Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/onKOX0vW-HcxCgeMlmqvhEvlBcc.roa
File: onKOX0vW-HcxCgeMlmqvhEvlBcc.roa (raw, json)
Hash identifier: ng6Mv/TQbpLnurqkUxfDi9HoPcfPVctk+mcQESS0Y8M=
Subject key identifier: A2:72:8E:5F:4B:D6:F8:77:31:0A:07:8C:96:6A:AF:84:4B:E5:05:C7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01975904D3DCF3EC850CD65B092D4B2FE36B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/onKOX0vW-HcxCgeMlmqvhEvlBcc.roa
Signing time: Tue 10 Jun 2025 08:46:17 +0000
ROA not before: Tue 10 Jun 2025 08:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.193.0/24 maxlen: 24
5.175.196.0/24 maxlen: 24
5.175.197.0/24 maxlen: 24
5.175.198.0/24 maxlen: 24
5.175.199.0/24 maxlen: 24
5.175.207.0/24 maxlen: 24
5.175.208.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.40.0/24 maxlen: 24
5.230.102.0/24 maxlen: 32
5.230.113.0/24 maxlen: 24
5.230.114.0/24 maxlen: 24
5.230.116.0/24 maxlen: 24
5.230.199.0/24 maxlen: 24
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.55.0/24 maxlen: 24
5.231.58.0/24 maxlen: 24
5.231.60.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.112.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.125.0/24 maxlen: 24
5.231.201.0/24 maxlen: 24
5.231.202.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.20.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.7.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.129.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.67.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.3.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
89.144.62.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.174.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.191.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.33.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Jun 2025 12:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:04:d3:dc:f3:ec:85:0c:d6:5b:09:2d:4b:2f:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 08:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2728e5f4bd6f877310a078c966aaf844be505c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:a8:cd:c8:54:64:a7:5b:06:ae:af:f0:bb:
05:c6:63:7d:54:cf:d1:56:aa:50:a3:de:6c:c1:0c:
43:87:7b:9d:5a:8e:35:a4:0e:23:31:b3:a1:b9:aa:
a0:c6:7b:34:df:dd:72:36:fe:a1:f5:db:6d:c5:30:
ad:97:3b:54:51:e6:f0:30:be:2f:91:20:1e:93:eb:
57:e7:6c:36:8a:0f:18:be:b3:89:55:cd:55:b7:5e:
5f:83:c2:4a:73:69:ca:ea:28:72:70:5e:ea:d9:18:
64:01:b8:d8:eb:78:94:02:64:6c:b8:23:24:10:07:
a4:98:11:71:8a:27:6e:e3:f9:26:6f:b9:1e:43:6e:
01:1e:8e:07:72:c1:1b:f7:6d:25:4d:f4:b8:c1:3d:
02:85:61:b2:ea:7c:25:ce:9f:a0:30:27:39:ff:46:
a2:a2:15:4e:d7:00:45:50:34:06:fd:02:b7:8e:54:
bf:33:20:1b:82:3e:a6:bc:81:67:10:91:bb:46:45:
49:11:64:f2:7f:ae:f4:37:0a:43:58:e8:81:f0:42:
bb:ce:73:b6:1d:08:3b:5a:9c:96:a9:55:ee:e8:a3:
98:35:4f:3a:6a:c4:b6:60:80:6b:52:b7:e0:c4:72:
19:3d:85:54:90:a4:47:e3:91:5f:7b:bb:f2:11:96:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:8E:5F:4B:D6:F8:77:31:0A:07:8C:96:6A:AF:84:4B:E5:05:C7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/onKOX0vW-HcxCgeMlmqvhEvlBcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.143.0/24
5.175.193.0/24
5.175.196.0/22
5.175.207.0-5.175.208.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:9a:11:04:e3:c5:2d:b2:9d:8d:e1:f3:df:45:21:30:14:47:
7f:93:86:e2:d3:ef:bd:87:d3:0f:45:a0:31:3f:56:78:9a:b2:
f7:19:46:1f:55:b6:73:9a:a3:c4:aa:20:3b:b8:a3:e5:8f:bd:
81:5e:fb:20:55:35:14:91:3d:7a:d4:82:7d:97:9f:50:36:9f:
d2:63:08:ef:4a:88:23:6f:82:09:89:0c:df:3f:40:a7:d9:6f:
03:c6:f2:e9:fd:24:59:1e:71:b8:67:98:ef:11:d2:26:9d:f2:
59:87:a9:b3:1f:ad:59:d3:27:75:10:a6:1a:56:ef:f7:af:d4:
aa:ba:b2:bf:9d:30:dc:53:f4:70:bd:35:ab:3d:5d:6a:c7:90:
e1:5d:16:c5:5a:16:f5:a3:5c:de:03:fa:f7:19:cc:5c:ba:3a:
45:a6:52:f3:c4:1b:ab:71:ed:a7:fa:b6:b3:27:51:ff:ac:bd:
2d:62:25:ae:ed:25:1d:bd:89:a5:56:c7:7b:48:e0:9b:ee:64:
20:8e:60:69:ed:7d:70:14:4f:5f:ed:f7:46:45:46:22:b6:c5:
49:8f:09:92:9c:00:c4:fe:71:3c:b1:71:a6:1c:6e:2f:50:69:
b9:7f:30:4f:73:f2:2c:7b:ae:d2:2d:9a:48:5b:22:eb:8c:0e:
aa:01:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:10:26 2025 by rpki-client