Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I0D5NppxY23Z24EoMwVgjGKytmY.roa
File: I0D5NppxY23Z24EoMwVgjGKytmY.roa (raw, json)
Hash identifier: 0dz5Elu2tZVsxhXFOI9V05hKXFDHK6P9mgecnIXrtig=
Subject key identifier: 23:40:F9:36:9A:71:63:6D:D9:DB:81:28:33:05:60:8C:62:B2:B6:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D9A6ADADA59B70BC094A46916AC20F3B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I0D5NppxY23Z24EoMwVgjGKytmY.roa
Signing time: Thu 06 Feb 2025 05:06:06 +0000
ROA not before: Thu 06 Feb 2025 05:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 06 Feb 2025 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d9:a6:ad:ad:a5:9b:70:bc:09:4a:46:91:6a:c2:0f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 05:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2340f9369a71636dd9db81283305608c62b2b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:66:b5:21:90:f0:e8:df:97:da:0b:b1:24:
cf:85:c4:38:96:da:a5:6f:07:e1:91:6b:b6:e9:f2:
d4:64:e0:12:0e:c8:b0:f5:e1:15:72:9b:04:20:f0:
06:28:d8:8a:87:0a:94:50:97:30:03:a7:ef:42:93:
63:f5:f8:bd:08:e4:28:f2:14:9e:9c:b2:83:59:c8:
0e:f2:06:f7:6a:f1:ac:a5:c0:5a:1a:a2:8b:e0:da:
df:a4:4e:83:7f:2b:e4:8b:19:8a:95:0f:02:aa:6d:
f8:43:ec:83:3f:a0:aa:ab:63:75:47:b8:42:a3:9f:
36:c6:5b:d3:6d:08:5b:74:c2:3d:2c:38:f8:3f:ca:
48:56:b4:3a:c1:ab:21:e7:a4:8d:88:8d:4c:5d:0d:
49:2e:c2:68:44:29:e3:8c:0b:34:8c:fd:0b:ce:76:
63:bb:70:1e:63:aa:40:65:fc:c4:ec:3a:98:f4:d7:
d1:66:bb:92:8a:67:68:d3:78:98:a7:a0:37:a7:09:
a9:09:9e:23:73:62:6e:ee:bd:be:b8:5e:36:57:fd:
da:b3:64:4f:12:77:3e:3e:70:ff:78:d5:35:76:0c:
40:5b:c6:db:c2:d5:22:f7:90:76:66:15:62:09:3b:
58:b0:03:85:f6:62:97:21:45:3b:29:14:ca:18:d0:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:F9:36:9A:71:63:6D:D9:DB:81:28:33:05:60:8C:62:B2:B6:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I0D5NppxY23Z24EoMwVgjGKytmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:dc:34:43:60:07:ff:5c:b7:65:df:fa:e6:24:b3:15:34:a0:
64:43:c4:9e:d6:0c:7b:dc:02:06:36:db:07:2c:78:79:7e:84:
3f:cc:37:07:ec:2d:a3:6f:6e:dd:a7:71:a9:d7:90:c9:fe:1e:
04:a0:d0:87:b2:05:04:3c:0e:4c:06:cc:e4:3e:37:ed:89:ea:
ec:be:44:da:53:92:76:e9:d7:86:e8:e8:ed:25:ee:2d:28:76:
93:f5:b4:5c:ef:35:66:0b:26:89:37:07:76:f8:14:ac:ad:79:
2e:db:22:97:d5:02:4b:d2:d9:02:09:4a:9f:71:bc:44:5e:d7:
a7:e9:20:72:93:e2:e8:b7:aa:e2:92:bb:85:4e:e1:98:a6:20:
85:af:d4:12:f7:4e:37:1f:f1:9b:13:df:d5:0b:72:33:ad:37:
ab:60:0e:3c:f2:d7:dd:31:2a:a2:3e:78:6e:c2:29:94:f4:eb:
6f:df:2f:5b:2d:53:88:45:a1:80:5e:d3:49:c5:5b:07:48:08:
e2:72:1c:15:b9:20:1a:9c:9e:e5:79:0d:05:29:29:dd:71:0c:
f6:25:41:1c:c7:02:03:79:83:bf:15:b8:25:4f:67:a8:ff:0b:
d6:b7:9b:c3:89:ed:a3:97:c5:3e:87:14:c3:51:d2:d3:5a:6a:
13:75:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:52 2025 by rpki-client