Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J3zyZoVMrsIamBEcK7Te1-6-Arg.roa
File: J3zyZoVMrsIamBEcK7Te1-6-Arg.roa (raw, json)
Hash identifier: RPSJEdeQFOZrwTRg/pXvwboi2goa+fdSK3RVQ/stPw4=
Subject key identifier: 27:7C:F2:66:85:4C:AE:C2:1A:98:11:1C:2B:B4:DE:D7:EE:BE:02:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019502DB5268FE426B17A852E496D3607C36
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J3zyZoVMrsIamBEcK7Te1-6-Arg.roa
Signing time: Fri 14 Feb 2025 05:08:02 +0000
ROA not before: Fri 14 Feb 2025 05:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.83.159.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
89.144.61.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
95.215.32.0/24 maxlen: 24
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 14 Feb 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:db:52:68:fe:42:6b:17:a8:52:e4:96:d3:60:7c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 14 05:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=277cf266854caec21a98111c2bb4ded7eebe02b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:2b:24:d5:e3:07:43:ba:39:a7:36:0c:1f:
46:cb:b7:f4:15:4f:53:98:bf:98:50:e8:c7:a4:54:
3c:94:3c:f2:93:20:43:5c:cc:a9:00:37:e2:93:7a:
40:57:f9:d3:7a:11:89:c4:5f:36:b5:c0:c7:26:88:
e2:dc:9c:e0:af:8a:33:03:85:4c:20:54:c9:96:98:
10:de:d6:2b:73:3d:00:6d:0e:c7:0a:84:e0:f4:9b:
61:53:21:65:98:1e:b2:d0:ef:51:2f:cc:b3:08:7a:
45:2d:d6:9f:6f:9b:e1:33:c6:e6:c3:1b:07:a7:29:
fb:7b:cf:64:33:b7:d1:c1:77:77:be:5b:a6:56:5a:
56:ed:14:6e:74:00:14:b9:e9:eb:ae:58:f8:9d:56:
09:23:71:4c:3f:78:b4:12:9a:77:5f:c5:b4:40:ce:
fa:4e:35:df:23:a2:c8:ac:13:a3:ee:8b:16:50:5d:
da:51:6e:7d:24:04:f4:d6:55:fc:0d:aa:ef:bc:14:
31:21:3e:73:16:c7:58:0e:b1:25:59:3a:e2:aa:e9:
b0:c5:bf:19:a0:b9:75:73:14:6b:0c:03:b2:73:65:
eb:0b:f1:1a:13:a4:b5:09:db:1c:4b:ed:ae:09:17:
a5:92:8f:7b:6c:ad:b7:0a:b3:93:b9:22:00:1e:11:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:F2:66:85:4C:AE:C2:1A:98:11:1C:2B:B4:DE:D7:EE:BE:02:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J3zyZoVMrsIamBEcK7Te1-6-Arg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:6a:57:b2:bf:bd:45:3b:0d:17:d3:41:b4:e0:81:8c:dc:fd:
18:7e:91:e7:12:f6:da:83:05:0c:89:47:bf:5b:08:58:fd:56:
06:32:d1:85:f8:68:3e:ed:22:c3:fe:89:67:fe:01:25:f3:51:
1e:12:9d:51:e6:2e:80:72:c5:5b:72:da:69:34:41:f3:51:d6:
97:6f:f4:23:dc:33:cc:39:96:b3:cb:45:13:06:68:d2:17:77:
c6:7e:76:52:db:0c:98:4a:a7:f3:7b:3b:3a:24:1b:58:3b:2d:
b1:17:91:ab:4a:b4:69:43:1d:da:68:76:7c:b7:df:02:52:d3:
f2:1a:ba:ef:d8:91:90:bf:ff:d6:93:1c:26:0c:c5:47:f8:52:
e6:90:1c:a5:a8:2d:fd:83:0b:38:f0:ab:88:45:6d:83:6c:c7:
2e:7d:ba:4c:c9:12:06:4b:23:cb:1d:dd:91:a3:47:db:d9:88:
5e:cf:7a:67:f7:40:c3:37:24:de:29:57:5b:c0:90:90:0f:88:
5c:7c:9b:ff:21:d9:bc:c3:ad:b6:44:b9:5d:ff:a4:f8:a7:b5:
d5:63:5a:68:c7:64:23:65:af:9b:a2:81:5f:8b:fa:5d:7c:6c:
52:e1:f6:3a:88:34:4a:69:cf:32:63:0c:c3:62:9b:99:e7:46:
49:d5:8b:d7
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAZUC21Jo/kJrF6hS5JbTYHw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjE0MDUwODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzdjZjI2Njg1NGNhZWMyMWE5ODExMWMyYmI0ZGVkN2VlYmUwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUrJNXjB0O6Oac2DB9Gy7f0FU9T
mL+YUOjHpFQ8lDzykyBDXMypADfik3pAV/nTehGJxF82tcDHJoji3Jzgr4ozA4VM
IFTJlpgQ3tYrcz0AbQ7HCoTg9JthUyFlmB6y0O9RL8yzCHpFLdafb5vhM8bmwxsH
pyn7e89kM7fRwXd3vlumVlpW7RRudAAUuenrrlj4nVYJI3FMP3i0Epp3X8W0QM76
TjXfI6LIrBOj7osWUF3aUW59JAT01lX8DarvvBQxIT5zFsdYDrElWTriqumwxb8Z
oLl1cxRrDAOyc2XrC/EaE6S1CdscS+2uCRelko97bK23CrOTuSIAHhFCYwIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFCd88maFTK7CGpgRHCu03tfuvgK4MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSjN6eVpvVk1yc0lhbUJFY0s3VGUxLTYtQXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgccEAgABMIHAAwQF
BVOAAwQCBa+AAwQABa+FAwQBBa+OMAwDBAEFr9oDBAAFr9wwDAMEAAWv4QMEAAWv
6AMEAAWv6zAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQBuS+MAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAE
AgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8Aw
DQYJKoZIhvcNAQELBQADggEBAAlqV7K/vUU7DRfTQbTggYzc/Rh+kecS9tqDBQyJ
R79bCFj9VgYy0YX4aD7tIsP+iWf+ASXzUR4SnVHmLoByxVty2mk0QfNR1pdv9CPc
M8w5lrPLRRMGaNIXd8Z+dlLbDJhKp/N7OzokG1g7LbEXkatKtGlDHdpodny33wJS
0/Iauu/YkZC//9aTHCYMxUf4UuaQHKWoLf2DCzjwq4hFbYNsxy59ukzJEgZLI8sd
3ZGjR9vZiF7Pemf3QMM3JN4pV1vAkJAPiFx8m/8h2bzDrbZEuV3/pPintdVjWmjH
ZCNlr5uigV+L+l18bFLh9jqINEppzzJjDMNim5nnRknVi9c=
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:05:31 2025 by rpki-client