Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AGIpT87t4p8xsr5ytCyvKY1a4B8.roa
File: AGIpT87t4p8xsr5ytCyvKY1a4B8.roa (raw, json)
Hash identifier: 2MD76CKw645XuLXgtJLCpjGy6CLNqTGkxmy/w5M/vN8=
Subject key identifier: 00:62:29:4F:CE:ED:E2:9F:31:B2:BE:72:B4:2C:AF:29:8D:5A:E0:1F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01944CC0EB432F665BB4D264845F1C5C4C20
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AGIpT87t4p8xsr5ytCyvKY1a4B8.roa
Signing time: Thu 09 Jan 2025 20:28:19 +0000
ROA not before: Thu 09 Jan 2025 20:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.44.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 10 Jan 2025 19:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:c0:eb:43:2f:66:5b:b4:d2:64:84:5f:1c:5c:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 9 20:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0062294fceede29f31b2be72b42caf298d5ae01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:47:6a:3a:a6:89:41:63:d7:40:f5:12:38:
7b:0c:c8:c9:d4:17:e1:f5:79:66:7f:c0:c2:e7:66:
84:a9:4e:b3:8c:42:ac:e1:81:de:31:9b:99:c5:a4:
a5:8a:bc:9f:9c:27:57:b9:1c:d3:65:5d:75:c4:e8:
3e:b2:40:7d:0b:46:02:3f:85:af:ef:58:08:39:24:
29:09:7a:6c:bd:e0:c2:f7:26:51:02:22:9e:c6:f4:
88:dc:9d:7f:6d:3c:89:d9:a8:7a:bb:a4:8b:6f:bd:
15:bb:dc:80:0f:6d:59:45:a8:ae:08:0d:64:fb:b9:
62:d3:1d:d9:5f:79:b2:5a:e7:ab:41:57:91:cc:a5:
1c:83:fa:21:fc:78:86:db:a0:b5:90:0c:9d:aa:1f:
5f:20:9b:be:b3:dc:b9:46:78:2c:10:38:6a:78:8a:
6c:45:9e:26:89:aa:4f:a3:65:96:e8:18:0e:29:00:
2c:54:7d:51:e4:95:09:ea:a1:dd:90:35:f2:24:c5:
f0:61:30:0e:c4:80:8b:9d:1c:d5:9e:1a:19:7a:ae:
35:5d:d6:3c:d0:7f:d6:d9:bb:59:5f:54:61:90:2e:
9a:bb:b1:4f:dc:32:56:4a:a7:58:0c:9e:d4:0e:d6:
c0:43:13:a4:3b:40:81:b2:93:c8:1e:74:46:12:b3:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:29:4F:CE:ED:E2:9F:31:B2:BE:72:B4:2C:AF:29:8D:5A:E0:1F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AGIpT87t4p8xsr5ytCyvKY1a4B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:08:61:a9:ad:67:e8:03:61:c8:c3:0e:d3:1a:aa:b6:73:d0:
10:0f:42:5e:2e:98:92:ce:bc:5e:a8:aa:07:69:fc:88:5f:4a:
1c:f7:63:fa:5e:ca:e3:d1:2f:a3:74:f7:63:1c:a6:36:79:a3:
a7:e5:a4:3c:ed:be:2a:a1:ab:70:f4:aa:7a:bc:a5:8a:dc:1b:
98:76:4f:1b:c3:55:ea:54:cf:5d:77:5a:d0:fe:22:39:6c:ba:
80:37:65:34:ec:41:78:86:50:a0:bf:34:0c:64:63:1b:16:86:
07:5a:bf:b6:39:c5:c7:b3:3a:c8:b7:8f:f7:9b:fe:56:c7:04:
62:14:76:3f:50:f7:48:1d:cb:5e:61:16:27:6f:b3:97:a2:73:
a1:3a:65:8b:b8:79:e4:8b:8c:39:34:62:83:38:e7:45:56:5c:
8e:4b:4c:06:34:15:3f:3f:f4:6f:08:70:de:3c:a8:e2:74:a9:
7e:29:e9:7a:6e:cd:c0:54:1f:e7:aa:fa:b2:5b:c7:08:f2:65:
f7:7e:9c:48:21:36:ef:13:58:9c:1c:6f:f2:df:4e:81:56:ef:
e1:5c:10:bd:84:3c:a6:4a:21:88:36:21:ce:9d:4c:f9:38:b0:
44:07:b3:2b:b7:db:f2:d7:b2:0f:1a:a3:dd:07:4f:49:72:11:
e0:e1:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:27:01 2025 by rpki-client