Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4v4N28079jdiRiC0ihyxeGwrJN8.roa
File: 4v4N28079jdiRiC0ihyxeGwrJN8.roa (raw, json)
Hash identifier: LQD6ydg2LDgB+oP/geFSpmcsagqOrFcerUaltdqY/0g=
Subject key identifier: E2:FE:0D:DB:CD:3B:F6:37:62:46:20:B4:8A:1C:B1:78:6C:2B:24:DF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194F724F8875658EE6AC94EF2A0FB97311E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4v4N28079jdiRiC0ihyxeGwrJN8.roa
Signing time: Tue 11 Feb 2025 22:33:02 +0000
ROA not before: Tue 11 Feb 2025 22:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.159.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
89.144.61.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 12 Feb 2025 05:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:24:f8:87:56:58:ee:6a:c9:4e:f2:a0:fb:97:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 11 22:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2fe0ddbcd3bf637624620b48a1cb1786c2b24df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:6d:ef:e6:ea:49:d8:8f:10:ed:a4:f6:1e:
78:66:0f:76:e9:6d:33:0c:cb:5e:85:c7:52:16:d2:
91:88:01:0b:a5:77:78:bd:49:32:05:40:b2:01:47:
04:34:66:a5:b5:ff:47:5d:fa:09:4d:02:5d:90:63:
40:a5:f7:f7:e3:b2:a3:b6:3d:7e:5a:fa:7f:12:b4:
e7:21:17:3d:a6:8e:34:32:b6:09:e1:be:6c:9d:18:
bf:61:a5:55:77:3e:10:75:f3:15:31:89:50:37:dd:
93:96:dd:af:fb:05:40:9f:ff:15:0b:30:9e:34:f2:
15:2f:14:d2:62:ef:2d:f0:03:5e:61:ca:f0:c6:98:
fe:40:d1:4c:45:01:0e:34:6a:c7:37:5f:30:f6:0f:
c4:e3:56:07:ce:92:2f:94:be:e3:71:a3:be:b0:72:
03:d7:1f:9c:ac:80:7d:91:dc:98:fa:fb:81:a4:be:
63:3d:cc:f4:c9:fd:c9:cf:d2:35:71:59:4f:15:84:
b7:e4:79:17:a0:4f:ff:7c:57:d8:04:17:26:e5:d2:
fa:00:41:86:b6:fc:fc:f1:20:a6:cb:32:55:a7:49:
9e:0e:23:8e:c3:2a:21:1b:29:f4:18:78:c0:eb:4e:
75:6e:5d:0b:8b:5a:c6:6e:ad:cb:0e:f3:fa:85:cf:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:0D:DB:CD:3B:F6:37:62:46:20:B4:8A:1C:B1:78:6C:2B:24:DF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4v4N28079jdiRiC0ihyxeGwrJN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
39:46:92:29:9c:4a:a8:83:3b:4b:59:4d:6f:50:80:39:0c:83:
0a:ff:f9:86:e7:5d:0c:52:69:1a:45:0d:c5:c4:0e:6d:a8:9e:
a4:31:25:d9:29:80:fe:2f:71:6b:6e:e7:1f:50:82:e9:d4:6b:
1b:db:24:92:31:55:28:cd:c7:4a:a3:b0:a4:1f:59:4c:7a:f7:
41:2c:7b:db:4d:7e:ca:62:df:31:bf:43:37:42:2c:67:7e:8e:
e1:2f:c2:88:1d:bb:82:78:86:bb:6f:a7:07:d6:d8:c7:cc:66:
a6:57:f6:ed:59:e9:69:32:cd:f0:25:45:b1:2a:4b:50:40:a9:
5d:47:67:46:cb:11:24:15:1d:ce:f2:1b:75:fe:82:f6:0f:a2:
3c:fd:1a:e4:8a:03:b0:73:9b:82:e5:44:d3:db:51:40:a1:73:
cb:1b:28:c0:4f:c0:5b:47:4f:76:8a:e8:76:be:0a:00:db:c8:
5f:45:e0:dd:00:65:f8:7a:32:76:ce:bb:16:82:92:d0:7f:c1:
d1:c8:37:53:bb:fa:08:82:6d:17:31:d4:d7:25:78:05:26:84:
84:64:fe:a6:03:4d:55:55:f7:d0:9f:42:ef:3c:0f:74:4e:da:
ee:89:80:3a:ad:5a:c1:63:6f:68:44:9a:f0:99:ae:d2:a9:0f:
45:b5:73:2b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZT3JPiHVljuaslO8qD7lzEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjExMjIzMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmZlMGRkYmNkM2JmNjM3NjI0NjIwYjQ4YTFjYjE3ODZjMmIyNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uxt7+bqSdiPEO2k9h54Zg926W0z
DMtehcdSFtKRiAELpXd4vUkyBUCyAUcENGaltf9HXfoJTQJdkGNApff347Kjtj1+
Wvp/ErTnIRc9po40MrYJ4b5snRi/YaVVdz4QdfMVMYlQN92Tlt2v+wVAn/8VCzCe
NPIVLxTSYu8t8ANeYcrwxpj+QNFMRQEONGrHN18w9g/E41YHzpIvlL7jcaO+sHID
1x+crIB9kdyY+vuBpL5jPcz0yf3Jz9I1cVlPFYS35HkXoE//fFfYBBcm5dL6AEGG
tvz88SCmyzJVp0meDiOOwyohGyn0GHjA6051bl0Li1rGbq3LDvP6hc93eQIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFOL+DdvNO/Y3YkYgtIocsXhsKyTfMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNHY0TjI4MDc5amRpUmlDMGloeXhlR3dySk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCBzQQCAAEwgcYD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr4oDBAEFr44wDAMEAQWv2gMEAAWv3DAMAwQA
Ba/hAwQABa/oAwQABa/rMAwDBAQFr/ADBAAFr/QwCwMEAAWv+wMDBAWgAwMBBeYD
BAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakADBAZZkAADBAReZ6AD
BAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcDBADBHPsDBAHDbg4D
BATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMFAyoBvUADBQMqAgeg
AwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAOUaSKZxKqIM7S1lNb1CAOQyDCv/5
huddDFJpGkUNxcQObaiepDEl2SmA/i9xa27nH1CC6dRrG9skkjFVKM3HSqOwpB9Z
THr3QSx7201+ymLfMb9DN0IsZ36O4S/CiB27gniGu2+nB9bYx8xmplf27VnpaTLN
8CVFsSpLUECpXUdnRssRJBUdzvIbdf6C9g+iPP0a5IoDsHObguVE09tRQKFzyxso
wE/AW0dPdorodr4KANvIX0Xg3QBl+Hoyds67FoKS0H/B0cg3U7v6CIJtFzHU1yV4
BSaEhGT+pgNNVVX30J9C7zwPdE7a7omAOq1awWNvaESa8Jmu0qkPRbVzKw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:19 2025 by rpki-client