Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/E5A0Om5HQTOWpCFJP6MNF4tGP6k.roa
File: E5A0Om5HQTOWpCFJP6MNF4tGP6k.roa (raw, json)
Hash identifier: kcaSpObHh2T6MG/OdCVzpA2YaQ5c0aODFuod9nAtoZI=
Subject key identifier: 13:90:34:3A:6E:47:41:33:96:A4:21:49:3F:A3:0D:17:8B:46:3F:A9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01963326C07D16D016DACE52E6ACAD332AA8
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/E5A0Om5HQTOWpCFJP6MNF4tGP6k.roa
Signing time: Mon 14 Apr 2025 07:14:59 +0000
ROA not before: Mon 14 Apr 2025 07:14:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12338
IP address blocks: 5.159.128.0/18 maxlen: 23
37.218.0.0/17 maxlen: 17
62.99.0.0/17 maxlen: 17
81.9.128.0/17 maxlen: 24
82.130.128.0/17 maxlen: 24
83.213.0.0/16 maxlen: 22
85.84.0.0/16 maxlen: 22
85.85.0.0/16 maxlen: 22
85.86.0.0/16 maxlen: 16
85.87.0.0/16 maxlen: 24
91.116.0.0/18 maxlen: 24
91.116.0.0/19 maxlen: 19
91.116.0.0/22 maxlen: 22
91.116.4.0/24 maxlen: 24
91.116.16.0/20 maxlen: 20
91.116.32.0/21 maxlen: 21
91.116.32.0/22 maxlen: 22
91.116.36.0/24 maxlen: 24
91.116.38.0/24 maxlen: 24
91.116.40.0/22 maxlen: 22
91.116.44.0/22 maxlen: 22
91.116.48.0/21 maxlen: 21
91.116.56.0/21 maxlen: 21
178.60.64.0/18 maxlen: 18
178.60.64.0/21 maxlen: 21
178.60.64.0/22 maxlen: 22
178.60.68.0/24 maxlen: 24
178.60.69.0/24 maxlen: 24
178.60.70.0/24 maxlen: 24
178.60.71.0/24 maxlen: 24
178.60.72.0/24 maxlen: 24
178.60.73.0/24 maxlen: 24
178.60.76.0/22 maxlen: 22
178.60.80.0/22 maxlen: 22
178.60.96.0/21 maxlen: 21
178.60.104.0/22 maxlen: 22
178.60.108.0/22 maxlen: 22
178.60.112.0/22 maxlen: 22
178.60.116.0/24 maxlen: 24
178.60.117.0/24 maxlen: 24
178.60.118.0/24 maxlen: 24
178.60.120.0/24 maxlen: 24
178.60.121.0/24 maxlen: 24
178.60.122.0/23 maxlen: 23
185.116.180.0/22 maxlen: 22
212.8.64.0/18 maxlen: 18
212.55.0.0/19 maxlen: 19
212.142.128.0/17 maxlen: 17
2a00:7b00::/29 maxlen: 29
2a00:7b00::/40 maxlen: 40
2a00:7b00:10::/48 maxlen: 48
2a00:7b00:11::/48 maxlen: 48
2a00:7b00:12::/48 maxlen: 48
2a00:7b00:13::/48 maxlen: 48
2a00:7b00:14::/48 maxlen: 48
2a00:7b00:15::/48 maxlen: 48
2a00:7b00:16::/48 maxlen: 48
2a00:7b00:17::/48 maxlen: 48
2a00:7b00:18::/48 maxlen: 48
2a00:7b00:19::/48 maxlen: 48
2a00:7b00:c10::/48 maxlen: 48
2a00:7b00:b000::/40 maxlen: 40
2a00:7b00:c000::/40 maxlen: 40
2a00:7b00:c800::/40 maxlen: 40
2a00:7b00:d000::/40 maxlen: 40
2a00:7b00:d800::/40 maxlen: 40
2a00:7b00:e000::/40 maxlen: 40
2a00:7b00:e800::/40 maxlen: 40
2a00:7b00:ef00::/40 maxlen: 40
2a00:7b00:f000::/40 maxlen: 40
