Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sojm2tn94iTGJzLrirvC2yfmy3k.roa
File: Sojm2tn94iTGJzLrirvC2yfmy3k.roa (raw, json)
Hash identifier: NQP/ZaQEetb9erjOnMVzYhp9cofgodsE79jWzhjHJaE=
Subject key identifier: 4A:88:E6:DA:D9:FD:E2:24:C6:27:32:EB:8A:BB:C2:DB:27:E6:CB:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01956A3DA602A18FF9EAE27AB9ED08225BD0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sojm2tn94iTGJzLrirvC2yfmy3k.roa
Signing time: Thu 06 Mar 2025 06:56:19 +0000
ROA not before: Thu 06 Mar 2025 06:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 07 Mar 2025 05:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:3d:a6:02:a1:8f:f9:ea:e2:7a:b9:ed:08:22:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 6 06:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a88e6dad9fde224c62732eb8abbc2db27e6cb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:c1:d1:b9:fa:e7:9f:60:67:19:0e:98:ec:
27:ee:da:9f:6d:40:4e:a5:52:ce:60:63:78:c0:ae:
70:52:59:83:f5:40:19:15:09:94:cb:59:3d:db:09:
b7:c6:3c:0a:41:2e:61:48:db:10:1c:ed:85:bc:ff:
d4:ad:45:06:ae:07:58:71:4d:31:cb:0d:84:ac:02:
f2:fd:2a:24:7d:32:f7:c4:d4:94:b7:36:99:76:07:
44:4f:13:ca:13:a2:8a:f6:27:5b:72:1c:0d:32:9b:
2c:4b:ec:36:8d:96:d4:78:2d:85:57:f0:2d:be:55:
a7:24:b3:93:26:61:6f:84:1e:0f:7a:78:c7:e7:f0:
d0:47:08:86:36:a3:e9:b6:5d:02:72:96:95:26:9a:
70:9e:63:ee:25:bb:85:cb:70:64:c9:9f:78:20:45:
30:1d:1c:ed:ec:bb:fb:96:06:51:1c:0d:9c:2d:fe:
eb:b0:e7:c2:00:e7:13:02:a4:9b:95:28:e8:55:4d:
6f:0a:3b:23:56:bb:4b:1e:cc:30:2b:94:b1:a4:2a:
97:1f:fb:2a:f0:b9:d9:44:e7:06:26:aa:c6:c1:eb:
b7:d9:84:56:ad:bf:9b:17:19:f2:0d:61:2a:c4:f6:
9e:2a:27:34:1f:98:99:d5:fa:9b:ca:64:03:d8:8d:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:E6:DA:D9:FD:E2:24:C6:27:32:EB:8A:BB:C2:DB:27:E6:CB:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sojm2tn94iTGJzLrirvC2yfmy3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
de:d0:00:32:a2:7b:46:e3:b3:8a:15:30:3a:62:1c:5c:56:d8:
52:a8:88:3f:b9:80:e8:5a:91:b1:df:17:90:57:7f:cf:1b:1b:
6a:70:4f:a5:ab:87:67:42:5b:58:01:c9:bc:c6:db:0b:0c:df:
0a:4a:97:ac:45:fe:83:9a:f1:39:7c:e1:00:75:51:d4:c8:b3:
6e:3c:19:db:b7:ee:b4:5a:53:33:ed:f4:95:89:af:8e:a8:6a:
3a:26:5c:3d:79:23:33:b6:0d:92:f0:81:3d:7c:21:2e:63:26:
dd:32:33:e8:80:7b:5d:f1:ce:4d:81:02:7e:e7:fa:68:49:f5:
42:88:73:14:8e:aa:2c:78:10:34:11:0d:6a:c2:82:aa:5b:50:
c5:79:9e:66:c5:1b:11:73:85:b2:22:44:b3:98:99:6b:3d:ab:
14:24:85:bd:be:6b:86:88:01:52:e5:60:0e:38:d2:16:de:93:
73:00:3e:03:8d:e7:45:03:69:d4:33:96:a8:29:83:a1:d8:88:
f2:4e:3a:f6:2a:94:d1:7f:6f:a2:b0:d0:30:af:02:26:7f:bb:
47:f3:88:a3:40:32:11:9c:ab:a0:df:54:db:24:23:7b:56:b3:
83:2d:0e:7c:52:53:09:19:9f:c2:b0:2d:b5:a7:86:02:68:2b:
c8:f1:70:8e
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAZVqPaYCoY/56uJ6ue0IIlvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzA2MDY1NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTg4ZTZkYWQ5ZmRlMjI0YzYyNzMyZWI4YWJiYzJkYjI3ZTZjYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6bB0bn6559gZxkOmOwn7tqfbUBO
pVLOYGN4wK5wUlmD9UAZFQmUy1k92wm3xjwKQS5hSNsQHO2FvP/UrUUGrgdYcU0x
yw2ErALy/SokfTL3xNSUtzaZdgdETxPKE6KK9idbchwNMpssS+w2jZbUeC2FV/At
vlWnJLOTJmFvhB4PenjH5/DQRwiGNqPptl0CcpaVJppwnmPuJbuFy3BkyZ94IEUw
HRzt7Lv7lgZRHA2cLf7rsOfCAOcTAqSblSjoVU1vCjsjVrtLHswwK5SxpCqXH/sq
8LnZROcGJqrGweu32YRWrb+bFxnyDWEqxPaeKic0H5iZ1fqbymQD2I3RPwIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFEqI5trZ/eIkxicy64q7wtsn5st5MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU29qbTJ0bjk0aVRHSnpMcmlydkMyeWZteTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBywQCAAEwgcQD
BAUFU4ADBAIFr4ADBAAFr4UDBAAFr48DBAEFr9owDAMEAAWv4QMEAAWv6AMEAAWv
6wMEAAWv7jAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQD
U/NQAwQFVV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQC
X9cgAwQEshKQAwQCuQ2cAwQBuS+MAwQAuS+PAwQAuXlHAwQAwRz7AwQBw24OAwQE
2UWgMDAEAgACMCoDBQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMF
AyoCL8AwDQYJKoZIhvcNAQELBQADggEBAN7QADKie0bjs4oVMDpiHFxW2FKoiD+5
gOhakbHfF5BXf88bG2pwT6Wrh2dCW1gBybzG2wsM3wpKl6xF/oOa8Tl84QB1UdTI
s248Gdu37rRaUzPt9JWJr46oajomXD15IzO2DZLwgT18IS5jJt0yM+iAe13xzk2B
An7n+mhJ9UKIcxSOqix4EDQRDWrCgqpbUMV5nmbFGxFzhbIiRLOYmWs9qxQkhb2+
a4aIAVLlYA440hbek3MAPgON50UDadQzlqgpg6HYiPJOOvYqlNF/b6Kw0DCvAiZ/
u0fziKNAMhGcq6DfVNskI3tWs4MtDnxSUwkZn8KwLbWnhgJoK8jxcI4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:05 2025 by rpki-client