Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2PndTjWeiDo961n4goM62rdYU54.roa
File: 2PndTjWeiDo961n4goM62rdYU54.roa (raw, json)
Hash identifier: CZI2JgHhBuSL8qJlEBUaG9YLfDimoNH9Av1sBibZcVI=
Subject key identifier: D8:F9:DD:4E:35:9E:88:3A:3D:EB:59:F8:82:83:3A:DA:B7:58:53:9E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196888F8AE8D7E0B27C92249278F505CBCC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2PndTjWeiDo961n4goM62rdYU54.roa
Signing time: Wed 30 Apr 2025 21:17:10 +0000
ROA not before: Wed 30 Apr 2025 21:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.118.167.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.103.168.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:8f:8a:e8:d7:e0:b2:7c:92:24:92:78:f5:05:cb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 30 21:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f9dd4e359e883a3deb59f882833adab758539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:bd:13:6e:ae:86:b7:ed:d9:69:52:6b:4d:
2d:5e:2e:af:36:92:91:87:71:b2:91:56:47:64:8e:
12:45:4b:39:a8:bc:29:a5:4c:b1:2e:cf:5c:2f:b9:
4c:da:37:65:e6:d0:50:c0:5c:58:07:db:45:a8:c1:
c7:cb:58:7e:79:15:58:e5:8f:2a:85:0c:9b:23:7f:
fa:33:6f:63:ae:b6:29:42:1b:43:06:08:09:3c:7f:
16:d1:76:31:0c:87:6d:0f:bc:3c:2c:47:22:45:3b:
47:2d:f0:47:4f:94:ba:40:3c:19:8a:51:2d:05:e2:
94:8a:cf:a2:19:67:d1:39:56:0e:ee:4f:6f:b7:b0:
4d:83:e8:2b:51:05:26:a4:59:c7:bd:ea:6c:1a:51:
52:12:10:40:47:42:9d:a2:d3:2f:21:d7:f6:dd:fb:
02:da:e6:f0:22:84:12:fc:a4:cd:5a:ad:85:dc:a9:
df:27:9c:3d:c2:48:eb:ff:95:11:9d:25:98:10:fa:
88:4e:97:5d:f7:c8:9d:ac:fe:49:85:7b:26:85:3a:
b6:89:bb:0c:97:5b:b7:1a:db:70:69:e9:68:9f:bc:
ca:85:8a:de:99:c7:80:92:c8:d8:ad:0d:12:10:1e:
3f:90:27:9a:95:45:7e:09:37:11:be:25:41:a3:e5:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:DD:4E:35:9E:88:3A:3D:EB:59:F8:82:83:3A:DA:B7:58:53:9E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2PndTjWeiDo961n4goM62rdYU54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
5.231.30.0/24
5.231.94.0/24
5.231.105.0/24
5.231.115.0/24
5.231.204.0/24
77.90.7.0/24
83.243.86.0/24
85.93.1.0/24
85.118.167.0/24
87.239.129.0/24
89.106.72.0/23
89.106.89.0/24
89.106.91.0/24
89.144.3.0/24
94.103.168.0/24
94.249.172.0/23
94.249.194.0/24
94.249.232.0/23
94.249.238.0/23
95.215.33.0/24
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:e0:46:36:b6:43:13:4b:73:87:3a:72:5c:e2:d1:d9:45:98:
9e:c6:b7:ee:d1:3f:cd:63:cb:ce:b6:8c:b2:24:33:39:ad:89:
88:71:3d:01:4e:1c:45:2e:b6:f5:9b:02:9e:6c:1a:97:fa:a7:
4a:f3:71:13:94:8c:b8:77:48:89:31:d9:c8:49:2d:c5:bd:4f:
1e:32:e3:27:07:e6:db:d7:3e:42:77:7b:6b:e9:51:0b:9a:6f:
2e:b1:80:60:10:7d:3b:a1:81:7e:a6:85:69:c0:ae:70:e6:9b:
c0:ac:84:c3:d2:b0:8c:ba:c2:a1:72:c3:65:90:bf:20:eb:fc:
2c:e6:61:54:1a:e4:0f:9c:81:56:51:45:7c:74:90:24:8a:c4:
96:52:eb:02:09:80:9f:5c:81:44:bd:c3:10:b3:35:70:eb:92:
3d:06:44:a4:7c:3e:f1:74:5d:e5:98:3f:67:bf:2b:ba:8f:49:
4c:f2:75:34:f0:3e:ca:17:35:f7:ba:57:05:55:e1:54:17:c3:
5b:b7:36:53:65:b3:f9:6c:ae:cf:67:58:eb:29:77:ff:32:35:
9f:8b:50:0f:92:dd:b8:e7:b3:9b:f9:ab:a7:aa:3e:ea:81:88:
20:26:ab:5d:de:17:f5:81:fa:1e:c2:c3:4f:cf:f3:0c:01:5b:
9c:b9:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:45 2025 by rpki-client