Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7fxTupBBTp-VFwr6zGwXAJuJIGY.roa
File: 7fxTupBBTp-VFwr6zGwXAJuJIGY.roa (raw, json)
Hash identifier: J8x7pOWmJ4t+2FUi7hzv//OWrAzrRSfar5xAR0PwC50=
Subject key identifier: ED:FC:53:BA:90:41:4E:9F:95:17:0A:FA:CC:6C:17:00:9B:89:20:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01964C3E42E21F8905CCD36AC3AFF3E1228B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7fxTupBBTp-VFwr6zGwXAJuJIGY.roa
Signing time: Sat 19 Apr 2025 04:11:10 +0000
ROA not before: Sat 19 Apr 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 19:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:3e:42:e2:1f:89:05:cc:d3:6a:c3:af:f3:e1:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 19 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edfc53ba90414e9f95170afacc6c17009b892066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:7b:cd:9b:0d:fa:50:82:93:81:a1:5a:6e:
ad:8c:7f:86:93:b7:cc:a5:83:b1:27:02:1e:d4:87:
ad:2d:8c:22:fe:e3:40:34:be:31:fb:dc:9e:96:e5:
4f:2a:73:ac:30:89:c0:63:8d:cb:8f:6a:53:d0:1a:
05:91:5d:a9:84:22:52:4f:b5:97:08:7b:f8:bb:fc:
ec:33:ae:ad:ed:37:31:f5:ae:69:b3:53:55:c7:9a:
ec:03:be:d7:40:33:f2:87:c8:1e:6a:4c:5a:f3:57:
a9:e1:7c:8c:a2:da:24:51:af:1d:81:32:bb:71:d3:
22:9f:64:02:ac:38:bb:64:a9:a7:54:5b:17:90:ed:
ed:59:48:70:3c:e4:f5:30:0a:dc:50:f4:9b:86:7c:
ca:cd:9c:8c:f5:3c:87:66:86:cd:aa:84:f4:5a:24:
a9:a8:e4:af:b7:41:5a:f0:d6:82:f2:23:d5:32:c3:
7d:ed:7b:43:e1:40:a9:1b:87:5c:cd:42:10:01:f0:
ff:ae:c6:39:b8:66:f5:38:17:a0:36:46:93:59:19:
a8:4f:ea:26:6c:f0:6d:8f:00:99:42:dc:60:97:18:
1a:bd:7c:87:d9:b0:d8:f5:a1:77:ef:47:b9:a1:e5:
4e:a0:4a:01:3b:31:8d:d8:55:ae:71:c4:91:72:35:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:53:BA:90:41:4E:9F:95:17:0A:FA:CC:6C:17:00:9B:89:20:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7fxTupBBTp-VFwr6zGwXAJuJIGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
Signature Algorithm: sha256WithRSAEncryption
30:00:64:ac:ba:58:ed:af:ab:a5:4c:95:01:a9:5c:75:f9:70:
0d:05:2d:32:bc:4a:4a:3e:08:15:ff:83:0b:6e:81:2e:1c:b2:
8f:36:b9:61:10:9b:16:17:17:52:ae:56:c3:d9:8a:1b:84:64:
d1:37:ac:59:07:26:b6:81:3b:73:dd:de:b6:e7:b9:92:a3:95:
a2:68:c2:b3:76:c2:28:e5:b5:75:db:9a:23:dd:15:68:75:32:
bf:96:77:15:e3:51:0d:5f:99:85:55:42:66:06:3d:e1:95:83:
e6:a9:94:08:69:e0:5b:5a:27:83:92:e2:06:47:19:cc:9d:ac:
12:0d:16:72:23:a9:da:e2:3f:8b:f0:c4:75:11:ba:b2:ed:c6:
a9:84:16:64:08:6f:ee:94:96:c5:f3:8b:f3:7c:50:86:65:90:
2e:1a:9c:d6:7a:22:fa:8b:5e:b4:92:2d:e6:64:c0:a0:95:55:
23:64:3c:b1:dd:d3:1f:77:d4:5d:73:48:16:27:e9:97:81:26:
fd:f1:60:b4:e8:6d:84:8d:65:23:59:89:77:f0:79:a3:6c:af:
2e:c8:dd:b7:2a:81:b3:b1:ed:c3:df:ae:5f:af:87:12:59:f6:
7b:a8:8c:7e:71:fb:99:ea:26:c8:2e:fb:30:65:3a:4a:cf:ce:
7b:ea:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:37:12 2025 by rpki-client