Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/55CbwryWEEfVKHHNVmgAKlwOGwI.roa
File: 55CbwryWEEfVKHHNVmgAKlwOGwI.roa (raw, json)
Hash identifier: hjeThfG4O3slFM0smUaU4aJ2S8p2rntkqrj9IlvPskI=
Subject key identifier: E7:90:9B:C2:BC:96:10:47:D5:28:71:CD:56:68:00:2A:5C:0E:1B:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193E2805F5CE1A32AE415C21C510A727F19
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/55CbwryWEEfVKHHNVmgAKlwOGwI.roa
Signing time: Fri 20 Dec 2024 05:18:04 +0000
ROA not before: Fri 20 Dec 2024 05:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Dec 2024 05:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:80:5f:5c:e1:a3:2a:e4:15:c2:1c:51:0a:72:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 20 05:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7909bc2bc961047d52871cd5668002a5c0e1b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:75:c6:de:79:2a:3a:f5:a3:84:c8:24:ca:
ae:84:97:c4:61:51:30:a3:f7:8e:e4:db:8d:70:52:
26:9c:88:44:8f:e0:85:3c:0d:29:28:c1:7e:e2:d9:
12:e1:61:29:eb:7b:09:4b:5f:8b:11:35:af:e9:ab:
0f:a3:39:b0:70:25:42:ee:46:82:f7:fe:82:8d:e2:
d0:93:f9:16:15:10:c3:e0:d6:02:63:55:39:d0:70:
8a:b5:8a:a9:c7:dd:39:46:0f:e4:22:3e:e6:0c:90:
a7:43:d1:ff:91:c4:03:14:da:80:5f:51:08:c8:55:
a9:76:a0:20:10:8a:8a:d1:35:59:c4:62:58:87:ca:
a8:06:a8:15:03:e6:49:82:30:2e:e3:8f:18:5c:cb:
3f:31:cb:67:37:5c:44:81:91:39:69:12:66:7f:bb:
30:8c:16:8b:11:92:0a:bc:04:3f:5c:56:93:97:43:
1f:01:52:e6:1c:f9:6a:47:be:bc:58:b0:41:4c:b7:
84:80:9e:bd:a4:ee:b9:57:5e:29:f3:aa:b2:47:64:
5e:c6:21:7c:e9:a8:94:8b:0a:79:48:b1:7e:1e:df:
89:f6:9e:cd:12:11:ca:92:57:6d:cd:8d:4a:2d:31:
03:ec:fa:99:82:6e:f0:2a:c8:bb:75:7f:8f:cd:4e:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:9B:C2:BC:96:10:47:D5:28:71:CD:56:68:00:2A:5C:0E:1B:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/55CbwryWEEfVKHHNVmgAKlwOGwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:21:c4:6c:a0:5f:17:8e:7a:b6:81:1c:13:1d:a7:33:11:57:
4b:54:af:64:53:36:1a:7c:95:e1:a1:c8:9c:c6:8c:7c:ed:f8:
cd:7f:f1:10:2e:1b:5e:12:e3:df:6f:48:a0:9e:b7:e6:3b:4b:
9a:62:0e:32:23:90:65:af:3b:fc:d4:4d:ec:44:ab:37:cf:90:
51:f8:96:ae:dc:21:5e:ee:a6:ff:5f:ca:4b:b1:d8:fb:11:fe:
86:3c:f1:8f:08:94:67:45:95:6a:81:84:55:78:d9:b0:e7:c4:
44:7b:9a:e4:64:87:3b:77:66:94:40:e1:c2:0c:d1:22:51:8b:
c8:97:87:d5:40:25:e9:23:1b:02:17:6d:d4:13:bf:e7:e4:d8:
86:f5:a6:65:2d:03:6a:10:df:06:d6:54:c8:eb:92:cf:55:0c:
e7:08:93:fe:6c:c5:36:e4:3e:38:c7:1b:5d:ce:95:99:91:fb:
ef:80:25:ff:00:cd:83:5e:27:dc:78:54:5c:88:16:86:b3:b2:
b6:2a:04:d9:f2:68:9e:de:52:39:5c:6a:74:9b:ca:fe:74:4c:
83:a0:41:42:96:5c:e8:45:00:16:fa:7c:01:2a:ae:bd:47:65:
30:92:08:c6:cc:e3:9c:ce:61:7a:25:af:73:22:e2:70:ae:99:
c9:06:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:38 2025 by rpki-client