Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHj56dPQVMRLKNU2SlCvCYa2RCY.roa
File: bHj56dPQVMRLKNU2SlCvCYa2RCY.roa (raw, json)
Hash identifier: 0LHdC8NdYhS8fwGLc8QkgqJC1BWIXBv8QtNBqKoWxck=
Subject key identifier: 6C:78:F9:E9:D3:D0:54:C4:4B:28:D5:36:4A:50:AF:09:86:B6:44:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196207E06A3E7A0C7DC6A815203AE3CEE7A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHj56dPQVMRLKNU2SlCvCYa2RCY.roa
Signing time: Thu 10 Apr 2025 16:17:32 +0000
ROA not before: Thu 10 Apr 2025 16:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Apr 2025 21:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:7e:06:a3:e7:a0:c7:dc:6a:81:52:03:ae:3c:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 16:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c78f9e9d3d054c44b28d5364a50af0986b64426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:20:7b:a8:65:49:11:8b:c5:16:65:32:8c:
ed:10:fe:d7:99:7f:1a:d2:f2:e6:0e:b1:dd:a0:72:
c3:03:bd:47:6e:e2:49:d0:0e:cf:80:bd:f8:5e:1d:
23:41:56:fd:41:6d:d8:ff:14:e7:bd:45:3c:c6:b0:
66:1b:e1:96:b8:7d:b8:b6:f2:70:d7:d5:43:83:f7:
96:9a:da:5e:6c:c8:bb:ad:5b:95:b0:b6:ed:20:f7:
77:15:b9:9c:d7:08:91:94:70:db:ec:e6:68:bc:21:
7c:5f:82:9f:3a:e1:68:8c:05:e2:1e:ba:64:e1:0a:
07:cd:42:c6:fe:ce:66:e8:0e:f1:5a:4a:ad:f6:8e:
c4:bf:a4:42:b7:f8:e9:81:52:6d:62:50:92:bf:ae:
53:ac:44:91:ea:98:71:e3:72:52:4b:98:42:47:c6:
ed:af:15:fc:df:69:c8:cb:31:7b:d6:50:da:e1:75:
02:36:36:ef:40:c0:d4:eb:6c:37:0f:29:4c:cd:91:
6b:cd:d1:32:94:47:7b:f4:b3:14:a8:af:5d:46:09:
c2:7e:5b:40:6e:a6:c8:70:55:36:33:87:cf:a4:78:
ee:ca:c2:b4:7b:0c:fb:2a:4e:3e:70:de:bd:3a:84:
9d:27:ca:f8:20:e6:92:fa:60:db:00:de:dc:13:3c:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:F9:E9:D3:D0:54:C4:4B:28:D5:36:4A:50:AF:09:86:B6:44:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bHj56dPQVMRLKNU2SlCvCYa2RCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:5d:d3:c2:90:b7:6e:4a:7d:a3:2b:81:89:a4:16:4d:33:8a:
8b:4e:a6:eb:ce:36:0f:87:8c:57:57:ee:d5:6f:e1:1c:69:af:
ff:19:69:8b:73:aa:ea:ed:3f:f3:fd:f8:fd:88:d3:e9:39:39:
e2:59:77:13:be:db:9a:2a:05:cc:a6:0c:ee:d6:90:c0:bd:1d:
e5:4d:15:97:46:bf:0b:af:87:26:23:95:85:4a:78:6a:7c:4e:
25:42:df:b9:8e:10:39:b5:99:fa:4a:16:33:7b:22:b1:59:dd:
2d:65:b9:6b:7f:e4:44:8c:a0:e1:9c:ed:f3:57:c2:6c:d0:91:
b6:33:37:d4:1b:ab:da:9a:61:6b:1b:08:83:6c:07:0e:f2:ac:
bf:0d:76:03:d3:e9:86:b7:dd:e2:36:3f:cc:76:96:52:16:e2:
7a:29:d8:16:52:f8:c2:74:e3:6d:12:23:9d:81:5d:1e:85:38:
90:17:ec:e8:d0:c8:da:43:54:03:6e:78:59:95:e0:6d:41:49:
66:1a:55:94:9a:53:9b:67:3f:c2:c1:8b:ca:4c:f0:2a:48:ca:
76:b8:e1:3e:16:c0:ff:56:3c:3a:f3:f6:56:e4:7e:9a:9b:18:
6f:92:e2:c3:7f:d4:af:55:06:06:4c:91:39:86:7f:07:87:df:
b5:95:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:37 2025 by rpki-client