Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mfmkCcCldFRzUPlZ4sAvkweoz6o.roa
File: mfmkCcCldFRzUPlZ4sAvkweoz6o.roa (raw, json)
Hash identifier: rMI3gOlQV5/8sCZf/fIDpMr+iRzXFZKJSCQYu1QnGe8=
Subject key identifier: 99:F9:A4:09:C0:A5:74:54:73:50:F9:59:E2:C0:2F:93:07:A8:CF:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019708D65AA611C75F4304C8F764FA376582
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mfmkCcCldFRzUPlZ4sAvkweoz6o.roa
Signing time: Sun 25 May 2025 19:05:54 +0000
ROA not before: Sun 25 May 2025 19:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.236.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.168.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.182.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 21:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:d6:5a:a6:11:c7:5f:43:04:c8:f7:64:fa:37:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 25 19:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f9a409c0a574547350f959e2c02f9307a8cfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:87:2f:3f:01:ac:93:d1:d9:3a:fc:d9:3d:
29:7f:ba:8e:1c:7b:2c:6d:35:f3:d0:0f:70:b0:14:
34:a2:72:68:8d:b5:2f:fc:9a:4d:dc:59:42:37:40:
39:2a:db:64:b6:07:d1:04:59:30:8c:c0:11:62:be:
48:b0:17:fe:d7:da:b8:e3:cf:42:6e:69:f3:ec:4f:
06:54:41:a8:de:f9:ec:d1:40:55:f9:70:9b:bb:29:
fd:11:e8:a7:73:0d:e5:4d:48:98:7e:07:f6:14:11:
35:52:94:a5:af:de:4e:54:06:47:80:aa:52:78:32:
24:9c:39:31:42:25:2d:cd:3e:95:6b:59:7b:78:1f:
9a:75:af:59:89:1d:a2:73:f9:d2:bf:40:dd:2e:e6:
c0:d8:4a:4a:d9:4d:c2:11:e7:f9:95:c9:df:b9:2e:
1f:74:8d:62:2f:2a:68:35:1b:b9:e8:8d:70:c0:7d:
2a:39:9f:7b:f6:c5:cd:19:7c:a2:b8:ef:1e:c9:0b:
73:b7:a9:be:94:fd:36:87:01:87:f0:5f:91:14:36:
ae:65:c0:67:02:89:a3:72:ae:e5:ce:4d:02:e4:c1:
0e:d9:b6:e0:16:e9:31:0b:20:90:31:47:3b:2d:33:
b8:b1:84:0a:17:ee:b2:2c:3f:a6:55:0c:47:4c:e3:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:A4:09:C0:A5:74:54:73:50:F9:59:E2:C0:2F:93:07:A8:CF:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mfmkCcCldFRzUPlZ4sAvkweoz6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.196.0/24
5.175.198.0/23
5.175.203.0/24
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0-5.175.236.255
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:01:37:fc:53:71:e7:02:1f:57:2b:94:c0:a4:c0:8d:f7:57:
b8:12:53:5c:0d:df:8e:68:50:bf:8c:72:18:83:39:0e:ba:f8:
1d:63:29:1a:fe:2c:3f:ff:53:83:5c:16:eb:dc:70:17:69:34:
de:03:34:fc:2c:f2:12:11:65:40:37:2f:d3:82:ba:2c:9c:d7:
b9:07:5e:c1:a2:5e:4e:b2:1d:bb:af:3a:f4:3a:56:48:b2:8f:
03:40:f7:59:a4:0b:af:be:53:17:23:05:c3:3a:af:8f:5f:3e:
07:96:5a:4b:d4:3d:13:3e:69:3c:aa:81:95:ef:ed:0a:d9:d2:
60:a1:7a:b3:12:1a:80:96:ea:48:da:9e:e4:fe:6a:19:32:92:
41:0d:be:a6:8a:89:f2:75:b9:4e:da:a0:88:03:10:b6:de:ea:
20:c2:61:77:65:8f:fa:e5:b5:2f:0e:c8:b3:82:07:70:55:8b:
41:08:34:44:e8:aa:e5:6d:0a:1e:6e:50:55:4e:62:82:b0:40:
99:e7:85:20:1e:43:db:95:a3:02:63:ae:57:4e:8e:47:32:06:
15:8b:c8:cb:3f:e7:bc:7f:6e:87:39:c5:76:c2:07:59:24:9a:
72:71:47:65:98:d9:d4:c5:d2:64:e8:85:2a:01:54:72:5d:ff:
42:e9:38:c9
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgISAZcI1lqmEcdfQwTI92T6N2WCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTI1MTkwNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWY5YTQwOWMwYTU3NDU0NzM1MGY5NTllMmMwMmY5MzA3YThjZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sKHLz8BrJPR2Tr82T0pf7qOHHss
bTXz0A9wsBQ0onJojbUv/JpN3FlCN0A5KttktgfRBFkwjMARYr5IsBf+19q4489C
bmnz7E8GVEGo3vns0UBV+XCbuyn9Eeincw3lTUiYfgf2FBE1UpSlr95OVAZHgKpS
eDIknDkxQiUtzT6Va1l7eB+ada9ZiR2ic/nSv0DdLubA2EpK2U3CEef5lcnfuS4f
dI1iLypoNRu56I1wwH0qOZ979sXNGXyiuO8eyQtzt6m+lP02hwGH8F+RFDauZcBn
Aomjcq7lzk0C5MEO2bbgFukxCyCQMUc7LTO4sYQKF+6yLD+mVQxHTOMwtwIDAQAB
o4IDJTCCAyEwHQYDVR0OBBYEFJn5pAnApXRUc1D5WeLAL5MHqM+qMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbWZta0NjQ2xkRlJ6VVBsWjRzQXZrd2VvejZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCB7wQCAAEwgegD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr4oDBAAFr48DBAAFr8QDBAEFr8YDBAAFr8sw
DAMEAAWvzwMEAAWv0DAMAwQABa/hAwQABa/oMAwDBAAFr+sDBAAFr+wwDAMEBAWv
8AMEAAWv9DALAwQABa/7AwMEBaADAwEF5gMEBk1aAAMEA1PzUAMEBVVdAAMEA1V2
oAMEA1fvgAMEBVlqQAMEBlmQAAMEBF5noAMEB175gAMEAl/XIAMEBLISkAMEArkN
nDAMAwQCuS+MAwQAuS+OAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAEAgACMCoD
BQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8AwDQYJKoZI
hvcNAQELBQADggEBAF8BN/xTcecCH1crlMCkwI33V7gSU1wN345oUL+MchiDOQ66
+B1jKRr+LD//U4NcFuvccBdpNN4DNPws8hIRZUA3L9OCuiyc17kHXsGiXk6yHbuv
OvQ6VkiyjwNA91mkC6++UxcjBcM6r49fPgeWWkvUPRM+aTyqgZXv7QrZ0mCherMS
GoCW6kjanuT+ahkykkENvqaKifJ1uU7aoIgDELbe6iDCYXdlj/rltS8OyLOCB3BV
i0EINEToquVtCh5uUFVOYoKwQJnnhSAeQ9uVowJjrldOjkcyBhWLyMs/57x/boc5
xXbCB1kkmnJxR2WY2dTF0mTohSoBVHJd/0LpOMk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:34 2025 by rpki-client