Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cb5VvXZCP8eYKSLsSB56NqkJZk8.roa
File: cb5VvXZCP8eYKSLsSB56NqkJZk8.roa (raw, json)
Hash identifier: rSdSDsjqWhAg6NuOwc+GAcRAb8E3nygBaPL7c8HjiT4=
Subject key identifier: 71:BE:55:BD:76:42:3F:C7:98:29:22:EC:48:1E:7A:36:A9:09:66:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01972F0B99F7A94A35516E9F0D79B05DABF2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cb5VvXZCP8eYKSLsSB56NqkJZk8.roa
Signing time: Mon 02 Jun 2025 05:09:38 +0000
ROA not before: Mon 02 Jun 2025 05:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.193.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.197.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.113.0/24 maxlen: 24
5.230.114.0/24 maxlen: 24
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.166.0/24 maxlen: 24
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jun 2025 10:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:0b:99:f7:a9:4a:35:51:6e:9f:0d:79:b0:5d:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 05:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71be55bd76423fc7982922ec481e7a36a909664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:c1:6d:73:91:31:e6:27:ce:b1:8b:f2:84:
08:d8:4a:32:24:81:f6:30:7d:28:a6:11:25:a3:87:
fa:aa:ed:7d:a7:b5:1b:38:bf:97:f9:ff:84:1f:2f:
c8:3a:04:a2:ab:c5:f9:7d:a3:60:dc:7f:93:96:9e:
a3:35:c0:98:d9:3d:2a:9e:73:37:b8:58:a0:c6:b4:
d4:0f:c9:a1:8b:c8:75:67:79:66:81:9c:e7:8f:96:
6a:63:50:2f:8f:9d:8c:39:93:35:05:29:0e:96:03:
bd:6d:4a:a7:35:c1:3a:71:62:56:f1:e6:2b:4e:eb:
ea:d3:35:58:60:b2:e3:8d:31:cb:39:21:30:30:6c:
62:56:0b:e6:c1:90:9d:fd:88:a7:3c:90:32:00:cf:
45:b8:bf:ba:0a:15:03:73:e2:0f:36:ea:59:0e:9b:
36:36:ff:40:24:2e:8e:c6:9c:59:4e:19:49:fa:ea:
6b:26:8b:31:8c:0f:ec:20:62:ea:77:6a:36:5a:67:
b0:01:ac:db:b0:db:b5:93:02:8a:f7:16:a5:6d:cf:
6a:b1:ac:fa:ea:d0:a0:8d:68:f8:88:3b:bf:e5:fa:
91:15:fd:47:54:82:4a:66:c0:1b:d8:d8:ae:29:df:
01:c9:06:de:85:f7:89:c5:2f:16:bb:3e:08:bd:8e:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:55:BD:76:42:3F:C7:98:29:22:EC:48:1E:7A:36:A9:09:66:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cb5VvXZCP8eYKSLsSB56NqkJZk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.193.0/24
5.175.196.0/22
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
78:77:59:eb:b7:d7:6b:fa:c1:17:e8:62:2f:b6:99:99:99:fb:
e4:6c:e0:56:dd:0c:d8:ca:0a:e9:eb:f5:04:fc:d8:db:76:9d:
c0:08:a8:38:d5:37:f5:69:36:2a:c3:d9:fd:b3:15:2b:ec:58:
ee:74:6f:ba:ed:61:58:de:ba:c0:c9:89:6c:0a:73:e9:e3:ba:
3c:e6:70:00:e2:b5:93:67:67:37:34:7b:25:56:84:c9:b0:f5:
8c:5d:5b:f3:20:e7:da:20:06:7f:f3:52:6f:22:e3:f8:ca:7f:
45:7e:21:c2:ba:36:d7:e9:ce:e4:d2:3a:2a:97:bc:af:d8:cb:
08:f6:e5:2d:6a:2a:f0:6f:fc:b6:b3:f8:93:c4:34:19:e3:4e:
4f:1c:ca:39:aa:81:32:8f:90:09:21:ae:e5:7a:bd:9e:d9:bf:
f0:f0:0d:18:d6:3d:2f:7e:69:fd:b7:3a:c6:d7:9b:5f:97:53:
58:5b:5b:be:dc:29:11:a9:71:18:fc:c8:e1:59:57:81:dd:e7:
a5:b1:26:91:71:f1:ee:3a:18:aa:3c:2c:58:17:c5:61:a5:95:
46:3d:fc:c3:19:d1:24:7e:1d:4b:7d:74:eb:38:c2:d5:6f:3c:
d3:d0:3c:d5:83:2b:6b:7f:ed:43:1c:0e:9d:52:15:60:1d:7f:
87:c3:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:55:13 2025 by rpki-client