Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6odvBfJNI0Y8IUvIVArvD1DpLbA.roa
File: 6odvBfJNI0Y8IUvIVArvD1DpLbA.roa (raw, json)
Hash identifier: eBfo8DHpOhVomkgITXGf24LYGwL3mV6USqp4xLKCxoQ=
Subject key identifier: EA:87:6F:05:F2:4D:23:46:3C:21:4B:C8:54:0A:EF:0F:50:E9:2D:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019543E7DA67E8662F34227B206B1E572C0C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6odvBfJNI0Y8IUvIVArvD1DpLbA.roa
Signing time: Wed 26 Feb 2025 20:17:02 +0000
ROA not before: Wed 26 Feb 2025 20:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 27 Feb 2025 05:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:e7:da:67:e8:66:2f:34:22:7b:20:6b:1e:57:2c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 26 20:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea876f05f24d23463c214bc8540aef0f50e92db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:00:d1:0c:8e:75:0c:f2:9d:43:94:da:2d:
91:e1:c9:3c:05:1c:8f:96:0c:f9:2a:62:af:36:81:
55:38:f3:ff:4d:e6:23:ac:f9:01:db:55:e4:4e:1b:
20:04:bb:5a:c0:67:8c:16:c7:f3:1c:4a:59:2f:cb:
41:3f:5d:fe:a0:05:1a:cd:ee:d3:e7:e6:65:67:0e:
41:a8:39:7e:6f:e6:60:49:e5:b9:32:bc:10:e2:c9:
a0:79:fe:c8:86:b0:04:71:37:77:b7:42:57:9c:96:
ec:b4:72:55:f4:01:53:72:b5:7b:3f:84:bd:53:42:
3e:96:41:80:e7:60:f5:91:47:11:5e:e9:8e:ce:11:
d7:58:24:13:db:c8:94:e9:e4:32:f3:ac:43:bc:d0:
42:bc:a8:53:d3:29:af:e6:90:81:0f:26:0d:b3:2d:
88:f0:0f:6c:4e:fe:65:c7:fb:60:e4:76:07:19:eb:
a8:ad:12:c8:13:2e:1a:66:ce:68:3d:11:78:1e:56:
5c:2c:ba:76:03:47:da:90:d6:3e:43:91:3b:42:b1:
e0:48:08:3d:29:3b:cb:97:a6:95:0d:84:78:50:26:
67:fd:69:ae:fd:2d:75:65:48:d0:84:38:77:7f:1a:
92:cf:09:ce:0c:15:31:f8:f6:b1:a5:07:63:06:db:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:6F:05:F2:4D:23:46:3C:21:4B:C8:54:0A:EF:0F:50:E9:2D:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6odvBfJNI0Y8IUvIVArvD1DpLbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
d4:d2:a0:34:da:ad:0c:e6:f6:af:87:99:20:74:e6:64:e7:a4:
ba:41:8e:59:a1:57:b1:a5:44:3f:74:10:7c:bd:1a:69:ef:20:
ce:e5:8f:55:0d:f7:cf:68:68:cd:dc:64:61:b4:a9:1c:96:34:
ee:19:81:95:cc:00:c3:d3:cf:ab:c8:59:cc:c9:62:25:08:3e:
89:2b:f6:63:6c:50:9c:ef:60:c7:ea:71:ab:61:a9:5a:99:18:
5c:d6:0e:6e:90:aa:0d:2d:72:62:21:e8:28:8b:61:a0:5f:74:
cd:de:b4:7b:2c:7f:63:d9:d2:76:ce:33:c1:29:41:68:01:34:
a9:50:bd:b0:b7:0c:85:6f:32:e4:d3:80:48:ef:f5:32:17:8b:
27:e9:0d:fd:89:6d:54:ad:e7:f7:92:ab:e3:48:26:bb:d3:31:
40:25:0d:ab:d3:9c:cd:f5:eb:05:08:1a:22:b5:93:bf:1e:a2:
78:69:8f:f6:87:e3:f2:d5:a0:2b:b6:fe:41:f4:73:9d:73:93:
15:9d:88:97:fe:b9:f5:e9:86:b9:20:8a:cc:d7:d4:0b:8b:6f:
61:53:44:0f:d5:4e:7c:90:ad:48:d6:1a:e9:2f:6d:70:14:7c:
f4:09:26:47:e6:de:fa:01:4f:e4:1e:f6:9e:fb:c8:3d:31:e1:
6f:26:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:56 2025 by rpki-client