Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6yO2EGYmg0XlvzD6A7YZz21YlfM.roa
File: 6yO2EGYmg0XlvzD6A7YZz21YlfM.roa (raw, json)
Hash identifier: rhwb6qoAkzNsVWjP8KX0ETJvcn4YwJs5IXhOtyWVB+Q=
Subject key identifier: EB:23:B6:10:66:26:83:45:E5:BF:30:FA:03:B6:19:CF:6D:58:95:F3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195F9DA077DDFE7C99F76F1B70DBC02BF1C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6yO2EGYmg0XlvzD6A7YZz21YlfM.roa
Signing time: Thu 03 Apr 2025 04:12:50 +0000
ROA not before: Thu 03 Apr 2025 04:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213519
IP address blocks: 5.175.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 04:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f9:da:07:7d:df:e7:c9:9f:76:f1:b7:0d:bc:02:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 3 04:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb23b61066268345e5bf30fa03b619cf6d5895f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:22:ff:a5:f4:ff:cb:b4:42:1d:44:d8:1f:
fb:d9:36:be:23:d6:9c:ff:be:de:b4:1a:78:58:ab:
40:29:60:10:b4:fa:9c:ba:11:db:16:18:dc:9b:72:
66:4a:65:2a:d3:0d:61:e1:72:73:88:24:1a:4a:ea:
14:b3:61:f4:6e:53:51:72:dc:dc:6e:08:8c:c4:a2:
0b:33:30:89:78:87:65:d0:c2:26:86:7a:f1:66:35:
a2:26:f1:cd:b3:e4:2e:d5:e6:c8:d3:24:e9:9d:f6:
7a:b7:ed:a4:d4:3c:ab:b9:25:ce:4e:e5:89:48:46:
7a:1f:7a:d8:d1:8d:51:0e:ea:62:af:77:e3:e9:32:
38:a6:bd:b5:7e:33:d6:07:86:dd:bb:52:e5:61:ce:
3d:aa:de:52:7e:1e:7d:74:fb:4f:2f:dc:4f:ef:1c:
c2:2e:48:d6:20:e0:0b:77:69:cb:1f:bc:fa:ab:95:
30:1f:af:b3:5e:2e:2e:bf:aa:1e:a7:c8:bf:a0:56:
db:0f:78:a4:3a:63:b0:82:47:ed:0c:f4:1d:ef:8e:
96:aa:c0:fd:a3:4c:ef:44:9b:cc:62:49:be:10:41:
58:98:9b:1f:74:7a:19:55:b0:19:37:ad:50:c8:b9:
b0:2c:a2:b1:22:19:9e:e8:3c:95:6b:1c:d8:6d:47:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:B6:10:66:26:83:45:E5:BF:30:FA:03:B6:19:CF:6D:58:95:F3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6yO2EGYmg0XlvzD6A7YZz21YlfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:25:de:50:65:a8:6e:f8:01:3e:b4:d6:95:8c:74:f9:f4:cb:
f4:cc:ba:d8:ac:5f:bc:f4:c7:b5:25:ac:0a:a4:bf:f6:fd:63:
b5:90:66:8f:1b:e7:7c:d8:2b:58:cd:c8:1e:ac:cb:cc:12:d1:
59:0f:7e:84:98:00:6e:c2:af:ab:60:ce:cb:2c:84:d6:37:da:
13:12:9c:7f:1c:82:27:5e:8b:72:41:78:39:f4:02:3f:08:60:
4f:59:84:ec:9f:18:27:83:e4:d1:f1:b7:84:65:7d:ca:7c:78:
12:76:ec:34:e6:65:e2:f0:03:09:8b:f0:4e:68:bf:bc:d6:c8:
98:d4:5d:9b:4e:69:d0:8a:b7:78:39:20:5f:ce:fa:52:72:e3:
ec:ab:42:bb:bf:0e:80:b8:48:4b:a5:0a:c0:64:55:06:dd:c8:
84:6f:7c:26:7c:df:cf:e1:69:01:5d:bb:7a:18:0e:a0:81:c4:
da:b6:99:c9:1c:ef:fe:cc:f0:f7:e4:9a:6f:f9:9c:55:d0:39:
94:e7:e9:e0:e4:a3:00:15:60:67:63:8c:58:a0:75:8d:a4:7f:
b5:85:9d:52:c9:da:70:9f:4c:81:98:35:0b:18:b5:89:07:57:
3e:a9:0b:9f:56:2f:f9:41:5c:7a:5b:97:68:64:f3:75:21:9a:
ee:99:de:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX52gd93+fJn3bxtw28Ar8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDAzMDQxMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjIzYjYxMDY2MjY4MzQ1ZTViZjMwZmEwM2I2MTljZjZkNTg5NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Mi/6X0/8u0Qh1E2B/72Ta+I9ac
/77etBp4WKtAKWAQtPqcuhHbFhjcm3JmSmUq0w1h4XJziCQaSuoUs2H0blNRctzc
bgiMxKILMzCJeIdl0MImhnrxZjWiJvHNs+Qu1ebI0yTpnfZ6t+2k1DyruSXOTuWJ
SEZ6H3rY0Y1RDupir3fj6TI4pr21fjPWB4bdu1LlYc49qt5Sfh59dPtPL9xP7xzC
LkjWIOALd2nLH7z6q5UwH6+zXi4uv6oep8i/oFbbD3ikOmOwgkftDPQd746WqsD9
o0zvRJvMYkm+EEFYmJsfdHoZVbAZN61QyLmwLKKxIhme6DyVaxzYbUcBsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsjthBmJoNF5b8w+gO2Gc9tWJXzMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNnlPMkVHWW1nMFhsdnpENkE3WVp6MjFZbGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/vMA0G
CSqGSIb3DQEBCwUAA4IBAQAqJd5QZahu+AE+tNaVjHT59Mv0zLrYrF+89Me1JawK
pL/2/WO1kGaPG+d82CtYzcgerMvMEtFZD36EmABuwq+rYM7LLITWN9oTEpx/HIIn
XotyQXg59AI/CGBPWYTsnxgng+TR8beEZX3KfHgSduw05mXi8AMJi/BOaL+81siY
1F2bTmnQird4OSBfzvpScuPsq0K7vw6AuEhLpQrAZFUG3ciEb3wmfN/P4WkBXbt6
GA6ggcTatpnJHO/+zPD35Jpv+ZxV0DmU5+ng5KMAFWBnY4xYoHWNpH+1hZ1Sydpw
n0yBmDULGLWJB1c+qQufVi/5QVx6W5doZPN1IZrumd51
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:43:29 2025 by rpki-client