Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFnDfCCN4nnws-kb_6sLWfwO5AQ.roa
File: aFnDfCCN4nnws-kb_6sLWfwO5AQ.roa (raw, json)
Hash identifier: V3H1xDUAR+wwYfqHLzrEAbHU/+KHANhlqqQ5rTgDCZs=
Subject key identifier: 68:59:C3:7C:20:8D:E2:79:F0:B3:E9:1B:FF:AB:0B:59:FC:0E:E4:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01960DEEB5DFF7763A8D63E59B3803F1A6AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFnDfCCN4nnws-kb_6sLWfwO5AQ.roa
Signing time: Mon 07 Apr 2025 01:47:49 +0000
ROA not before: Mon 07 Apr 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Apr 2025 18:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:ee:b5:df:f7:76:3a:8d:63:e5:9b:38:03:f1:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 7 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6859c37c208de279f0b3e91bffab0b59fc0ee404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:9a:72:f6:2d:e3:83:be:f0:c9:e1:f3:f7:
bb:95:93:56:dd:ac:1b:cf:fd:ea:74:9e:ef:7a:29:
55:84:de:fb:4f:43:54:7a:e6:25:f9:e4:6c:cb:53:
3c:b7:16:b1:cc:28:d5:51:6a:2d:9b:33:a8:0d:d9:
e2:2d:15:97:f7:29:7a:e3:31:31:4b:b9:41:99:da:
84:e2:5f:73:a3:40:6b:dc:cf:23:56:27:b8:bc:25:
08:97:53:12:7f:9d:69:b7:7d:1c:73:b7:5c:a2:6c:
eb:e8:a2:c2:f0:f5:56:a1:d1:20:f6:db:15:91:85:
67:af:be:25:a0:b9:13:08:3f:45:40:8d:08:5d:af:
bf:57:4b:cf:c9:c4:5c:8b:41:c4:37:79:fa:60:24:
13:61:f3:07:54:b8:14:3b:4f:cc:52:5a:5d:c6:9e:
3a:ec:d8:17:c0:cc:b1:97:57:00:64:be:a7:e6:36:
9e:62:ec:1d:39:8e:d0:22:49:dd:a5:94:4e:55:a5:
f1:e0:a9:42:3d:26:15:f0:ee:c3:8a:ae:f9:e7:45:
7a:f5:e8:cc:2a:f5:d7:e5:1a:4f:56:53:5e:d8:4f:
ea:fe:f6:60:b2:2e:01:82:dd:bc:d6:22:27:f6:e4:
f0:d0:99:ec:84:6a:5f:1f:c6:81:f8:a0:95:76:df:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:C3:7C:20:8D:E2:79:F0:B3:E9:1B:FF:AB:0B:59:FC:0E:E4:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFnDfCCN4nnws-kb_6sLWfwO5AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:34:4b:e6:16:53:f7:bd:cb:2d:ff:00:84:93:ce:95:73:da:
20:d3:e6:03:50:40:3a:e3:11:32:82:c6:7d:ef:fb:b7:d1:c7:
54:4a:32:69:5d:b4:1a:9e:83:ef:e2:7d:e8:dc:cd:8e:32:7a:
d2:f5:59:fe:d9:a0:18:97:21:96:3c:28:36:8e:cf:ec:03:77:
70:8b:58:82:e7:3b:3b:c6:74:26:78:28:14:66:a7:cc:bb:8b:
bb:07:59:ae:79:16:2e:e6:fe:df:9c:b7:58:0d:7b:9b:63:20:
dd:4e:7b:ad:db:24:a3:ad:af:9e:bd:d3:4e:e7:63:67:e8:b5:
62:e6:a2:61:f3:d5:b6:8d:69:37:98:19:cd:e3:68:da:df:b5:
e2:39:23:d6:72:ae:9e:9f:60:fc:69:7b:9a:e8:4c:51:54:6e:
a3:c8:6c:c5:09:ca:18:60:b1:76:b0:f8:ea:73:1a:5f:2c:04:
2c:a1:9d:8b:e6:15:e0:5b:51:1c:81:30:a3:da:0f:43:22:bd:
95:89:3b:3a:ad:7a:e2:40:96:b9:7a:3a:cf:3e:87:d8:7d:1e:
5e:36:0b:27:16:ef:9d:b0:7b:11:ec:16:4e:0f:74:9c:3c:ef:
5f:84:bd:be:e6:9a:5d:03:a4:84:98:99:f6:69:76:ed:34:a1:
a9:aa:64:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:11 2025 by rpki-client