Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/26r-po-gIiYI9Svlvn0RniQg3E4.roa
File: 26r-po-gIiYI9Svlvn0RniQg3E4.roa (raw, json)
Hash identifier: ckoKNHNrM/5DsBEThsrfnCbrVsxMEDewcCa3fb3TT/I=
Subject key identifier: DB:AA:FE:A6:8F:A0:22:26:08:F5:2B:E5:BE:7D:11:9E:24:20:DC:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194AB4D71459C5B7DD734044EFA03DABC23
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/26r-po-gIiYI9Svlvn0RniQg3E4.roa
Signing time: Tue 28 Jan 2025 05:06:06 +0000
ROA not before: Tue 28 Jan 2025 05:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.246.0/24 maxlen: 24
5.175.247.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:4d:71:45:9c:5b:7d:d7:34:04:4e:fa:03:da:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 28 05:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbaafea68fa0222608f52be5be7d119e2420dc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:5e:ec:7f:f4:b4:e7:85:91:35:b8:9a:1a:
78:70:2e:9a:b4:c6:6e:47:95:ea:7b:01:45:f5:86:
91:f4:ce:83:8b:e7:85:a2:c6:94:ea:13:46:d2:a6:
35:ec:80:ce:5e:09:14:5f:9f:73:00:07:3a:31:1f:
17:96:18:3a:91:8c:ed:0f:6a:1a:e7:e3:3a:9b:d8:
11:ad:41:1d:52:b0:11:b3:3d:4e:ea:1d:fc:b7:2b:
47:03:f6:74:a7:f6:ff:ba:3a:f9:95:97:48:bf:2f:
b3:94:dd:7b:8b:49:bd:35:2d:a9:8b:b1:da:66:e8:
70:cc:bb:79:75:aa:b0:b3:51:9b:33:3b:ba:8d:73:
a4:9f:dd:fc:1a:fa:64:2b:7b:2c:10:93:a3:61:40:
78:41:3a:6e:53:71:0c:20:ca:53:e1:58:af:86:02:
74:36:e8:7a:da:e1:8f:03:65:37:24:ec:f5:79:c9:
e1:db:86:49:d4:bb:1c:6f:fc:92:09:83:2f:7a:d2:
68:29:f3:20:3b:91:44:75:d0:b4:78:af:10:24:8a:
86:e9:d4:86:83:b2:25:2f:97:ae:d7:36:73:df:a8:
93:4d:c9:a7:75:38:8d:13:e8:9c:61:6f:fb:d3:c3:
4f:ed:db:07:4a:39:4a:34:39:f5:47:eb:29:6d:e7:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:FE:A6:8F:A0:22:26:08:F5:2B:E5:BE:7D:11:9E:24:20:DC:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/26r-po-gIiYI9Svlvn0RniQg3E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0-5.175.244.255
5.175.246.0/23
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:10:f7:5c:57:13:b1:50:d6:ae:d6:9e:c4:40:f8:47:cf:14:
88:3b:e5:72:b9:b5:94:34:61:95:33:1d:0b:dd:57:15:6c:27:
41:ad:60:86:75:32:53:3e:58:21:06:11:1c:37:6c:45:fd:7c:
5c:55:a4:2c:64:f9:4b:75:48:7a:1c:43:85:7a:16:66:ff:b6:
92:4f:5d:cf:f8:ae:37:82:95:93:28:74:2f:15:45:cd:a2:66:
cd:95:8f:62:96:95:6b:d0:59:84:f8:63:a6:2a:2c:dd:8c:56:
2b:c7:e6:90:89:4a:39:ee:e6:b0:4b:7e:8e:aa:0b:63:e5:42:
be:35:a5:19:6f:c2:42:04:b9:88:f6:77:8f:1d:bd:cc:2a:cc:
40:fd:37:81:34:4b:3f:b0:9c:d4:e1:7f:46:9f:64:7f:ef:41:
02:70:12:18:df:3c:1c:75:04:8b:ee:5e:90:7c:75:bb:4f:06:
ee:0a:54:9c:fb:18:4f:15:e6:b0:4c:12:84:5c:21:ea:69:64:
fd:5f:f6:41:3c:30:c1:ca:5e:77:98:50:dd:ce:21:00:4e:ca:
e2:b1:81:0c:7f:94:da:fc:1d:d7:4c:4e:cd:8e:4d:11:55:5f:
4b:7a:6e:4f:33:67:d2:92:a9:a9:40:31:98:1d:4d:1b:a2:8f:
2b:d6:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:45:14 2025 by rpki-client