Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j0gv-A_G4MFWExn40VsPH-0wLiE.roa
File: j0gv-A_G4MFWExn40VsPH-0wLiE.roa (raw, json)
Hash identifier: 6lXnk5NEOKd695OdIa9R8NHaPWdPmQf8E7It7oHfscc=
Subject key identifier: 8F:48:2F:F8:0F:C6:E0:C1:56:13:19:F8:D1:5B:0F:1F:ED:30:2E:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D1F2A10C54BB3267C60A3C6F9175DBED
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j0gv-A_G4MFWExn40VsPH-0wLiE.roa
Signing time: Tue 04 Feb 2025 17:12:06 +0000
ROA not before: Tue 04 Feb 2025 17:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 04 Feb 2025 17:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:f2:a1:0c:54:bb:32:67:c6:0a:3c:6f:91:75:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 4 17:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f482ff80fc6e0c1561319f8d15b0f1fed302e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:62:9b:e4:07:b4:bd:4e:85:c1:ea:14:60:
1a:21:a5:a0:3c:f6:06:69:65:8c:68:67:f9:92:55:
c6:11:5c:10:ee:a2:06:37:5e:d2:c6:67:0e:d0:08:
8f:36:fe:2f:c7:80:86:3e:9d:b3:c6:67:c8:47:3d:
e7:0a:a8:ab:5a:38:35:b7:3c:ad:a8:21:f4:e0:07:
b7:0f:2e:8f:f8:e9:b2:99:9a:f2:42:43:f3:32:1e:
00:00:54:73:5c:25:d3:ee:06:65:01:0a:11:a7:ac:
3c:d1:b5:ec:0c:1c:2b:eb:69:7d:60:96:83:b1:6d:
f1:1b:d2:84:5e:eb:5e:ee:75:47:56:9f:77:9e:c0:
09:8a:5d:ec:83:29:14:1a:4d:72:d3:45:89:12:dc:
0f:72:b1:6a:5e:a6:29:42:70:f2:7c:21:91:3e:f7:
c7:0e:db:18:25:a9:81:ec:96:a5:8c:30:86:c6:98:
12:a6:f8:d1:a1:64:d5:41:4f:e6:63:ee:89:74:57:
eb:ad:82:b6:65:cf:96:7d:e5:d6:89:55:28:45:82:
3c:ee:21:8e:e8:b2:24:07:61:ad:1e:21:f7:fe:36:
20:06:c7:15:82:b2:23:61:bf:14:10:f2:01:5b:a0:
d7:d7:6d:24:66:b5:e4:65:3e:f9:3d:e2:e9:e1:80:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:2F:F8:0F:C6:E0:C1:56:13:19:F8:D1:5B:0F:1F:ED:30:2E:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j0gv-A_G4MFWExn40VsPH-0wLiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
d2:ea:81:3d:60:57:47:de:44:3f:81:a4:61:23:8b:b2:f1:a0:
f3:ce:7b:2c:25:da:36:db:68:08:1b:5a:d6:88:65:59:80:95:
91:0a:ed:61:67:f5:00:0e:0e:99:ef:5f:3c:3d:f5:1d:88:56:
fc:6e:fc:1a:e4:a0:7a:dd:45:58:73:0b:d1:8d:6d:4b:6a:95:
06:f9:b9:46:f5:5f:96:ad:b4:c3:50:a0:a5:dc:2d:35:8b:93:
b8:0f:97:49:c8:3a:10:99:33:14:de:e1:c7:e7:88:a7:ae:fd:
25:8d:68:cb:d6:53:57:ef:51:25:7e:2c:08:20:78:2f:37:7b:
d0:10:cb:82:6e:cf:26:78:ea:ae:f6:33:10:cb:e2:db:58:5d:
41:45:5a:33:85:c9:9a:35:53:57:ea:31:df:c1:77:e6:f3:e2:
2a:32:7d:50:5e:0d:12:a1:e9:cd:a2:ac:75:d0:71:00:06:7e:
61:19:54:5b:08:ed:04:0d:0b:9b:7a:ec:6e:d1:42:cb:82:27:
65:87:69:88:a3:9d:ee:35:fd:d5:21:7c:a1:5d:7e:10:93:2a:
f9:21:a7:a1:ce:0c:f0:05:33:e9:9b:4f:d5:3c:a7:45:5f:70:
55:3f:dc:60:49:c1:6f:b3:a8:00:1f:1e:0f:b1:ca:3c:b0:c5:
16:1f:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:11 2025 by rpki-client