Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lilDAXyLXhEtCvKG_0WZmCF8pxU.roa
File: lilDAXyLXhEtCvKG_0WZmCF8pxU.roa (raw, json)
Hash identifier: Wt6OhwAICzES7+gW3RCxw7s1Pt4WbcuKjM4/NKdHPkA=
Subject key identifier: 96:29:43:01:7C:8B:5E:11:2D:0A:F2:86:FF:45:99:98:21:7C:A7:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F1102A6A218E668B7F42D0B26A504F55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lilDAXyLXhEtCvKG_0WZmCF8pxU.roa
Signing time: Wed 21 May 2025 04:18:10 +0000
ROA not before: Wed 21 May 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.49.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.70.0/24 maxlen: 24
89.106.78.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.147.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 04:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:10:2a:6a:21:8e:66:8b:7f:42:d0:b2:6a:50:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962943017c8b5e112d0af286ff459998217ca715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:d2:59:a3:a9:c6:4b:ff:07:f7:7a:51:a6:
6f:08:b8:e2:c2:8b:30:97:a3:f1:f1:57:e9:d6:45:
be:67:33:d3:1d:c1:81:ce:71:4c:84:c0:15:24:ed:
06:75:a4:a2:52:b4:3d:41:f3:37:75:5f:bd:ad:cb:
88:4e:aa:5b:48:e3:a5:78:46:a2:19:61:e1:44:cd:
a6:ff:39:d9:72:bd:19:ab:62:92:0d:12:e2:27:04:
6b:a2:7b:d5:9e:78:26:35:bc:76:89:c4:42:d9:4f:
47:18:88:36:8d:57:41:e2:06:4c:fc:0e:50:64:9e:
be:50:d8:3a:f5:53:fd:b9:28:d8:7a:66:95:83:01:
df:8a:96:a6:28:25:a5:e4:63:9c:5d:c2:cd:fe:42:
c7:89:38:48:e6:6d:5a:40:0f:e9:ee:a0:a7:54:f8:
62:3a:c7:90:c2:4f:a3:19:5f:b6:28:4b:ac:08:8b:
ce:c2:3b:bf:d3:a5:e7:c1:69:20:bc:42:44:93:ac:
ed:b2:04:73:d0:73:56:85:62:ec:62:bb:93:43:01:
5b:e8:0d:5f:1d:bf:f6:5a:aa:56:ed:e5:56:8c:3c:
0b:4e:7c:06:03:61:04:27:b1:4b:23:db:0d:95:c7:
5e:c9:e3:26:f2:35:72:e5:f9:4e:6c:e5:5a:46:1d:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:43:01:7C:8B:5E:11:2D:0A:F2:86:FF:45:99:98:21:7C:A7:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lilDAXyLXhEtCvKG_0WZmCF8pxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.192.0/24
5.175.198.0/23
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
33:87:38:18:47:64:53:33:40:35:b3:ce:82:a0:98:20:30:b4:
48:ae:71:0b:eb:f8:b0:d0:61:41:c4:55:c6:dd:a5:3c:96:dc:
18:f6:63:8f:ee:3c:e6:28:12:51:b1:9d:d2:2b:8d:fc:e7:e8:
44:be:8d:ff:d1:00:08:f4:04:83:59:ad:82:72:f0:0e:da:23:
c7:95:2c:8d:11:1a:b4:f3:7a:5c:6c:49:cc:26:96:4d:cf:bf:
9f:d1:18:02:c7:3e:ff:45:bc:b3:3a:f6:0a:5d:15:cc:d6:71:
47:12:15:91:27:02:4d:b0:01:26:06:8e:1f:e0:90:90:b3:79:
89:30:93:ff:7f:74:c2:d9:40:72:a3:ac:07:e1:df:2a:4a:ea:
13:db:47:36:0f:31:8b:16:34:e9:8e:f5:8c:9a:55:0a:78:b1:
0e:d0:ba:88:9b:e7:e2:1f:1b:94:50:8c:30:3f:6e:bb:19:ef:
c0:e4:e3:20:b0:35:0b:c1:e7:29:32:02:e7:df:e5:23:fa:a8:
70:99:28:f4:78:1a:1f:26:4d:03:42:00:0f:3b:de:cc:da:99:
74:37:22:e4:15:21:4c:92:d4:25:88:be:3e:99:10:8b:21:9b:
4e:1a:33:21:13:ea:66:71:a8:97:3a:17:0d:3c:83:a3:cc:3c:
53:22:82:e9
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAZbxECpqIY5mi39C0LJqUE9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTIxMDQxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjI5NDMwMTdjOGI1ZTExMmQwYWYyODZmZjQ1OTk5ODIxN2NhNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGLSWaOpxkv/B/d6UaZvCLjiwosw
l6Px8Vfp1kW+ZzPTHcGBznFMhMAVJO0GdaSiUrQ9QfM3dV+9rcuITqpbSOOleEai
GWHhRM2m/znZcr0Zq2KSDRLiJwRronvVnngmNbx2icRC2U9HGIg2jVdB4gZM/A5Q
ZJ6+UNg69VP9uSjYemaVgwHfipamKCWl5GOcXcLN/kLHiThI5m1aQA/p7qCnVPhi
OseQwk+jGV+2KEusCIvOwju/06XnwWkgvEJEk6ztsgRz0HNWhWLsYruTQwFb6A1f
Hb/2WqpW7eVWjDwLTnwGA2EEJ7FLI9sNlcdeyeMm8jVy5flObOVaRh2uoQIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFJYpQwF8i14RLQryhv9FmZghfKcVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbGlsREFYeUxYaEV0Q3ZLR18wV1ptQ0Y4cHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCB6QQCAAEwgeID
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr4oDBAAFr48DBAAFr8ADBAEFr8YwDAMEAAWv
zwMEAAWv0DAMAwQABa/hAwQABa/oMAwDBAAFr+sDBAAFr+wwDAMEBAWv8AMEAAWv
9DALAwQABa/7AwMEBaADAwEF5gMEBk1aAAMEA1PzUAMEBVVdAAMEA1V2oAMEA1fv
gAMEBVlqQAMEBlmQAAMEBF5noAMEB175gAMEAl/XIAMEBLISkAMEArkNnDAMAwQC
uS+MAwQAuS+OAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAEAgACMCoDBQMqABLY
AwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8AwDQYJKoZIhvcNAQEL
BQADggEBADOHOBhHZFMzQDWzzoKgmCAwtEiucQvr+LDQYUHEVcbdpTyW3Bj2Y4/u
POYoElGxndIrjfzn6ES+jf/RAAj0BINZrYJy8A7aI8eVLI0RGrTzelxsScwmlk3P
v5/RGALHPv9FvLM69gpdFczWcUcSFZEnAk2wASYGjh/gkJCzeYkwk/9/dMLZQHKj
rAfh3ypK6hPbRzYPMYsWNOmO9YyaVQp4sQ7Quoib5+IfG5RQjDA/brsZ78Dk4yCw
NQvB5ykyAuff5SP6qHCZKPR4Gh8mTQNCAA873szamXQ3IuQVIUyS1CWIvj6ZEIsh
m04aMyET6mZxqJc6Fw08g6PMPFMiguk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:31:56 2025 by rpki-client