Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/atlQrqhZBVw5MdJlz2rVPSPe8aU.roa
File: atlQrqhZBVw5MdJlz2rVPSPe8aU.roa (raw, json)
Hash identifier: fZpRDsUDWkDu8RIaMHMvseCc9s7t2L9h3I7Xep+ik8g=
Subject key identifier: 6A:D9:50:AE:A8:59:05:5C:39:31:D2:65:CF:6A:D5:3D:23:DE:F1:A5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195FC10BCAC8D5FABC1D8B9990D3D11B0E1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/atlQrqhZBVw5MdJlz2rVPSPe8aU.roa
Signing time: Thu 03 Apr 2025 14:31:49 +0000
ROA not before: Thu 03 Apr 2025 14:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.8.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Apr 2025 04:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:10:bc:ac:8d:5f:ab:c1:d8:b9:99:0d:3d:11:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 3 14:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad950aea859055c3931d265cf6ad53d23def1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:cd:1a:51:7a:aa:08:b7:06:5c:b8:f9:7f:
03:c4:d8:7a:22:7c:96:fe:4a:f3:67:a9:b1:7e:fc:
e0:b0:0b:7d:59:c4:1f:a7:fd:5c:96:78:22:c3:ed:
32:7d:6a:b2:b6:8a:9c:f5:b6:ae:cb:97:6d:cf:ac:
b8:5c:37:88:ac:2f:c9:da:0e:6a:eb:d0:95:0c:ed:
7c:34:3b:2a:f9:3f:89:fb:a0:df:e8:52:35:15:3f:
10:af:29:b6:ac:69:1f:24:53:c4:19:73:ef:51:2d:
08:a6:21:0b:48:58:ed:bc:1d:50:97:16:94:08:35:
57:06:73:a2:68:69:50:3d:d3:ec:a9:13:77:0d:d1:
02:b2:bf:1d:d1:c1:d6:0d:e8:0d:3b:e5:76:79:67:
61:95:f9:5c:2d:21:aa:0a:90:6a:c6:8b:16:03:29:
08:b7:85:14:8a:35:cc:3b:42:62:04:1a:29:6e:2a:
68:f0:3b:71:68:4f:88:aa:99:b9:d0:c1:de:c5:e5:
d6:6a:de:0d:60:45:37:5b:5b:af:e8:23:b8:54:8a:
dc:a0:33:9b:88:6d:7f:6c:5b:c2:0c:01:5e:d2:b8:
be:b9:11:54:95:52:54:02:e7:42:1d:69:40:60:1e:
15:b2:79:ff:27:f6:c6:c0:6a:32:78:7b:1b:f9:4b:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:50:AE:A8:59:05:5C:39:31:D2:65:CF:6A:D5:3D:23:DE:F1:A5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/atlQrqhZBVw5MdJlz2rVPSPe8aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:89:59:43:01:2e:ee:ec:ca:2e:68:b3:11:47:6e:5b:6c:4f:
d9:95:94:9a:14:de:d6:43:02:80:c9:33:fe:44:93:17:44:45:
70:bf:b1:4d:bb:2f:07:03:ef:6a:2d:bd:7a:f9:62:7e:03:b3:
4f:df:2d:2f:f7:2c:c2:f5:87:3a:b4:18:03:aa:9c:c2:5b:da:
3a:bb:00:74:6e:84:e7:a5:b9:ea:29:1b:6c:5c:49:9c:57:b1:
79:23:02:c2:fd:fe:a9:b9:f3:e5:fd:64:f9:ac:04:dd:04:9e:
00:94:66:40:8d:af:23:96:3a:1f:d2:6e:49:2e:8d:3f:55:60:
b3:bb:4d:5d:c4:84:c2:64:d9:33:2d:4e:67:c8:73:1f:66:e4:
eb:6d:18:01:58:7a:48:42:4e:ef:32:db:fa:6b:c4:1e:4e:eb:
c5:de:30:56:32:12:e1:81:24:57:a2:1a:80:6a:b8:7e:06:5c:
b9:fe:1f:c6:cf:ed:4a:4f:1e:55:1e:19:dc:b7:ea:99:f6:e3:
69:d7:e8:f6:a1:02:52:c8:97:9a:9f:3b:66:69:a0:0c:43:d5:
99:5c:43:d2:59:1e:70:1c:a7:49:3e:6d:29:b4:3d:d3:b8:32:
3a:65:f0:57:fe:9f:78:6e:02:6a:5d:eb:1a:32:86:a0:d9:c9:
c0:11:eb:42
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZX8ELysjV+rwdi5mQ09EbDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDAzMTQzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWQ5NTBhZWE4NTkwNTVjMzkzMWQyNjVjZjZhZDUzZDIzZGVmMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7NGlF6qgi3Bly4+X8DxNh6InyW
/krzZ6mxfvzgsAt9WcQfp/1clngiw+0yfWqytoqc9bauy5dtz6y4XDeIrC/J2g5q
69CVDO18NDsq+T+J+6Df6FI1FT8Qrym2rGkfJFPEGXPvUS0IpiELSFjtvB1QlxaU
CDVXBnOiaGlQPdPsqRN3DdECsr8d0cHWDegNO+V2eWdhlflcLSGqCpBqxosWAykI
t4UUijXMO0JiBBopbipo8DtxaE+Iqpm50MHexeXWat4NYEU3W1uv6CO4VIrcoDOb
iG1/bFvCDAFe0ri+uRFUlVJUAudCHWlAYB4Vsnn/J/bGwGoyeHsb+UttZwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFGrZUK6oWQVcOTHSZc9q1T0j3vGlMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYXRsUXJxaFpCVnc1TWRKbHoyclZQU1BlOGFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCB2QQCAAEwgdID
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48wDAMEAQWv2gMEAAWv3DAMAwQABa/hAwQA
Ba/oAwQABa/rAwQABa/tMAwDBAQFr/ADBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYD
BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD
BAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5L48DBAC5eUUDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAI4lZQwEu7uzK
LmizEUduW2xP2ZWUmhTe1kMCgMkz/kSTF0RFcL+xTbsvBwPvai29evlifgOzT98t
L/cswvWHOrQYA6qcwlvaOrsAdG6E56W56ikbbFxJnFexeSMCwv3+qbnz5f1k+awE
3QSeAJRmQI2vI5Y6H9JuSS6NP1Vgs7tNXcSEwmTZMy1OZ8hzH2bk620YAVh6SEJO
7zLb+mvEHk7rxd4wVjIS4YEkV6IagGq4fgZcuf4fxs/tSk8eVR4Z3Lfqmfbjadfo
9qECUsiXmp87ZmmgDEPVmVxD0lkecBynST5tKbQ907gyOmXwV/6feG4Cal3rGjKG
oNnJwBHrQg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:39:40 2025 by rpki-client