Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMwKGoxvWhvCAD-r_u6bNLx0rPI.roa
File: qMwKGoxvWhvCAD-r_u6bNLx0rPI.roa (raw, json)
Hash identifier: Iew8wU2lv/dnaJqkep1vSXVVANQZeWcPQvOm8vG8l9A=
Subject key identifier: A8:CC:0A:1A:8C:6F:5A:1B:C2:00:3F:AB:FE:EE:9B:34:BC:74:AC:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196572DEFBE7CC746C8283AFE78BC70D9AB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMwKGoxvWhvCAD-r_u6bNLx0rPI.roa
Signing time: Mon 21 Apr 2025 07:09:10 +0000
ROA not before: Mon 21 Apr 2025 07:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.158.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 24
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.248.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.43.0/24 maxlen: 24
5.231.48.0/24 maxlen: 24
5.231.49.0/24 maxlen: 24
5.231.50.0/24 maxlen: 24
5.231.51.0/24 maxlen: 24
5.231.52.0/24 maxlen: 24
5.231.53.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.1.0/24 maxlen: 24
85.93.12.0/24 maxlen: 24
85.93.15.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.8.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.21.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.150.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 24
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Apr 2025 04:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:2d:ef:be:7c:c7:46:c8:28:3a:fe:78:bc:70:d9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 21 07:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8cc0a1a8c6f5a1bc2003fabfeee9b34bc74acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:39:c5:95:13:0c:69:2f:1f:28:87:bb:70:
d8:c6:c2:8f:9c:22:cb:65:90:64:62:c6:19:26:e1:
da:5c:01:66:c8:98:a7:0e:5e:9b:00:7b:23:e2:7d:
9b:f3:97:c0:72:8c:cc:0e:45:f0:fb:12:97:85:6c:
ee:47:70:4d:9d:3a:6a:85:70:44:ed:26:68:7d:83:
f6:6d:65:fe:9c:55:88:ce:b8:08:fa:8a:1e:19:bd:
44:ca:e8:e4:dd:7e:a1:d5:a7:db:6a:4d:41:6d:d9:
40:e6:bf:90:c3:a9:01:20:a1:46:d8:42:82:ea:11:
6c:f1:f8:a1:f2:02:4e:75:ba:b0:63:14:dc:bd:2d:
1b:e5:c3:fc:dd:0f:c7:ff:7c:2e:4b:11:fa:ad:6d:
9e:51:99:aa:d6:4b:13:f2:3e:c6:96:40:98:5f:1e:
a5:59:e0:7e:f1:81:fa:aa:f4:88:24:26:23:0b:ac:
62:47:f9:b9:47:83:17:f5:c3:e4:a8:bc:18:10:db:
c2:c0:c0:e4:ac:39:9a:54:cd:1b:86:e8:54:6b:d2:
fa:81:90:1b:94:55:c4:a8:c7:51:58:3f:8c:a4:dc:
86:42:d6:09:31:6b:e9:c8:00:7c:64:e9:4d:2b:04:
25:23:28:8a:aa:ac:66:d4:f3:58:4e:d0:bf:99:18:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:0A:1A:8C:6F:5A:1B:C2:00:3F:AB:FE:EE:9B:34:BC:74:AC:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qMwKGoxvWhvCAD-r_u6bNLx0rPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.248.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0-185.47.142.255
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
45:ad:4e:fe:c7:32:f1:46:09:06:d5:38:63:56:ee:d1:e8:69:
89:8c:c8:48:ce:43:ad:7a:c4:37:64:66:e8:8b:04:c9:4e:85:
3a:ec:e5:e9:13:f9:0e:7f:d7:65:bf:74:28:30:76:f3:04:01:
62:86:3b:03:00:6a:e4:5e:70:ae:40:a7:7d:b9:59:80:be:bc:
06:c1:58:b0:c9:78:2a:6d:c0:63:d7:b9:8f:60:37:18:ca:87:
c4:ec:56:24:c7:90:3f:ba:b3:7e:cb:c0:87:9a:d2:6d:20:5d:
81:b9:25:9e:a5:15:4d:b6:55:37:9c:47:9f:5a:fc:17:ac:80:
6d:f5:62:4c:df:47:95:2b:6c:05:2f:2a:3c:5f:53:0c:ed:45:
f5:2d:28:9a:ba:78:09:44:34:3b:ca:4a:1a:eb:a8:49:3c:61:
84:a7:f0:32:11:7d:4d:9c:09:15:89:d6:e6:77:02:41:0e:85:
d0:26:11:ee:1b:5d:ce:30:4b:80:82:f7:5c:cf:09:9b:15:4e:
16:be:29:ec:03:1c:cc:1b:a6:dc:56:6a:92:bb:18:90:08:c0:
2c:33:b5:60:b5:73:b8:cd:e8:83:be:e0:cf:3f:6f:a1:7e:7a:
18:d3:d3:b3:e3:8f:33:35:59:d6:c9:06:f9:7c:9b:7b:d7:51:
20:b5:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:06 2025 by rpki-client