Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Eq_Kbu9W2j3l5scpOHAz5MNB0pE.roa
File: Eq_Kbu9W2j3l5scpOHAz5MNB0pE.roa (raw, json)
Hash identifier: jx1gBNyimqw4sfId4K/CByzeY51PnuTMtv4avhEoXec=
Subject key identifier: 12:AF:CA:6E:EF:56:DA:3D:E5:E6:C7:29:38:70:33:E4:C3:41:D2:91
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B153308528B3404AE8A8E94EA1BDBBBE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Eq_Kbu9W2j3l5scpOHAz5MNB0pE.roa
Signing time: Wed 29 Jan 2025 09:10:06 +0000
ROA not before: Wed 29 Jan 2025 09:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.239.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.246.0/24 maxlen: 24
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:53:30:85:28:b3:40:4a:e8:a8:e9:4e:a1:bd:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 29 09:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12afca6eef56da3de5e6c729387033e4c341d291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:05:00:f1:94:8c:54:63:6f:71:38:ba:91:
31:bd:3c:a1:a9:cb:3f:66:56:71:4c:fb:f0:6e:cd:
57:c5:11:a5:dd:4f:27:03:d7:76:72:0f:31:78:e5:
10:c6:5e:e4:62:6d:0b:5a:d9:27:02:4c:38:ea:d9:
74:b4:cd:9b:96:f0:ca:00:bf:ff:29:46:5a:41:b3:
d6:1d:ad:8e:c3:a8:99:29:72:37:04:62:5b:a7:9a:
d9:fd:32:5c:9c:7c:19:26:60:46:25:79:ea:98:78:
22:1f:51:52:f0:8f:35:8f:84:b7:02:21:e5:5e:a1:
ab:69:f8:55:68:d3:12:83:a9:98:cd:b1:b1:48:b7:
4a:bc:75:87:86:71:54:f1:ea:6c:50:7a:a8:12:69:
34:aa:11:c0:1c:d4:78:12:6b:2f:8e:4d:4b:99:2e:
03:19:0b:ce:92:be:06:bb:d2:de:73:3d:4e:04:e2:
6b:f7:72:90:bf:e9:ae:9e:28:a8:ec:a6:25:6d:16:
28:32:86:19:3e:64:19:40:13:15:77:17:32:60:1d:
6f:f4:dc:b9:59:56:76:b3:9f:34:68:35:b5:c3:2b:
79:93:90:10:47:d5:e1:df:10:3f:b3:eb:93:7c:7d:
fc:5b:f6:80:08:25:bf:ac:7b:3d:21:45:00:9e:96:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:CA:6E:EF:56:DA:3D:E5:E6:C7:29:38:70:33:E4:C3:41:D2:91
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Eq_Kbu9W2j3l5scpOHAz5MNB0pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.239.0-5.175.244.255
5.175.246.0/24
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:35:bc:97:01:2d:26:59:18:cb:4a:22:38:ae:07:30:de:20:
ff:22:a8:b4:67:67:b3:fd:3a:ed:7f:19:1c:5b:4a:32:13:fd:
71:85:e3:41:47:1d:18:cb:4f:8a:aa:65:3d:2e:ea:fb:6d:b3:
d7:26:a2:9e:f3:64:d1:cd:09:0f:8c:cc:36:e9:e4:e3:9f:c3:
9c:85:af:12:59:a6:18:cc:37:5a:b0:df:2b:33:67:15:5e:a4:
2d:8a:5e:7b:98:3b:0f:09:86:5d:56:8f:87:48:95:8f:0e:a7:
54:c7:ca:40:f6:b7:17:a2:9f:51:9a:bb:f2:cb:84:87:86:2f:
c5:3f:9d:d7:61:94:e7:65:fd:0b:37:20:0c:ba:a2:00:5e:e1:
0d:ea:17:c0:ce:db:cc:0f:15:e5:34:6f:57:11:48:c5:69:4a:
c0:9b:c3:f4:bc:80:39:05:c1:1b:df:1d:97:45:52:1f:ad:03:
de:7f:68:f5:7d:6c:d2:34:3d:c0:76:6d:18:61:79:a8:0a:47:
50:75:ae:02:49:ea:2a:94:47:0c:e7:02:0f:97:4e:4b:78:45:
65:b8:d8:79:f6:15:19:96:a1:cb:14:3b:09:19:45:d5:77:07:
0d:54:fc:a4:d0:31:06:1c:3c:b7:2e:71:b2:c9:9b:76:29:4c:
55:04:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:14 2025 by rpki-client