2a00:7b00:f800::/40 maxlen: 40
2a00:7b00:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 14 Apr 2025 07:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:26:c0:7d:16:d0:16:da:ce:52:e6:ac:ad:33:2a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Apr 14 07:14:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1390343a6e47413396a421493fa30d178b463fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:e7:be:25:e5:3a:fc:5c:d4:a3:71:fe:fb:
fd:f3:72:30:28:41:5e:69:b0:fb:ff:35:b1:75:b4:
71:b4:c1:79:bd:ae:80:7c:8e:49:b0:8e:f7:bc:08:
ee:e1:d3:3b:16:c1:fc:fa:b9:34:86:55:4a:70:58:
66:7d:9c:0e:b5:21:bb:d9:71:ea:6d:d4:57:cd:90:
3b:60:8d:c1:8a:1f:2a:c3:b5:52:77:43:02:05:8b:
5e:18:63:48:36:fc:4e:7d:ef:2e:af:78:d1:5f:81:
3c:ab:95:7f:f4:c1:c5:a3:39:fb:b5:49:8b:50:8c:
c8:ad:1b:55:4b:8d:5d:60:cb:d1:46:01:08:e6:a9:
32:1c:c0:36:2c:3f:b1:62:d7:9f:ea:5a:2f:a0:e4:
59:a1:9d:22:5e:ee:00:74:9a:e0:1b:b7:7d:00:8b:
5c:02:b3:d6:23:7b:07:2d:41:55:bc:b2:bf:59:45:
6f:d4:02:2e:8b:fd:f2:73:57:1b:4c:74:08:ab:f3:
b4:f2:cb:13:76:02:65:7c:ce:be:2b:36:30:42:f3:
b5:3f:8b:95:5b:18:1b:01:58:22:e4:1c:e8:26:c5:
94:cd:40:da:11:1d:0f:36:6d:8c:bf:db:ff:3c:ad:
3e:de:95:6a:34:7b:c6:6f:f3:66:bb:3c:8a:c0:14:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:34:3A:6E:47:41:33:96:A4:21:49:3F:A3:0D:17:8B:46:3F:A9
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/E5A0Om5HQTOWpCFJP6MNF4tGP6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.128.0/18
37.218.0.0/17
62.99.0.0/17
81.9.128.0/17
82.130.128.0/17
83.213.0.0/16
85.84.0.0/14
91.116.0.0/18
178.60.64.0/18
185.116.180.0/22
212.8.64.0/18
212.55.0.0/19
212.142.128.0/17
IPv6:
2a00:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
37:54:69:56:63:32:c9:bf:24:26:25:2e:2f:23:27:be:1c:fb:
19:6f:ba:ae:43:d3:f5:2f:62:28:d7:92:bc:fb:09:15:f0:7e:
57:dd:48:8f:b6:d1:e9:f4:38:2a:67:4a:90:3c:b7:dc:c6:a1:
ca:e8:b0:ed:d0:6f:76:3e:2f:8e:8b:8b:80:0b:70:ff:b3:c2:
e1:8e:14:97:2b:2d:30:22:fe:7d:fc:9a:4e:3b:ae:96:98:57:
58:dd:99:be:b1:ae:99:2d:87:50:d5:2d:4b:04:32:1f:d8:7d:
17:f2:9a:1c:b6:d3:3e:9a:25:1f:7c:ef:b2:4d:7d:a1:d9:d6:
5c:e2:07:8c:d0:c8:a6:f5:83:2c:bd:d9:d0:69:da:df:32:fc:
d6:04:f3:19:9e:be:80:8c:cb:49:68:a7:d7:dc:db:90:ba:56:
d9:19:e9:12:52:d1:cb:57:bc:a7:c9:f3:94:6d:9a:57:1c:cc:
d8:5a:4d:dc:4f:37:f7:22:e4:d9:a6:a9:26:38:40:27:8b:cb:
15:f7:d0:82:2c:20:a8:f9:d1:4c:a9:6a:70:d2:e4:99:2e:fd:
e5:6b:ca:af:95:8b:b9:42:f3:0f:ca:ae:4f:1a:e5:6c:8e:1a:
f5:f8:fd:5d:ad:fb:63:46:9d:03:b4:9f:33:f6:35:b2:bb:cc:
bc:17:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:53 2025 by rpki-client