Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e1rrl670wAfxbvRy4MHPT2LMopY.roa
File: e1rrl670wAfxbvRy4MHPT2LMopY.roa (raw, json)
Hash identifier: kxczagFn+EDhofY9RsAP9p1ZkpH4ywUiURJU/FcxOrU=
Subject key identifier: 7B:5A:EB:97:AE:F4:C0:07:F1:6E:F4:72:E0:C1:CF:4F:62:CC:A2:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01963B426A502E435DC7B447F5D6569699D2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e1rrl670wAfxbvRy4MHPT2LMopY.roa
Signing time: Tue 15 Apr 2025 21:02:10 +0000
ROA not before: Tue 15 Apr 2025 21:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.18.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.2.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.32.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 04:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:42:6a:50:2e:43:5d:c7:b4:47:f5:d6:56:96:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 21:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5aeb97aef4c007f16ef472e0c1cf4f62cca296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:70:40:17:90:be:fc:6a:0b:72:65:7f:49:
e5:2d:c6:d0:36:f4:1a:96:ef:69:0a:9b:54:1a:bb:
a8:a6:40:9d:4d:c1:4b:e1:a5:e4:4d:52:f6:9a:78:
26:84:4e:b0:f7:99:3c:ab:55:ee:e6:e6:7f:87:5d:
d0:06:08:f4:10:e2:7a:61:0a:29:d3:df:7f:d7:3b:
b2:c3:03:56:cd:95:22:13:56:2b:2c:99:ab:ab:49:
21:91:0f:00:7d:e0:fd:68:4b:4d:29:c8:21:a5:0a:
56:f1:3f:c6:dc:a2:3f:24:28:4c:de:48:6e:8c:04:
3c:bc:27:11:92:c2:b7:46:2d:35:41:38:75:cd:48:
18:5c:b1:bc:79:5e:9b:44:3d:1f:a1:38:cf:64:d9:
a4:e0:24:11:32:a0:6a:84:81:b0:8a:1c:cb:b1:7c:
3c:75:74:e7:b3:2b:b3:e8:40:02:7e:1e:df:f9:81:
92:5c:da:d1:8b:67:8f:5e:9c:a5:56:c5:da:3b:a9:
7b:7d:a6:9e:6b:84:e3:21:81:94:b1:60:e9:c9:5c:
b8:1e:1d:2a:91:0c:dc:a8:fc:e1:82:0c:b2:70:d9:
32:fe:79:10:ef:fe:bd:39:a9:2e:3a:f1:6b:61:c8:
aa:df:f4:24:7e:d0:0e:6f:26:76:52:e1:ae:71:9f:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:EB:97:AE:F4:C0:07:F1:6E:F4:72:E0:C1:CF:4F:62:CC:A2:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e1rrl670wAfxbvRy4MHPT2LMopY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.69.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:ea:36:86:30:16:90:16:88:18:e1:7a:9b:a2:57:2b:0c:93:
c9:bb:e7:9c:cf:1d:76:5b:ff:4d:5e:ae:63:3c:8e:3f:d0:58:
32:b4:76:c0:4d:f3:21:1b:af:52:2c:8a:7e:c7:44:78:cc:77:
c5:28:38:f2:ba:c8:54:45:5d:2e:ab:19:cf:87:db:39:68:1b:
ac:f0:15:08:26:0d:d7:ef:40:10:96:94:86:d8:8b:d1:65:37:
5a:b2:2b:1e:16:86:02:0b:8a:15:f6:24:b7:ba:85:05:ee:74:
5e:96:7a:09:e6:5d:42:8e:f0:b6:0e:13:ad:f1:21:b5:1e:37:
81:8b:85:b5:2a:a6:5c:b7:73:a8:df:bb:5c:b6:87:d4:db:db:
fe:ba:08:9e:a1:6c:e2:37:48:e5:fb:8e:d2:3e:ca:c6:92:30:
4d:75:0e:de:fe:ba:81:04:89:41:67:db:fb:ea:60:3b:8f:a2:
a5:76:0e:d1:d1:71:3b:fc:80:0a:0f:b9:18:5b:4a:ab:51:dd:
92:26:02:e3:77:ae:d6:25:ae:12:93:b8:e9:5f:4a:eb:a8:a3:
e9:02:7c:69:d9:ad:25:6e:95:ec:c1:21:0b:ac:ed:47:26:de:
cb:5c:0e:59:e1:5d:22:0a:f8:8d:c4:1a:d3:53:b3:6d:c5:9b:
59:c0:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:00:51 2025 by rpki-client