Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-glYCC_b6f948fztkXm6xyl0BUM.roa
File: 1-glYCC_b6f948fztkXm6xyl0BUM.roa (raw, json)
Hash identifier: bKA3lKjRRWt2F8S2rGN12Q1yme8RdMiaD11TT+vsYlI=
Subject key identifier: FA:09:58:08:2F:DB:E9:FF:78:F1:FC:ED:91:79:BA:C7:29:74:05:43
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019601CE27DC008D6C37004A3DF39BB5E3A6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-glYCC_b6f948fztkXm6xyl0BUM.roa
Signing time: Fri 04 Apr 2025 17:16:49 +0000
ROA not before: Fri 04 Apr 2025 17:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 14:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:ce:27:dc:00:8d:6c:37:00:4a:3d:f3:9b:b5:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 4 17:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0958082fdbe9ff78f1fced9179bac729740543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:0a:73:5a:8b:20:34:47:73:21:a8:5a:f6:
ca:78:2e:db:69:b6:86:69:c9:79:82:a3:96:a8:78:
d5:b5:01:a7:2c:4e:22:21:09:50:37:5a:46:51:28:
d5:45:13:8b:30:b5:7e:f3:da:08:6a:7b:a1:77:20:
84:6d:4e:8c:7d:11:4f:43:b3:0f:c5:a5:15:5b:b2:
22:be:5b:a1:a5:85:84:87:07:37:95:06:fe:a1:5a:
a8:a8:d9:53:d8:56:a9:67:ad:6f:34:73:df:97:ad:
e6:82:dc:41:dc:b4:59:51:24:43:14:2f:ea:c6:8e:
bd:cd:e5:6d:70:b4:8b:7a:13:75:9c:43:62:22:9f:
e2:8f:64:6f:72:ef:af:72:f1:d9:41:26:0b:23:9a:
2a:36:06:11:59:bf:b2:cd:00:3e:34:cd:fe:2a:13:
b4:38:f6:25:3f:19:45:66:c3:f8:bf:ae:47:70:a0:
93:ca:d8:55:be:a6:11:c1:29:52:65:1a:0f:b3:80:
d5:06:14:d1:e9:ff:00:50:b1:cf:81:9a:57:09:04:
d5:08:a3:23:0e:ad:31:63:76:5a:cc:dc:f4:5e:1d:
dc:75:ff:54:46:5c:96:49:b4:a4:68:13:ab:a0:80:
22:90:fd:19:af:0a:63:29:be:dd:fa:e0:32:ba:b3:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:58:08:2F:DB:E9:FF:78:F1:FC:ED:91:79:BA:C7:29:74:05:43
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-glYCC_b6f948fztkXm6xyl0BUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.33.0/24
77.90.42.0/24
85.93.8.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f6:11:04:df:e2:11:2e:cb:68:15:1e:11:02:46:c4:13:cb:
5e:98:5a:ed:4c:6a:70:5c:c8:83:d3:e7:56:89:0d:33:7d:cd:
c5:f6:93:9f:e5:37:c2:9d:ab:94:d1:b1:d5:32:72:67:06:a6:
79:de:44:c4:d8:49:ff:e8:f3:2e:d3:f9:a0:22:79:f9:51:76:
bc:43:17:8b:c0:03:cd:81:5d:52:73:68:18:e8:2c:f3:67:9e:
f1:4d:e7:2b:20:0d:82:24:ef:79:e7:6a:b5:92:8c:6e:f8:85:
0b:54:5a:60:05:df:ea:14:ad:01:13:c6:3d:62:2e:a8:9e:10:
bb:c0:a8:e9:00:eb:e5:84:e7:aa:2c:3f:3e:47:0b:76:e0:12:
50:9a:0e:f9:29:8c:27:a6:e5:7d:fb:1e:fc:82:71:10:19:15:
db:ef:26:d8:28:5f:65:9b:cd:16:da:d3:42:4c:0b:2e:1f:41:
77:4a:ae:f5:68:67:33:93:9b:5c:05:a9:69:80:99:e7:57:db:
6b:5a:0c:b9:91:39:0b:57:6e:89:93:b9:80:ea:a8:11:96:3c:
54:7d:e9:79:cf:87:b0:ba:a6:8b:01:1a:a8:d5:fd:a2:bf:9c:
63:c1:50:7b:78:e7:13:60:66:a1:11:af:6b:43:ed:44:1b:ee:
53:7b:7d:c3
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZYBzifcAI1sNwBKPfObteOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDA0MTcxNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTA5NTgwODJmZGJlOWZmNzhmMWZjZWQ5MTc5YmFjNzI5NzQwNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B4Kc1qLIDRHcyGoWvbKeC7babaG
acl5gqOWqHjVtQGnLE4iIQlQN1pGUSjVRROLMLV+89oIanuhdyCEbU6MfRFPQ7MP
xaUVW7IivluhpYWEhwc3lQb+oVqoqNlT2FapZ61vNHPfl63mgtxB3LRZUSRDFC/q
xo69zeVtcLSLehN1nENiIp/ij2Rvcu+vcvHZQSYLI5oqNgYRWb+yzQA+NM3+KhO0
OPYlPxlFZsP4v65HcKCTythVvqYRwSlSZRoPs4DVBhTR6f8AULHPgZpXCQTVCKMj
Dq0xY3ZazNz0Xh3cdf9URlyWSbSkaBOroIAikP0ZrwpjKb7d+uAyurPLxQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFPoJWAgv2+n/ePH87ZF5uscpdAVDMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMS1nbFlDQ19iNmY5NDhmenRrWG02eHlsMEJVTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw
Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAAVTmAME
AAXnHQMEAE1aDAMEAE1aIQMEAE1aKgMEAFVdCDANBgkqhkiG9w0BAQsFAAOCAQEA
l/YRBN/iES7LaBUeEQJGxBPLXpha7UxqcFzIg9PnVokNM33NxfaTn+U3wp2rlNGx
1TJyZwamed5ExNhJ/+jzLtP5oCJ5+VF2vEMXi8ADzYFdUnNoGOgs82ee8U3nKyAN
giTveedqtZKMbviFC1RaYAXf6hStARPGPWIuqJ4Qu8Co6QDr5YTnqiw/PkcLduAS
UJoO+SmMJ6blffse/IJxEBkV2+8m2ChfZZvNFtrTQkwLLh9Bd0qu9WhnM5ObXAWp
aYCZ51fba1oMuZE5C1duiZO5gOqoEZY8VH3pec+HsLqmiwEaqNX9or+cY8FQe3jn
E2BmoRGva0PtRBvuU3t9ww==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:10 2025 by rpki-client