Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8vz8a8wurji5P8bOOVkLN7coZDw.roa
File: 8vz8a8wurji5P8bOOVkLN7coZDw.roa (raw, json)
Hash identifier: OLh7wf773+oOvM/K3sMb6UzSX1MGzuFfMetDV60gdWo=
Subject key identifier: F2:FC:FC:6B:CC:2E:AE:38:B9:3F:C6:CE:39:59:0B:37:B7:28:64:3C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01970ACB2727CC5301F6D33380B48A01D8B6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8vz8a8wurji5P8bOOVkLN7coZDw.roa
Signing time: Mon 26 May 2025 04:12:55 +0000
ROA not before: Mon 26 May 2025 04:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:cb:27:27:cc:53:01:f6:d3:33:80:b4:8a:01:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 26 04:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2fcfc6bcc2eae38b93fc6ce39590b37b728643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:8b:51:1d:cf:a9:86:2c:97:1b:04:ec:5d:
9c:c3:fc:b1:cf:75:7f:25:8a:09:c2:02:47:e9:16:
aa:be:17:5b:65:b8:1e:70:b6:83:54:15:b0:30:ed:
dd:68:70:63:a4:e3:04:73:03:49:6c:20:44:4d:3e:
d7:cb:ac:6f:8d:7a:70:de:f6:d3:cd:c2:dc:ff:86:
a7:b5:07:dd:1d:1a:ca:72:be:e5:a4:8f:0f:50:b5:
f6:43:d6:ba:00:4a:24:dc:77:2b:0f:14:6e:55:31:
da:25:c2:f5:64:de:93:42:bd:e0:12:cf:32:f6:0d:
fb:02:50:0e:7b:33:a4:09:be:0d:0d:23:9a:69:88:
36:44:89:97:4b:0e:62:e6:6a:e5:8e:74:5e:b8:b7:
71:db:f8:5a:bc:3f:b3:9e:cf:09:c7:65:ca:df:f6:
33:ca:20:d5:9e:ef:66:d3:57:c5:25:22:8e:77:5f:
a2:0e:a6:d2:70:9a:3c:ee:6b:e0:45:84:2d:8b:0c:
9f:f1:10:fc:6f:f8:90:b3:9e:07:1e:31:7c:64:16:
d1:eb:3d:9c:be:b8:6b:0b:b1:13:ab:8a:36:d1:8c:
fb:9b:56:80:bf:8d:27:38:2d:81:f1:ad:ee:ed:47:
80:26:ed:ac:14:ae:ec:5c:9b:92:06:06:6e:97:58:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:FC:6B:CC:2E:AE:38:B9:3F:C6:CE:39:59:0B:37:B7:28:64:3C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8vz8a8wurji5P8bOOVkLN7coZDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.175.239.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
89.106.88.0/24
94.103.167.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a6:07:31:91:b5:87:2b:0b:f9:a5:8c:bc:16:a0:9e:b7:e9:
24:86:b6:a9:e0:54:7f:bd:10:d5:bd:51:ca:f9:68:d3:6a:47:
bc:30:ae:46:fb:35:65:52:5e:ef:89:b6:3f:73:9c:3d:82:6b:
0c:be:a9:c2:a0:ca:d0:df:2c:6b:db:e8:c8:dc:7c:ed:fe:e6:
57:39:e2:36:7e:dc:e7:a0:82:e6:18:b5:5e:21:b5:a3:12:21:
2d:f4:4e:78:ec:bd:81:10:42:da:a7:7f:15:d9:6e:96:bf:7e:
72:bc:b8:64:d5:d4:ea:d7:c2:22:4e:8a:ae:81:f4:81:09:68:
8f:7b:7f:52:9a:eb:c6:ac:78:e2:10:19:84:7e:cc:38:b4:0b:
5f:cf:c4:9b:4c:6e:87:c4:3d:a9:f0:de:91:4b:5f:db:0a:ff:
dc:c8:23:75:40:6c:bf:08:05:03:cf:e8:92:23:da:64:99:e5:
40:28:36:b3:6a:3d:a4:f3:d0:c3:3f:e1:8a:a2:d7:7e:18:18:
8f:7d:6f:ca:5e:23:f0:84:2a:d8:d7:a4:23:bc:e9:f8:ca:72:
c1:ed:e9:fe:db:54:b6:33:96:89:65:9f:39:2e:c3:02:b5:9e:
97:23:2d:49:7b:74:f7:3d:3e:b7:92:79:94:a8:90:47:36:d3:
96:20:fe:e8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZcKyycnzFMB9tMzgLSKAdi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTI2MDQxMjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmZjZmM2YmNjMmVhZTM4YjkzZmM2Y2UzOTU5MGIzN2I3Mjg2NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JqLUR3PqYYslxsE7F2cw/yxz3V/
JYoJwgJH6RaqvhdbZbgecLaDVBWwMO3daHBjpOMEcwNJbCBETT7Xy6xvjXpw3vbT
zcLc/4antQfdHRrKcr7lpI8PULX2Q9a6AEok3HcrDxRuVTHaJcL1ZN6TQr3gEs8y
9g37AlAOezOkCb4NDSOaaYg2RImXSw5i5mrljnReuLdx2/havD+zns8Jx2XK3/Yz
yiDVnu9m01fFJSKOd1+iDqbScJo87mvgRYQtiwyf8RD8b/iQs54HHjF8ZBbR6z2c
vrhrC7ETq4o20Yz7m1aAv40nOC2B8a3u7UeAJu2sFK7sXJuSBgZul1hEfQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFPL8/GvMLq44uT/GzjlZCze3KGQ8MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOHZ6OGE4d3Vyamk1UDhiT09Wa0xON2NvWkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABa/tAwQA
Ba/vMAwDBAAF5xkDBAAF5xoDBABZakUDBABZakcDBABZalgDBABeZ6cDBAC5DZww
DQYJKoZIhvcNAQELBQADggEBAC+mBzGRtYcrC/mljLwWoJ636SSGtqngVH+9ENW9
Ucr5aNNqR7wwrkb7NWVSXu+Jtj9znD2Cawy+qcKgytDfLGvb6MjcfO3+5lc54jZ+
3OegguYYtV4htaMSIS30TnjsvYEQQtqnfxXZbpa/fnK8uGTV1OrXwiJOiq6B9IEJ
aI97f1Ka68aseOIQGYR+zDi0C1/PxJtMbofEPanw3pFLX9sK/9zII3VAbL8IBQPP
6JIj2mSZ5UAoNrNqPaTz0MM/4Yqi134YGI99b8peI/CEKtjXpCO86fjKcsHt6f7b
VLYzlollnzkuwwK1npcjLUl7dPc9PreSeZSokEc205Yg/ug=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:59 2025 by rpki-client