Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L08OLzaivOlbbrBYcfx0B0EfFcQ.roa
File: L08OLzaivOlbbrBYcfx0B0EfFcQ.roa (raw, json)
Hash identifier: dtze3+YTpUQPzQ8wIcGNcaHVKfIBZv4w/fAQ1BgjN9U=
Subject key identifier: 2F:4F:0E:2F:36:A2:BC:E9:5B:6E:B0:58:71:FC:74:07:41:1F:15:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01957471A73330938D0686B46A2AF62CC479
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L08OLzaivOlbbrBYcfx0B0EfFcQ.roa
Signing time: Sat 08 Mar 2025 06:29:19 +0000
ROA not before: Sat 08 Mar 2025 06:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.142.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 08 Mar 2025 15:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:71:a7:33:30:93:8d:06:86:b4:6a:2a:f6:2c:c4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 06:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f4f0e2f36a2bce95b6eb05871fc7407411f15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:f5:75:a7:52:76:74:7e:1b:42:da:39:31:
be:37:96:64:62:02:14:9f:94:01:4e:79:67:e8:e7:
a4:a3:3c:17:b9:84:69:7b:e5:c1:b4:18:ee:4c:fb:
05:ea:9c:e5:48:64:81:a5:8d:eb:dd:51:65:39:1a:
88:07:7a:95:4e:75:2f:65:c5:f1:5a:c2:8a:df:9d:
fe:ee:3e:3e:4d:bc:0b:f5:cd:62:8a:1d:7a:d3:b3:
d2:40:37:f9:ed:b2:bc:c5:d9:09:86:7b:63:1b:c4:
67:be:5b:2d:33:5a:5b:0e:9e:eb:c5:c0:a7:4e:da:
20:05:3a:3d:ad:d8:90:7e:7f:11:ce:0d:25:9a:17:
cf:36:41:1f:e3:d9:14:ee:8c:c8:45:10:01:c0:18:
b8:27:52:93:e1:b5:62:42:61:ca:8e:b9:4f:ed:eb:
0f:2b:49:1b:37:68:f6:01:0e:5e:66:37:b4:e5:29:
5e:51:ce:ce:c7:78:07:b6:ca:f1:48:1a:3b:1e:ee:
71:69:f1:7b:1c:7e:0e:95:46:25:d2:c0:12:12:7e:
73:20:93:39:55:7d:62:97:ed:72:5d:8d:d9:51:0e:
3d:0b:8f:2e:bc:92:86:28:67:d1:a3:6c:89:89:cd:
1a:68:8a:65:bb:d4:d0:42:b6:4a:f0:25:b6:6d:ca:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:0E:2F:36:A2:BC:E9:5B:6E:B0:58:71:FC:74:07:41:1F:15:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L08OLzaivOlbbrBYcfx0B0EfFcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/22
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:90:8d:b9:f0:9f:6e:46:33:a5:20:68:8f:ed:11:7a:0e:ad:
b2:75:c0:c4:db:1e:8d:5c:26:f9:06:d6:c8:8b:e2:2b:30:b7:
82:b0:c6:77:c8:e9:aa:03:cc:9e:71:1c:cc:50:f2:ee:4b:51:
23:9f:d7:c1:19:f8:02:a4:5b:39:f1:89:84:e2:bf:50:5b:bd:
eb:4f:ee:46:1e:02:aa:85:27:c8:83:41:ce:9e:f2:f3:ec:91:
45:9e:2f:03:e8:d5:1e:c3:e1:1d:78:db:a1:66:2c:80:f4:16:
0f:d3:02:d7:cf:20:81:4c:b2:c1:95:2d:e0:37:2e:fa:80:e4:
8f:c3:e5:a8:69:f2:b9:51:c9:3a:48:ad:72:dc:2b:99:28:82:
71:51:4f:3e:67:ea:2f:08:20:e5:68:28:38:13:a8:86:6f:46:
18:6a:14:f5:a3:e8:20:a2:48:76:b6:25:32:98:44:33:eb:fd:
4b:72:85:88:6f:bb:9a:bc:b1:4c:63:a0:d7:87:66:05:c5:cd:
44:c9:c7:91:6f:d8:6b:c2:2b:02:b7:9e:de:13:5f:58:21:e0:
0c:b3:bc:d3:e9:55:c9:a6:5a:63:56:8d:6f:9d:59:77:bc:3c:
63:3a:e3:01:0e:00:bb:73:2f:4b:f4:7c:fc:94:f6:3b:0e:1f:
7c:aa:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:41 2025 by rpki-client