Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-AqYEpbSwQa7dZiluc76icFqXug.roa
File: 1-AqYEpbSwQa7dZiluc76icFqXug.roa (raw, json)
Hash identifier: mFuwdZQN+nClam2zW3p3+CEw/6A8ilLzRpT2OCtFHZ0=
Subject key identifier: F8:0A:98:12:96:D2:C1:06:BB:75:98:A5:B9:CE:FA:89:C1:6A:5E:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961675F93417B8EAF1DB3B128B0A988348
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-AqYEpbSwQa7dZiluc76icFqXug.roa
Signing time: Tue 08 Apr 2025 17:32:32 +0000
ROA not before: Tue 08 Apr 2025 17:32:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 04:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:75:f9:34:17:b8:ea:f1:db:3b:12:8b:0a:98:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 17:32:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f80a981296d2c106bb7598a5b9cefa89c16a5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:54:3d:75:e0:26:5a:92:ce:76:33:02:c6:
1d:17:1a:03:de:5b:3c:16:f4:75:f0:07:0c:37:cc:
3e:4a:c2:56:c5:16:9d:12:9b:cd:bd:df:73:51:a8:
18:48:2b:a2:cf:57:22:61:72:64:c3:24:15:6a:d8:
e4:ee:e8:f8:79:5f:9c:90:d8:d2:54:4d:01:e0:34:
a7:e3:65:2b:c5:58:b9:d7:cd:a0:51:81:a1:0f:a3:
af:5b:15:f6:87:a0:42:11:54:b2:b5:af:96:7d:48:
a4:8b:d8:56:09:01:0c:f2:8d:7b:77:ca:3c:a7:c5:
88:8f:41:a5:49:6b:d1:54:35:dc:0e:90:4c:ae:3c:
f3:5a:c1:d9:5f:5e:0b:e7:a6:dc:c3:63:c8:5d:1d:
62:50:dc:4c:f2:51:f0:c9:a7:9c:0b:84:0b:03:3f:
37:3d:82:57:58:31:f4:52:c8:ac:25:57:e0:eb:05:
08:f7:f7:70:97:7f:4a:0e:35:b0:ca:fd:4c:bf:74:
5a:0d:5a:b3:99:3a:9c:cb:a4:b8:01:0d:3d:4c:b3:
cc:f5:da:5c:fa:fb:16:9e:d6:c0:2c:89:c2:4e:fb:
9a:63:e6:06:b0:67:32:73:ec:89:68:e5:c8:c0:61:
bf:5c:dd:5a:08:f9:16:8f:8c:6a:8e:67:ad:8b:ef:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:98:12:96:D2:C1:06:BB:75:98:A5:B9:CE:FA:89:C1:6A:5E:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-AqYEpbSwQa7dZiluc76icFqXug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
5.231.96.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.7.0-89.144.8.255
89.144.14.0/24
89.144.16.0/24
89.144.25.0/24
89.144.35.0/24
94.249.153.0/24
94.249.158.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:2d:1e:1b:be:ff:49:f9:c6:4a:0b:18:5d:9b:f4:87:0a:87:
4f:c7:4e:88:d7:fc:f8:6b:41:c7:39:76:0c:a3:08:cf:8a:b4:
94:55:73:fe:c7:22:16:6d:7c:c7:ca:ca:4c:c7:1e:52:97:3c:
be:6a:0b:0d:85:74:a1:33:d2:6a:c3:d5:ce:0b:86:54:ba:06:
fd:bf:7b:63:3a:26:48:cd:2a:28:7b:8c:d8:8e:45:10:09:de:
31:a8:d6:45:de:49:77:07:3d:03:98:cc:55:65:35:88:33:b1:
67:2d:50:b9:b9:03:4c:d1:19:3d:ea:ee:52:de:29:99:25:91:
64:46:bd:6a:81:83:44:c5:88:09:98:2b:7d:74:c5:71:69:dc:
98:cf:9c:2e:57:28:f5:99:dd:74:80:f5:1d:08:d3:ff:d8:01:
21:e2:30:53:1b:e2:ca:ee:7a:92:d8:94:b4:3f:29:1f:19:f3:
67:b0:8c:85:0f:f8:f8:52:53:22:f6:4d:7d:6c:ca:2e:aa:39:
c2:ed:a7:5e:d5:ba:8c:ce:f9:37:55:3d:59:e2:b5:2b:04:01:
91:2c:f8:b4:43:8b:7f:49:4d:e2:c5:7e:ce:ac:5e:3b:e5:16:
b4:4f:c2:4b:24:bd:b7:1d:69:df:ea:cb:67:95:4c:ee:2e:37:
0e:cc:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:14 2025 by rpki-client