Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cn-RXB9kZK5_-hY3tqXSkIeiyWw.roa
File: cn-RXB9kZK5_-hY3tqXSkIeiyWw.roa (raw, json)
Hash identifier: twzUt9Cv6s5Y6oiDYWyKkNvpa+0BtBa1Oc/EHZpkp2c=
Subject key identifier: 72:7F:91:5C:1F:64:64:AE:7F:FA:16:37:B6:A5:D2:90:87:A2:C9:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961BEDD01B5ECB510C544DEE4A70FA5548
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cn-RXB9kZK5_-hY3tqXSkIeiyWw.roa
Signing time: Wed 09 Apr 2025 19:01:32 +0000
ROA not before: Wed 09 Apr 2025 19:01:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 09 Apr 2025 23:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:ed:d0:1b:5e:cb:51:0c:54:4d:ee:4a:70:fa:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 19:01:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=727f915c1f6464ae7ffa1637b6a5d29087a2c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:e5:1b:80:cf:2e:c9:a5:0f:0b:cb:38:15:
6c:10:82:ac:81:e3:2f:02:23:4a:7f:94:1e:85:ea:
ac:06:a3:37:8f:7d:68:e9:ad:b8:db:16:6b:14:87:
47:c9:da:55:52:1e:7a:8e:d7:bb:6c:97:6f:8a:bc:
a5:a2:71:21:ee:4d:9a:65:e9:ee:1e:a2:72:86:aa:
1c:72:e4:19:3b:5f:22:df:d5:bb:00:ff:05:12:36:
4f:69:1c:81:62:ff:6c:00:c9:1a:1c:b3:47:ff:4b:
f7:e4:d0:c6:c0:d6:a4:d1:1f:68:1a:40:c5:59:aa:
d6:16:48:da:0c:84:b6:1f:a6:99:0a:4a:76:25:c8:
3f:be:5f:19:16:ae:99:89:7e:64:1a:00:6e:9a:08:
44:b6:da:a4:79:63:d9:d6:da:3d:f0:3f:37:7f:98:
d8:30:9d:9b:f9:0a:2b:ab:ac:68:6f:9f:ec:a6:04:
43:02:28:47:03:46:32:13:2c:d8:3d:65:7f:a0:a5:
42:e5:14:25:86:3e:a1:1b:8e:77:0a:39:2d:17:67:
23:74:9f:b0:96:b2:6b:fc:ea:bd:30:10:25:6a:01:
34:0b:e9:77:ce:23:60:3e:2c:b5:d1:df:f1:1b:04:
ad:57:7e:05:f4:39:f2:42:cb:da:6c:42:a9:78:78:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:91:5C:1F:64:64:AE:7F:FA:16:37:B6:A5:D2:90:87:A2:C9:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cn-RXB9kZK5_-hY3tqXSkIeiyWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.237.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:3c:e2:75:a8:a4:1b:fa:17:f9:3e:53:69:7f:e6:24:57:1e:
7d:03:c4:29:d9:db:0a:aa:18:20:68:6b:40:4c:cc:3e:59:f5:
63:7f:15:a5:58:74:8d:6f:b3:94:a5:41:83:a0:47:fa:b6:97:
b1:b9:3e:e6:0d:d5:fa:9d:1a:de:4c:44:99:28:99:1a:96:6d:
db:7e:45:55:04:95:0f:03:bf:91:f0:df:50:3f:59:d8:f5:66:
29:2a:6b:09:68:c2:b5:d7:ce:1c:49:e8:f2:a9:a6:ae:5c:30:
4a:13:35:33:08:75:7d:1f:80:cc:19:20:f8:0e:a5:ed:c7:fa:
bc:d1:3a:54:63:62:58:e5:a0:fd:9a:e1:7d:70:f9:b6:63:30:
92:ba:61:f2:5e:6f:70:74:e3:d7:32:ab:93:dc:67:aa:15:ed:
18:b1:e0:67:ac:9e:5f:3d:ab:68:fc:66:96:f1:92:03:6a:30:
12:34:fe:15:55:b0:75:19:3c:84:5d:0f:e6:ab:1d:cb:53:e7:
6e:6a:68:2a:44:a1:bb:87:8c:48:4e:8c:cf:4c:f8:96:01:e6:
dc:85:57:c6:9c:bb:dc:38:b7:a9:4c:6e:6c:96:80:6c:88:38:
31:40:b0:49:e4:b2:db:16:5d:06:25:cb:91:af:43:17:d5:2b:
96:84:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:51:25 2025 by rpki-client