Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f3i0ff2khSW7GncpDdrigV61X5A.roa
File: f3i0ff2khSW7GncpDdrigV61X5A.roa (raw, json)
Hash identifier: DnPM1frtQs8jhYMGewY56mbs6fx3pUwhufI4ng5cehY=
Subject key identifier: 7F:78:B4:7D:FD:A4:85:25:BB:1A:77:29:0D:DA:E2:81:5E:B5:5F:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F64404D336EDF5C9BAC1E305948EF41E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f3i0ff2khSW7GncpDdrigV61X5A.roa
Signing time: Thu 22 May 2025 04:32:54 +0000
ROA not before: Thu 22 May 2025 04:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.106.78.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 08:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:44:04:d3:36:ed:f5:c9:ba:c1:e3:05:94:8e:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 04:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f78b47dfda48525bb1a77290ddae2815eb55f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:a2:dc:2b:7d:da:7f:d8:de:08:45:e6:22:
d9:0f:e0:35:5a:3f:d9:bb:29:10:cd:3e:16:d4:0e:
49:93:10:85:ab:66:51:64:e9:70:e6:ba:24:0c:d7:
9e:4c:37:52:0f:d6:28:0c:41:fe:74:ae:bf:09:99:
fb:62:03:ab:07:c3:a9:92:76:de:7d:f3:08:30:fa:
8d:7d:45:1a:93:a9:ba:91:79:4b:a9:56:7a:28:7c:
9a:b5:d5:7d:8f:b9:a1:b4:c1:e3:03:1f:50:34:52:
fb:f9:c8:3a:09:95:2d:97:5f:84:e3:72:2a:0f:fb:
23:2d:c7:d6:25:8f:5a:eb:ea:4a:2d:5e:f5:37:dc:
73:af:09:4d:3b:14:dc:3d:a4:66:f9:6e:41:80:5d:
e2:f5:45:bb:50:13:0b:7a:0a:19:bf:ce:1d:dc:4e:
61:86:ff:0d:9a:8a:9a:99:21:62:29:37:ce:de:46:
b3:63:42:7f:4e:de:70:6c:7c:48:8d:c3:3a:09:6c:
06:1c:b2:33:e2:6e:11:a5:1b:6a:db:31:ce:aa:83:
f0:6f:23:32:02:92:b4:78:5d:e9:74:92:f7:92:d6:
fd:25:86:d7:d1:c3:35:07:74:58:e3:b2:c3:db:a9:
3d:03:8a:06:75:5a:fa:c4:92:e9:49:b1:00:f4:42:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:B4:7D:FD:A4:85:25:BB:1A:77:29:0D:DA:E2:81:5E:B5:5F:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f3i0ff2khSW7GncpDdrigV61X5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.195.0-5.175.196.255
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ab:fb:79:fb:96:51:40:4a:85:dc:3c:97:0d:c7:02:87:41:
20:63:20:06:39:5a:c3:99:86:13:7d:50:eb:82:15:49:cb:13:
95:a5:4b:f3:5e:ee:49:7d:15:52:de:f5:d1:74:f1:66:85:d1:
cb:7a:50:ef:58:de:9d:ea:74:2c:38:9b:63:70:ca:6f:19:9f:
de:95:d3:2a:4d:84:ef:08:5d:dc:ac:62:7b:93:93:0e:64:4f:
f1:0b:5b:11:4b:4a:ad:b7:64:0e:c6:48:1e:8e:5e:35:b5:4f:
20:b6:fe:b3:af:e6:ef:8f:43:93:02:80:66:bb:1a:fe:b3:63:
57:57:3f:24:1c:78:ea:e7:15:fc:2a:fc:d4:04:60:25:0a:eb:
b9:0c:fb:c5:22:ab:0e:52:e2:f5:f3:9f:d1:78:92:14:27:b2:
91:81:44:f2:6a:01:71:9e:01:c4:e2:10:1a:03:bd:b2:01:3b:
a3:3b:04:bf:43:87:ac:35:92:54:de:77:13:d8:81:9d:48:52:
ed:61:c5:5e:4f:2b:1e:43:f7:4d:2f:17:71:ff:b2:ae:23:66:
c4:07:a9:02:db:a9:04:c5:0b:9e:38:ac:f9:68:8f:1a:69:d3:
48:7e:1a:fe:29:8c:ef:d3:cc:a3:5d:1c:0e:d0:95:a3:b2:3c:
99:5e:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:15 2025 by rpki-client