Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mjt4dmTXnYcV1FnltYI8ievVz5k.roa
File: mjt4dmTXnYcV1FnltYI8ievVz5k.roa (raw, json)
Hash identifier: ocgpod2l5yG0fbkd7rUt8oSYVnZJX805M/mmTmaRsTc=
Subject key identifier: 9A:3B:78:76:64:D7:9D:87:15:D4:59:E5:B5:82:3C:89:EB:D5:CF:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01944845C3F3BECE781296D80E5F08C4D792
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mjt4dmTXnYcV1FnltYI8ievVz5k.roa
Signing time: Wed 08 Jan 2025 23:35:19 +0000
ROA not before: Wed 08 Jan 2025 23:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.44.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 09 Jan 2025 20:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:45:c3:f3:be:ce:78:12:96:d8:0e:5f:08:c4:d7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 8 23:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3b787664d79d8715d459e5b5823c89ebd5cf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:30:24:99:2a:13:4d:97:8a:20:ac:28:cf:
f0:b4:42:03:25:e1:b7:aa:b9:01:b7:76:9b:22:a6:
68:2e:84:4e:23:ec:28:93:25:66:51:78:e0:8b:d2:
4c:47:85:c2:d1:25:0a:cc:3f:c0:8e:52:ba:66:1c:
5d:29:be:1f:e9:13:b5:ea:29:54:34:21:c7:57:f5:
8e:d3:14:f5:1b:af:ba:50:fe:f2:51:c5:e9:6b:a5:
d2:be:fe:75:a2:3f:31:eb:cb:c1:0c:f2:a8:3b:6b:
a3:8d:90:7d:0c:f4:2e:fe:93:61:d1:9e:df:80:5e:
16:9a:e0:ed:0f:09:39:78:79:44:10:59:c5:3f:9e:
e6:57:64:80:f1:e6:2f:a3:eb:94:02:3a:35:6b:ff:
f0:d9:72:bd:b8:ff:05:1f:a3:d1:28:ee:3f:09:96:
3f:5f:b7:c6:2f:1d:09:ba:45:68:ff:cd:a1:a1:8b:
81:4f:48:e8:05:1d:13:10:27:05:1d:28:50:a7:c5:
c8:42:cf:69:08:ef:6a:f6:8b:1e:88:b7:9a:63:38:
06:87:0f:92:bf:f0:4d:53:35:d8:92:fc:3b:2b:9d:
d6:59:ff:41:5f:c7:7d:1f:5f:b5:75:e7:e0:40:b2:
a4:a2:4c:dd:6d:1b:6a:c9:87:b3:43:2d:de:3d:e4:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:78:76:64:D7:9D:87:15:D4:59:E5:B5:82:3C:89:EB:D5:CF:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mjt4dmTXnYcV1FnltYI8ievVz5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:68:28:da:eb:0d:fa:ad:10:18:e1:4e:d0:2e:1e:8e:1e:ab:
c7:2c:71:9b:3e:df:36:f0:83:00:10:eb:8a:76:ae:79:3f:64:
e7:04:0b:ac:8e:d6:5e:e8:00:6e:59:0e:35:23:a7:3b:98:8a:
73:cf:26:37:b6:3e:d5:17:0c:df:21:55:4d:51:db:50:c0:09:
e9:a3:93:b5:33:75:c0:f1:ca:72:53:2e:d2:fb:6f:50:8b:dd:
63:a1:c5:66:07:d6:11:6a:1f:58:86:a5:10:c2:08:59:88:c4:
70:5f:a0:a0:8f:e4:2b:d8:53:38:0a:d9:83:44:b9:a6:da:58:
d1:9b:e7:34:7d:af:7b:98:46:00:da:cc:2f:ca:6f:d4:57:7d:
d0:87:23:53:89:cb:46:b4:e5:4e:16:86:e4:a3:73:f7:0f:80:
17:dc:7f:0f:3a:67:8c:3a:2b:42:56:35:52:26:09:46:95:74:
2c:7a:65:09:8a:24:29:74:4d:b8:09:51:60:75:6c:1f:ff:70:
26:bb:f6:8f:f9:24:eb:0e:48:2b:68:82:98:1c:03:5b:b5:95:
ab:65:38:06:5b:28:24:0b:3b:08:58:81:d1:43:9f:4a:c3:9d:
f6:3a:96:ee:39:d9:1d:0c:b0:e2:0c:9b:25:49:a9:f9:0e:49:
70:8a:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:17 2025 by rpki-client