Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/02YuEveRwPIZWgfmXamMt-EUm4c.roa
File: 02YuEveRwPIZWgfmXamMt-EUm4c.roa (raw, json)
Hash identifier: wkQH7qi5kK8TeyfRJ2wHeiWbpgC5GojrXZhKhnuTY4Q=
Subject key identifier: D3:66:2E:12:F7:91:C0:F2:19:5A:07:E6:5D:A9:8C:B7:E1:14:9B:87
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019691D7564D71BD8B386F11F75C1C6585BE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/02YuEveRwPIZWgfmXamMt-EUm4c.roa
Signing time: Fri 02 May 2025 16:32:10 +0000
ROA not before: Fri 02 May 2025 16:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 5.231.124.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 03:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:d7:56:4d:71:bd:8b:38:6f:11:f7:5c:1c:65:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 16:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3662e12f791c0f2195a07e65da98cb7e1149b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:12:e4:41:44:60:a9:34:8f:e6:31:64:79:
d4:4b:01:e4:45:a0:d8:f0:14:f3:a6:22:a6:31:82:
65:ae:46:dd:d9:7d:82:dc:d6:36:c0:0c:c5:27:13:
f0:61:29:69:96:87:c4:98:3b:4f:00:f9:88:29:aa:
42:22:f9:f1:a9:a2:3f:a2:c3:e3:99:f8:a7:74:cb:
30:86:91:6b:00:1e:b4:21:77:8f:43:ec:87:45:e6:
ca:7e:fd:f2:49:67:fc:02:8b:ab:64:d5:5e:3a:b4:
d6:b1:02:93:61:92:5f:2d:d9:8a:41:4b:99:22:8b:
f5:d8:f9:00:7b:01:20:50:dd:69:de:6d:d2:50:d3:
3f:27:58:f6:4f:29:0d:e6:35:22:a7:1f:c9:43:8e:
97:6d:bb:3f:dc:4f:80:9f:77:81:98:10:20:58:24:
ec:3e:64:44:fb:29:8a:7d:43:91:32:f0:b2:b5:9e:
19:87:8e:a8:0b:f9:2d:ac:7a:46:37:2d:77:55:c4:
39:90:2f:0b:39:d5:76:9b:6f:c0:be:12:ef:24:b1:
78:f3:62:12:c8:28:da:43:4c:8b:9f:de:36:11:e3:
50:52:a5:5f:82:e5:3b:55:95:9b:71:bd:2c:d9:3f:
1e:49:fe:ca:7d:48:ff:b3:67:88:66:98:74:c6:02:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:2E:12:F7:91:C0:F2:19:5A:07:E6:5D:A9:8C:B7:E1:14:9B:87
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/02YuEveRwPIZWgfmXamMt-EUm4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.124.0/24
89.144.22.0/24
89.144.58.0/24
Signature Algorithm: sha256WithRSAEncryption
de:be:6a:34:ba:6f:73:b6:86:83:c8:af:f3:8e:73:1a:55:77:
97:b2:2c:58:a1:ea:7e:a0:5b:1d:47:d4:88:c0:39:e6:3e:3a:
4e:d3:04:0d:55:6a:d8:d8:d9:85:62:70:44:99:14:7e:63:12:
c3:cc:25:75:66:62:fa:36:cd:bf:37:0f:45:c7:17:b3:19:6e:
5d:57:eb:10:62:40:83:0b:95:2e:1d:67:ef:e1:ff:77:a1:60:
08:b8:b4:a2:9a:14:dc:86:90:0b:34:1a:1d:88:80:23:34:db:
b4:7c:8c:81:50:09:ff:33:5a:22:6c:b9:81:ae:79:58:79:12:
d5:02:f7:05:8e:00:61:92:51:36:cb:c5:56:a3:f0:0c:9f:62:
3d:38:2e:77:3a:05:87:ae:00:72:d7:35:27:56:f2:a1:54:15:
47:91:7c:5b:b7:f2:c1:ae:9e:6f:37:c5:59:e6:4f:6d:83:62:
8d:c2:3b:e3:a7:53:d7:aa:e2:62:1f:62:0c:a6:bf:dd:f9:da:
f0:b8:82:2e:78:2e:ab:5a:74:09:90:6a:70:02:97:7f:29:77:
a3:4d:01:10:54:dd:b5:c4:71:4b:db:91:b4:2b:c2:2d:3a:eb:
c7:93:44:27:95:9b:9e:dc:67:ee:5c:80:fc:00:e2:ab:a8:d7:
29:cd:c2:ce
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaR11ZNcb2LOG8R91wcZYW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTAyMTYzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzY2MmUxMmY3OTFjMGYyMTk1YTA3ZTY1ZGE5OGNiN2UxMTQ5Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvkS5EFEYKk0j+YxZHnUSwHkRaDY
8BTzpiKmMYJlrkbd2X2C3NY2wAzFJxPwYSlplofEmDtPAPmIKapCIvnxqaI/osPj
mfindMswhpFrAB60IXePQ+yHRebKfv3ySWf8AourZNVeOrTWsQKTYZJfLdmKQUuZ
Iov12PkAewEgUN1p3m3SUNM/J1j2TykN5jUipx/JQ46Xbbs/3E+An3eBmBAgWCTs
PmRE+ymKfUORMvCytZ4Zh46oC/ktrHpGNy13VcQ5kC8LOdV2m2/AvhLvJLF482IS
yCjaQ0yLn942EeNQUqVfguU7VZWbcb0s2T8eSf7KfUj/s2eIZph0xgLdCwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNNmLhL3kcDyGVoH5l2pjLfhFJuHMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMDJZdUV2ZVJ3UElaV2dmbVhhbU10LUVVbTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABed8AwQA
WZAWAwQAWZA6MA0GCSqGSIb3DQEBCwUAA4IBAQDevmo0um9ztoaDyK/zjnMaVXeX
sixYoep+oFsdR9SIwDnmPjpO0wQNVWrY2NmFYnBEmRR+YxLDzCV1ZmL6Ns2/Nw9F
xxezGW5dV+sQYkCDC5UuHWfv4f93oWAIuLSimhTchpALNBodiIAjNNu0fIyBUAn/
M1oibLmBrnlYeRLVAvcFjgBhklE2y8VWo/AMn2I9OC53OgWHrgBy1zUnVvKhVBVH
kXxbt/LBrp5vN8VZ5k9tg2KNwjvjp1PXquJiH2IMpr/d+drwuIIueC6rWnQJkGpw
Apd/KXejTQEQVN21xHFL25G0K8ItOuvHk0QnlZue3GfuXID8AOKrqNcpzcLO
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:56 2025 by rpki-client