Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcmivpEP-Tqnvv9lesvgTO6qWj8.roa
File: qcmivpEP-Tqnvv9lesvgTO6qWj8.roa (raw, json)
Hash identifier: d1BTNqrToxD3XBLkIml769E3DbwOUaRZjpEUVaGj/c8=
Subject key identifier: A9:C9:A2:BE:91:0F:F9:3A:A7:BE:FF:65:7A:CB:E0:4C:EE:AA:5A:3F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193B7805A947DBDA69600D18709433DF6E1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcmivpEP-Tqnvv9lesvgTO6qWj8.roa
Signing time: Wed 11 Dec 2024 20:54:22 +0000
ROA not before: Wed 11 Dec 2024 20:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.149.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 12 Dec 2024 17:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b7:80:5a:94:7d:bd:a6:96:00:d1:87:09:43:3d:f6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 11 20:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c9a2be910ff93aa7beff657acbe04ceeaa5a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:5d:ba:94:73:b5:f8:ee:be:13:1e:23:6a:
6b:c9:70:e6:9e:15:b5:1a:ff:9e:6c:91:73:3b:8a:
bb:24:9c:7b:46:67:b4:72:3a:8d:c3:b0:78:8d:ec:
90:60:d0:0c:30:db:7c:b9:a8:f9:35:dd:ee:30:28:
c0:ce:1b:92:fb:60:dc:fe:e5:62:12:97:fe:44:7f:
8b:86:37:5e:e8:00:f7:7d:b0:01:64:c7:fc:ec:5a:
c1:f3:00:88:bd:c7:b3:50:35:f4:0c:aa:11:d6:42:
7c:d9:e8:75:9c:85:28:12:54:bd:d5:af:96:4a:35:
9e:00:28:e2:58:6d:57:ec:55:e7:ca:55:79:81:7f:
63:c2:b7:83:ce:2e:08:d5:9c:d7:2c:b8:d4:04:15:
13:a2:62:7c:07:b0:fd:fb:5b:3b:7a:e1:93:6e:b2:
a3:b0:39:66:16:69:ad:b8:38:38:28:44:8c:c7:61:
d5:c5:d3:0e:f6:49:0a:1b:51:26:24:6e:da:20:1a:
96:45:45:69:c9:4e:d2:f3:9c:02:92:52:ff:31:8b:
64:73:78:e5:a0:90:9f:37:46:c7:51:ae:ea:7c:ea:
7f:f1:1d:1f:71:40:9d:bf:80:51:d2:31:fe:57:ae:
f0:76:5b:0e:ab:39:06:d3:fc:dc:7c:68:e1:ca:03:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:A2:BE:91:0F:F9:3A:A7:BE:FF:65:7A:CB:E0:4C:EE:AA:5A:3F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qcmivpEP-Tqnvv9lesvgTO6qWj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
36:d9:f3:71:62:2d:2d:f5:f9:9a:0a:a6:f5:ca:bc:11:2a:1a:
ee:7b:fb:a8:13:40:2b:ef:ed:f4:3d:82:a1:ec:42:c2:03:eb:
08:5a:1f:93:77:4d:91:fd:96:ed:a8:b5:a4:ad:cd:26:ae:93:
18:82:12:27:75:a4:a3:b2:c1:6c:0a:92:49:7a:68:7e:72:e5:
a9:66:15:81:b6:5b:9b:19:e1:6d:33:3d:b7:ed:7d:93:c1:06:
cf:5a:e4:8f:c8:40:0d:a0:05:90:ac:77:71:bc:85:da:c7:4a:
4a:ae:76:ea:d7:c5:96:7d:ce:31:62:4c:d1:ae:70:ec:45:74:
0b:f8:6c:0e:d9:08:d4:a4:a7:74:22:d7:93:2a:ff:60:27:d3:
ac:ba:0d:25:f5:61:e9:f3:7e:3c:3b:b2:47:fe:c6:8e:56:e3:
50:f8:fc:eb:2e:3d:af:62:fb:79:9c:63:44:17:99:77:04:5f:
ee:34:1d:f5:80:4a:20:b1:e4:7e:14:d6:c3:5a:17:9e:e8:74:
20:99:29:c2:86:86:36:f0:b4:d5:e6:95:89:65:ea:a5:e6:20:
ee:55:68:2e:23:a3:b0:f1:64:14:33:eb:8d:26:e1:35:fc:62:
ca:83:eb:3f:35:6b:a5:34:9c:0a:47:99:b7:15:5f:8d:99:bf:
95:eb:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:55 2025 by rpki-client