Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zD-DezeVJ4RD7Z2LkdJh8NCI1QE.roa
File: zD-DezeVJ4RD7Z2LkdJh8NCI1QE.roa (raw, json)
Hash identifier: vRhO0zV2iqU8jKR+AqnbJc3iBZSVNqxYa60VYS8O6PM=
Subject key identifier: CC:3F:83:7B:37:95:27:84:43:ED:9D:8B:91:D2:61:F0:D0:88:D5:01
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196E42F59FB723AA1A829AC6D926D2FD12E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zD-DezeVJ4RD7Z2LkdJh8NCI1QE.roa
Signing time: Sun 18 May 2025 16:17:10 +0000
ROA not before: Sun 18 May 2025 16:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.210.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 17:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:2f:59:fb:72:3a:a1:a8:29:ac:6d:92:6d:2f:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 18 16:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc3f837b3795278443ed9d8b91d261f0d088d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:c3:1c:52:47:2d:c7:e1:59:06:04:93:ba:
43:fe:95:96:6a:70:92:42:0f:0a:80:03:14:6b:26:
21:12:f7:f6:a3:d0:40:58:93:ef:10:0a:31:1c:04:
4b:f9:b7:3a:84:d3:30:61:52:49:21:f6:3d:e2:7c:
d7:a9:a3:dc:cc:51:84:49:c3:ad:dc:22:cd:18:6c:
83:2f:df:cc:7d:ff:e7:d5:a5:e1:a2:44:f7:f3:4c:
b7:78:0c:28:71:86:a9:45:09:77:dc:b0:66:d8:95:
75:5b:4e:13:bd:2f:71:2a:0a:5a:4a:65:5a:15:75:
33:46:99:ed:92:34:5c:cc:48:b9:b9:56:62:25:74:
b3:e0:11:81:ea:a4:72:8d:2f:03:65:0f:c1:31:6a:
47:51:50:f4:e3:32:4e:b3:b9:37:cf:cd:df:b3:24:
fd:9d:0f:1a:1a:cf:c1:c0:23:a3:f6:82:7e:d4:14:
99:7c:ac:06:4f:d3:42:bf:bd:73:bd:04:aa:37:45:
ca:12:4a:79:13:1a:70:f9:c1:6a:5f:e2:45:dd:d9:
8a:85:e7:f6:98:9a:6c:80:c7:9e:7d:49:36:ec:1f:
c2:c7:27:46:09:84:b3:f8:9a:66:0d:ef:ce:fb:f3:
f9:87:f8:03:dc:a0:57:38:9c:53:e7:f2:00:2f:fd:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:83:7B:37:95:27:84:43:ED:9D:8B:91:D2:61:F0:D0:88:D5:01
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zD-DezeVJ4RD7Z2LkdJh8NCI1QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.204.0/23
5.175.209.0-5.175.214.255
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
5.231.113.0/24
5.231.240.0-5.231.248.255
85.93.5.0/24
85.93.21.0/24
85.93.31.0/24
89.106.90.0/24
89.144.5.0/24
94.249.168.0/23
94.249.180.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ef:8c:cc:bf:63:6b:d6:82:89:16:9f:74:e2:98:2e:e0:ba:
ce:fd:be:b0:e5:75:98:39:69:c0:19:a7:99:d4:18:7d:f4:91:
62:c7:2f:0a:17:b0:e0:95:cc:8a:cf:5d:88:6a:28:e8:c6:0f:
bf:ea:38:11:42:21:1b:08:94:22:db:c5:d1:ba:97:cf:a8:e2:
66:a6:a3:00:93:73:c9:30:cd:49:24:a2:11:51:1e:5a:f6:16:
c1:68:ca:0c:ea:73:12:4c:e0:44:76:f7:f6:35:46:9f:f2:53:
3b:d4:fe:55:90:91:57:50:d8:27:89:eb:4b:5b:8f:ad:80:5c:
dd:7a:e1:ac:e3:9d:3e:c3:a0:87:28:9b:31:ef:69:7b:06:53:
c7:06:02:50:5c:4f:28:07:73:d3:99:cb:3e:68:6f:cb:86:27:
05:e7:59:e4:80:2c:cb:0f:bf:c5:da:41:fd:85:7d:5d:4a:14:
fc:89:e5:50:ff:3e:dd:89:7e:19:a4:83:19:b1:bd:b4:f2:4d:
2c:6d:c5:9f:5d:01:27:4c:6c:61:65:9e:9d:09:58:36:09:ce:
af:f7:27:1e:9a:bd:43:e2:58:34:1c:2c:73:86:48:14:5f:97:
90:df:9d:f1:d1:5d:5a:15:69:04:3d:4d:63:bd:41:6e:94:2f:
6a:d7:1b:fa
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZbkL1n7cjqhqCmsbZJtL9EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTE4MTYxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzNmODM3YjM3OTUyNzg0NDNlZDlkOGI5MWQyNjFmMGQwODhkNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67DHFJHLcfhWQYEk7pD/pWWanCS
Qg8KgAMUayYhEvf2o9BAWJPvEAoxHARL+bc6hNMwYVJJIfY94nzXqaPczFGEScOt
3CLNGGyDL9/Mff/n1aXhokT380y3eAwocYapRQl33LBm2JV1W04TvS9xKgpaSmVa
FXUzRpntkjRczEi5uVZiJXSz4BGB6qRyjS8DZQ/BMWpHUVD04zJOs7k3z83fsyT9
nQ8aGs/BwCOj9oJ+1BSZfKwGT9NCv71zvQSqN0XKEkp5Expw+cFqX+JF3dmKhef2
mJpsgMeefUk27B/CxydGCYSz+JpmDe/O+/P5h/gD3KBXOJxT5/IAL/2nwQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFMw/g3s3lSeEQ+2di5HSYfDQiNUBMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvekQtRGV6ZVZKNFJEN1oyTGtkSmg4TkNJMVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAAF
U4oDBAEFr8wwDAMEAAWv0QMEAAWv1gMEAAWv7gMEAAXmpAMEAAXnPTAMAwQABedH
AwQCBedIAwQABedPAwQABedcAwQABedxMAwDBAQF5/ADBAAF5/gDBABVXQUDBABV
XRUDBABVXR8DBABZaloDBABZkAUDBAFe+agDBAFe+bQDBABe+e0wDQYJKoZIhvcN
AQELBQADggEBAEnvjMy/Y2vWgokWn3TimC7gus79vrDldZg5acAZp5nUGH30kWLH
LwoXsOCVzIrPXYhqKOjGD7/qOBFCIRsIlCLbxdG6l8+o4mamowCTc8kwzUkkohFR
Hlr2FsFoygzqcxJM4ER29/Y1Rp/yUzvU/lWQkVdQ2CeJ60tbj62AXN164azjnT7D
oIcomzHvaXsGU8cGAlBcTygHc9OZyz5ob8uGJwXnWeSALMsPv8XaQf2FfV1KFPyJ
5VD/Pt2JfhmkgxmxvbTyTSxtxZ9dASdMbGFlnp0JWDYJzq/3Jx6avUPiWDQcLHOG
SBRfl5DfnfHRXVoVaQQ9TWO9QW6UL2rXG/o=
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:55:05 2025 by rpki-client