Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fag__WTSKNyigjUTAlZ5ilQl9g.roa
File: 3fag__WTSKNyigjUTAlZ5ilQl9g.roa (raw, json)
Hash identifier: rln4O3ziru+HEbDRnYbdr2m8jbMjx7p9PMTUo0nVJBU=
Subject key identifier: DD:F6:A0:FF:F5:93:48:A3:72:8A:08:D4:4C:09:59:E6:29:50:97:D8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019680740A0C1F05D5B9DB4FA8500547D9F2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fag__WTSKNyigjUTAlZ5ilQl9g.roa
Signing time: Tue 29 Apr 2025 07:30:10 +0000
ROA not before: Tue 29 Apr 2025 07:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.111.0/24 maxlen: 24
5.231.114.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:74:0a:0c:1f:05:d5:b9:db:4f:a8:50:05:47:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 07:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf6a0fff59348a3728a08d44c0959e6295097d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:1e:8b:0c:1f:37:44:9a:92:4e:a7:a4:dc:
57:cb:d2:d6:fa:5b:0e:9a:4f:c9:5d:7a:bf:02:06:
73:31:ef:a1:0c:a2:2d:79:02:4b:75:11:b1:42:4d:
d7:46:6e:8c:8f:80:c3:94:e1:6c:da:f6:5c:c3:f2:
92:e4:99:0c:58:24:2e:36:25:c9:75:c9:5e:9d:c6:
95:e4:19:ea:17:6a:5f:c6:3c:5e:aa:b1:57:8a:c4:
3c:6e:d0:7e:90:cb:d8:38:22:f3:b0:96:76:ff:1f:
dd:2c:28:34:7f:f9:03:4b:d8:27:6a:71:5c:1a:19:
ce:e1:03:dc:a6:32:c4:9c:79:97:60:c7:a7:7f:cf:
72:48:62:d3:08:a8:3c:bf:f6:7b:11:a5:35:2c:32:
1d:dc:c2:86:42:3f:3d:7e:0f:cd:fb:ce:d4:80:f0:
47:23:6b:f2:50:0b:d4:a9:98:27:6c:69:65:e8:eb:
5c:eb:4a:41:37:a3:58:51:6c:17:fb:1f:c0:2d:25:
84:ae:21:57:41:78:c3:0d:4b:2e:27:97:b7:7f:93:
f8:de:ea:63:e2:40:ee:25:61:6e:98:bc:c6:52:dd:
10:d8:82:2a:8d:07:20:98:da:27:b2:28:a3:a4:da:
8a:d4:51:b8:64:e3:7c:97:26:1b:89:9d:13:d2:80:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:A0:FF:F5:93:48:A3:72:8A:08:D4:4C:09:59:E6:29:50:97:D8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3fag__WTSKNyigjUTAlZ5ilQl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.237.0/24
5.175.239.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.111.0/24
5.231.114.0/24
5.231.233.0/24
77.90.39.0/24
85.93.23.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1a:fc:47:95:81:48:f0:cd:5b:ab:f3:6a:a4:85:87:4f:ef:
22:66:a8:e2:9b:dc:6f:74:0a:bb:1b:40:ed:d6:87:06:64:f2:
d4:f2:16:db:48:73:bb:75:3d:4a:7d:29:75:1d:33:89:0a:08:
85:66:bc:47:c4:4b:eb:89:8b:82:25:10:98:3f:34:f2:49:a5:
47:af:1c:9f:be:a7:7f:5a:13:60:2a:fe:0b:7b:ab:95:6e:06:
f4:20:ae:22:c8:bb:38:4c:44:d8:fd:17:24:91:44:43:03:35:
ca:51:f4:9c:e8:f0:ac:ba:56:de:bd:46:7b:68:05:10:a9:bf:
32:50:72:a3:16:50:36:5b:11:92:13:ed:76:7f:95:8e:7b:1a:
8b:29:c7:91:a5:9a:36:d7:34:9d:d8:5b:64:16:f1:7b:37:0d:
02:a0:51:5c:4a:6e:cc:8e:38:05:f8:f6:4b:69:68:b2:c2:4b:
c8:e3:d8:37:26:50:a4:7f:f3:33:0e:6c:7d:b4:d5:c7:b5:91:
42:f8:8f:c7:14:09:cb:37:46:ab:e9:bf:29:69:0e:a8:cd:66:
e5:0e:91:7a:ae:d9:3c:86:2f:7d:50:1e:53:bf:28:fa:8c:63:
5c:3f:9a:84:41:9d:3e:9f:c4:72:b8:e5:1d:92:17:37:07:c2:
95:af:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:09 2025 by rpki-client