Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4wU9PqjsUYEEIDpj6Onsx7nG55I.roa
File: 4wU9PqjsUYEEIDpj6Onsx7nG55I.roa (raw, json)
Hash identifier: d2bq5bH2zZ24fMWtRq/yxZFDRCj8kD2uE1WfJRg0dss=
Subject key identifier: E3:05:3D:3E:A8:EC:51:81:04:20:3A:63:E8:E9:EC:C7:B9:C6:E7:92
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197580825CCB798AF2A754C11F6FB4FC83B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4wU9PqjsUYEEIDpj6Onsx7nG55I.roa
Signing time: Tue 10 Jun 2025 04:10:18 +0000
ROA not before: Tue 10 Jun 2025 04:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.200.0/24 maxlen: 24
5.175.201.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.210.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:08:25:cc:b7:98:af:2a:75:4c:11:f6:fb:4f:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 04:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3053d3ea8ec518104203a63e8e9ecc7b9c6e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:a8:6f:eb:4c:69:f0:b4:31:3f:01:54:9b:
e6:96:36:27:93:b6:7e:e4:62:e5:61:2a:eb:f3:c8:
3e:ab:75:e6:42:a8:be:f1:c7:cd:d5:4f:65:c1:48:
78:2f:f2:0e:87:fa:f6:77:b9:dc:a6:f6:90:4d:50:
cb:7b:ef:d6:26:85:cd:92:ef:da:c6:a8:08:b8:6a:
76:3a:c7:54:79:35:c2:99:7e:9e:99:ac:32:f8:d8:
3f:e6:99:ad:e0:8a:2e:d2:eb:9e:da:c2:70:a5:aa:
51:b0:c4:3b:56:11:9a:7f:db:df:38:a3:df:9e:57:
e4:28:b6:15:b5:7a:61:41:7b:b0:8d:f2:d1:2d:87:
93:39:f8:27:e4:92:d1:31:84:6c:00:a8:26:2b:d2:
da:fa:94:8c:3d:98:8c:fa:32:60:cb:bc:76:7a:3b:
1f:21:b5:f1:b3:59:79:30:d0:a4:bf:0b:42:7c:3b:
33:3e:85:19:a3:6f:d2:19:ce:0b:30:68:00:a8:d8:
df:12:d1:85:5b:e5:a3:9b:5e:f3:eb:23:a8:ae:eb:
b9:cc:7c:73:30:c3:53:5e:ee:05:90:74:57:6e:82:
90:b5:35:b7:fb:4b:1a:40:18:c6:f3:ad:de:0a:4e:
4d:8c:73:31:82:82:91:62:cd:e4:d7:e4:f6:47:3b:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:3D:3E:A8:EC:51:81:04:20:3A:63:E8:E9:EC:C7:B9:C6:E7:92
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4wU9PqjsUYEEIDpj6Onsx7nG55I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.200.0/23
5.175.204.0/23
5.175.209.0-5.175.214.255
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
85.93.5.0/24
85.93.21.0/24
85.93.31.0/24
89.106.70.0/24
89.144.5.0/24
89.144.34.0/24
89.144.39.0/24
94.249.168.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:dc:95:5a:d0:9b:00:a4:40:ac:f6:24:97:a4:1a:54:49:88:
bb:bb:77:58:f8:7a:eb:11:dc:64:3b:22:36:ba:e1:b9:95:58:
01:ec:a9:ba:05:e5:54:39:7e:8a:25:5c:ee:c9:5b:5f:e7:a0:
3e:2c:b3:40:f5:a7:c0:fb:45:dc:3b:51:8e:33:fe:6c:23:1d:
66:e4:4a:a6:99:4b:f0:6c:ef:b8:b8:c6:9e:27:3e:ca:e8:18:
1f:a0:9a:a3:4c:91:8a:96:0f:bd:ed:f5:bd:7e:67:b3:ce:82:
7f:65:91:82:04:bd:7c:c4:54:51:97:87:6f:67:2f:a6:b4:89:
01:d8:17:f6:6c:a0:15:13:cd:13:64:1b:2c:f1:79:16:8c:c8:
8b:c5:ec:aa:68:1b:e2:a1:bb:df:d3:34:8e:20:6a:ad:e5:fc:
d1:86:9d:48:38:38:e6:b9:36:fb:b9:77:a1:04:2d:67:9b:93:
44:aa:30:6a:4f:a6:2d:09:40:af:c0:90:26:8e:f8:9f:18:51:
3b:ec:a0:07:ff:1b:0e:da:c9:14:ec:ce:09:20:f3:a2:9c:4b:
c6:c5:13:2f:6b:f4:42:26:6c:90:8c:43:5c:7e:db:a8:ce:dc:
9d:8d:10:fc:c6:02:43:28:23:f3:0a:e3:ba:b0:ba:ed:91:5e:
d1:84:be:0d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZdYCCXMt5ivKnVMEfb7T8g7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjEwMDQxMDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzA1M2QzZWE4ZWM1MTgxMDQyMDNhNjNlOGU5ZWNjN2I5YzZlNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyuob+tMafC0MT8BVJvmljYnk7Z+
5GLlYSrr88g+q3XmQqi+8cfN1U9lwUh4L/IOh/r2d7ncpvaQTVDLe+/WJoXNku/a
xqgIuGp2OsdUeTXCmX6emawy+Ng/5pmt4Iou0uue2sJwpapRsMQ7VhGaf9vfOKPf
nlfkKLYVtXphQXuwjfLRLYeTOfgn5JLRMYRsAKgmK9La+pSMPZiM+jJgy7x2ejsf
IbXxs1l5MNCkvwtCfDszPoUZo2/SGc4LMGgAqNjfEtGFW+Wjm17z6yOoruu5zHxz
MMNTXu4FkHRXboKQtTW3+0saQBjG863eCk5NjHMxgoKRYs3k1+T2RzumSQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFOMFPT6o7FGBBCA6Y+jp7Me5xueSMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNHdVOVBxanNVWUVFSURwajZPbnN4N25HNTVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAF
U4oDBAEFr8gDBAEFr8wwDAMEAAWv0QMEAAWv1gMEAAWv7gMEAAXmpAMEAAXnPTAM
AwQABedHAwQCBedIAwQABedPAwQABedcAwQAVV0FAwQAVV0VAwQAVV0fAwQAWWpG
AwQAWZAFAwQAWZAiAwQAWZAnAwQBXvmoAwQAXvntMA0GCSqGSIb3DQEBCwUAA4IB
AQA73JVa0JsApECs9iSXpBpUSYi7u3dY+HrrEdxkOyI2uuG5lVgB7Km6BeVUOX6K
JVzuyVtf56A+LLNA9afA+0XcO1GOM/5sIx1m5EqmmUvwbO+4uMaeJz7K6BgfoJqj
TJGKlg+97fW9fmezzoJ/ZZGCBL18xFRRl4dvZy+mtIkB2Bf2bKAVE80TZBss8XkW
jMiLxeyqaBviobvf0zSOIGqt5fzRhp1IODjmuTb7uXehBC1nm5NEqjBqT6YtCUCv
wJAmjvifGFE77KAH/xsO2skU7M4JIPOinEvGxRMva/RCJmyQjENcftuoztydjRD8
xgJDKCPzCuO6sLrtkV7RhL4N
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:05 2025 by rpki-client