a:28:10:9b:fa:47:a6:b6:76:
64:67:e2:2b:68:88:ef:05:4f:76:b1:34:e1:84:8f:
ed:7d:a7:40:e8:f7:dd:41:9e:40:af:9f:1b:ce:2d:
d0:0b:06:0c:9d:8e:0e:fb:4b:39:a7:6e:7f:29:c8:
e2:30:82:9b:8d:ad:6e:90:ac:cc:f7:47:2d:cf:c1:
cb:f1:69:f7:cf:e9:66:5f:70:b9:bd:af:ae:e9:5c:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:44:3A:60:C6:26:25:77:42:EE:EF:A9:3E:7D:9F:33:94:91:FE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZvhEOmDGJiV3Qu7vqT59nzOUkf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
eb:c9:2d:9d:d3:52:e9:be:d4:c5:f1:09:32:52:ae:5e:2c:18:
b1:1f:04:c0:ee:28:3e:b4:e5:db:8f:2c:79:ae:3b:a9:4f:f4:
66:b9:6c:bf:82:e6:dc:06:04:e9:de:33:5b:84:61:a2:b1:96:
4e:47:05:ea:16:b9:24:23:88:05:8b:7e:43:26:2f:b3:e6:32:
7d:d8:d6:0f:33:97:71:0b:5b:01:96:0c:4c:0a:c3:1f:53:f8:
a6:99:aa:cd:d5:04:2a:e6:4a:f5:31:91:b0:27:8c:f8:c5:13:
1c:d3:91:42:5b:31:4e:7b:bf:d9:05:f6:00:ad:8a:2a:13:39:
56:f9:f4:f6:5e:81:d2:29:46:10:bd:43:24:b2:3b:62:a4:1c:
7b:b8:8d:60:05:39:5f:86:5b:66:a7:3f:2d:c6:a9:8c:76:50:
cc:14:d5:13:13:c6:ad:49:a6:d3:79:22:ed:90:61:86:55:f8:
89:c3:4c:c0:8c:fa:61:59:02:bb:de:0a:c4:56:d0:c6:74:9f:
fb:a8:ff:1c:de:77:e0:e8:15:51:18:84:62:8a:cf:e3:c2:9b:
0d:59:cd:54:35:aa:89:62:24:e0:a9:7b:ed:22:ef:ed:d4:80:
45:28:c0:0d:3c:e4:7b:1e:7d:65:e7:f7:6d:a3:99:40:8e:72:
51:60:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:05 2025 by rpki-client