Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vz_2UaSLyvZxY2ogK_-brvpNHOY.roa
File: vz_2UaSLyvZxY2ogK_-brvpNHOY.roa (raw, json)
Hash identifier: Wr4MKB24LMDtQxuqHYE60lhw7r8nfDmndTCO9sIDS7Q=
Subject key identifier: BF:3F:F6:51:A4:8B:CA:F6:71:63:6A:20:2B:FF:9B:AE:FA:4D:1C:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01957E7436A692FCF5AD291E6DE6725D6791
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vz_2UaSLyvZxY2ogK_-brvpNHOY.roa
Signing time: Mon 10 Mar 2025 05:08:19 +0000
ROA not before: Mon 10 Mar 2025 05:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.238.0/24 maxlen: 24
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.93.31.0/24 maxlen: 24
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.106.69.0/24 maxlen: 24
89.144.0.0/18 maxlen: 32
89.144.21.0/24 maxlen: 24
94.103.160.0/20 maxlen: 32
94.103.164.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.144.0/24 maxlen: 24
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.47.143.0/24 maxlen: 24
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
217.69.167.0/24 maxlen: 24
217.69.170.0/24 maxlen: 24
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 10 Mar 2025 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:74:36:a6:92:fc:f5:ad:29:1e:6d:e6:72:5d:67:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 10 05:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3ff651a48bcaf671636a202bff9baefa4d1ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:f4:ab:78:cd:0f:f4:e3:d5:02:c3:05:19:
f2:d9:9e:ad:95:e2:30:fa:05:66:17:78:b6:c8:c0:
15:ff:b7:a5:dc:4a:c2:28:d9:72:dc:45:ea:5c:bf:
a5:c8:66:f5:6d:c8:2d:cb:74:08:2d:94:0b:3d:af:
7b:52:2b:7d:ed:57:d5:cf:b1:59:2f:f9:08:a4:0a:
2c:9f:ea:e3:77:de:a1:fa:bc:74:21:9e:77:89:00:
fd:c1:40:73:b0:0c:bc:c4:38:55:a2:3f:4b:0a:bd:
27:30:33:aa:89:39:7f:eb:8b:dc:e9:d4:d4:b8:e0:
a8:cd:84:5d:02:83:c4:ec:6e:53:1a:9a:a9:29:84:
c8:dc:50:6a:bb:aa:4f:f4:05:92:96:2f:1a:c5:d6:
8e:a6:89:c8:72:05:99:25:84:6b:94:0b:c6:48:e4:
63:ff:2a:c1:95:d6:75:d4:4a:44:b2:06:9b:2d:aa:
a4:46:9b:25:29:11:8a:df:e7:24:83:0b:26:e5:b8:
cf:a0:c9:48:e6:58:63:51:49:b4:66:be:a3:ee:bd:
69:5c:d9:a5:fb:0f:81:9f:3c:38:22:27:97:b5:84:
2b:ff:12:43:38:bf:9a:f5:31:e1:ca:6a:69:30:3e:
7d:4e:ee:9a:98:03:88:4c:55:38:10:14:dd:12:79:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:F6:51:A4:8B:CA:F6:71:63:6A:20:2B:FF:9B:AE:FA:4D:1C:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vz_2UaSLyvZxY2ogK_-brvpNHOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.143.0/24
5.175.218.0/23
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.238.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.47.143.0/24
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:1a:31:8a:67:f1:f4:36:7b:0c:87:1b:84:d5:32:c3:6b:a7:
0e:b3:86:26:11:da:5b:c2:c9:ed:ee:e1:62:f1:2d:a4:83:a5:
1d:36:01:a6:36:a9:ac:9b:7b:67:27:98:33:ec:88:df:6a:59:
b0:97:b3:88:22:66:04:5d:89:7f:14:70:f7:30:d2:f7:d7:6d:
36:f0:fd:fd:d7:04:f7:6c:85:32:70:f8:99:cc:f9:48:e1:f1:
69:48:d6:48:20:3b:67:9c:41:92:07:7b:02:f2:15:b7:05:3c:
0b:3c:56:df:68:b4:af:48:41:43:d7:b0:95:5b:18:19:10:e6:
a0:a5:0b:af:a9:54:a8:b9:b6:64:b3:3f:78:80:57:64:25:8c:
ee:70:1e:da:5c:36:0e:10:d5:99:5f:07:fe:2d:5c:11:f8:86:
41:cf:51:18:ba:bb:ed:dc:db:2a:82:b5:45:ce:8f:98:4e:78:
7e:be:af:30:4c:70:fb:4e:d7:83:5b:fc:e1:85:72:ed:f6:27:
1f:19:0e:0d:e1:33:4c:83:b8:a2:5f:35:d3:8f:34:dd:0e:85:
f1:97:8a:63:34:76:0e:3f:8c:f4:b8:10:31:8b:13:bc:40:34:
96:23:d0:0d:3b:82:54:cc:6a:ac:cc:f6:e9:60:b5:d0:9c:f5:
f2:37:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:30:34 2025 by rpki-client