Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/957mLDs19i2vVQSCE4OS2lqNUUI.roa
File: 957mLDs19i2vVQSCE4OS2lqNUUI.roa (raw, json)
Hash identifier: mLbWbW8l6PPn4ACaYHoI74Nd6QpQPGAgOcPf4sF7Zuo=
Subject key identifier: F7:9E:E6:2C:3B:35:F6:2D:AF:55:04:82:13:83:92:DA:5A:8D:51:42
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196A0DE623FFB071A9A441028E0E83CD695
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/957mLDs19i2vVQSCE4OS2lqNUUI.roa
Signing time: Mon 05 May 2025 14:34:10 +0000
ROA not before: Mon 05 May 2025 14:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62041
IP address blocks: 5.231.113.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 07:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:de:62:3f:fb:07:1a:9a:44:10:28:e0:e8:3c:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 5 14:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79ee62c3b35f62daf550482138392da5a8d5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:d5:3f:26:37:83:d4:56:d7:7b:da:93:67:
f1:db:56:1d:35:04:f5:54:31:03:70:35:b9:1a:31:
2b:49:29:07:72:d6:ff:1e:33:16:e2:8e:b2:12:d5:
62:52:02:4d:c5:50:c7:42:f9:9c:66:f2:16:80:bd:
40:c6:3c:29:84:2e:89:31:ee:88:06:ae:7c:13:5d:
12:49:d2:2e:0a:77:15:51:d5:7f:f6:e7:c3:b7:22:
54:49:51:d0:61:2c:6a:0b:9a:c0:f3:72:de:5f:07:
28:1d:a1:78:70:15:38:63:30:67:d9:e3:cd:20:96:
14:0e:f9:10:2f:c2:03:f5:f7:a5:10:fe:3d:0c:77:
d5:3e:45:04:dd:67:d1:59:21:b3:06:a5:28:a0:89:
e1:d2:89:a3:ec:26:34:e3:8d:e9:1d:27:36:20:47:
5d:b4:75:51:6f:62:0a:5f:34:60:05:62:04:ab:6a:
59:65:c5:30:20:61:81:37:76:8f:b2:b4:19:17:59:
53:ee:82:70:17:bb:a5:24:a8:85:e6:98:b0:96:05:
b8:9e:0e:92:58:37:93:d2:b8:43:69:9f:d9:82:65:
5e:50:d8:ab:96:81:46:e8:92:87:b6:d4:7a:eb:22:
19:7e:37:c4:43:f3:2b:45:6c:8a:1c:19:99:1f:a1:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:E6:2C:3B:35:F6:2D:AF:55:04:82:13:83:92:DA:5A:8D:51:42
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/957mLDs19i2vVQSCE4OS2lqNUUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.113.0/24
85.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:99:f3:27:8d:74:7a:d6:52:37:08:bc:93:33:30:a3:97:cb:
33:6c:ca:b3:5d:4b:1b:d8:0c:76:bf:05:de:4d:a8:86:cb:d7:
89:26:cc:20:ed:ee:d1:e7:7b:0d:2e:3c:05:18:80:15:4e:46:
95:b8:aa:82:cc:68:3a:0e:0c:f3:17:84:83:88:18:20:c7:5f:
2b:09:59:58:c4:8a:c0:40:cd:b7:e2:5d:5e:5b:97:52:91:0e:
ff:eb:e8:33:30:06:71:1e:9c:d6:fe:f0:a9:cd:94:ad:44:b7:
82:0a:5a:da:e7:ac:17:fd:47:17:79:d2:64:7f:88:1c:0e:c5:
27:45:65:4f:5f:6e:3f:bb:f2:d4:a9:c3:2f:68:14:0d:63:8a:
0c:44:a7:66:8c:5b:41:99:fd:ca:d3:18:ed:49:4b:26:87:2f:
da:5f:8d:8a:cc:f5:bd:16:dc:7e:19:e1:66:21:72:09:b5:7d:
f4:ec:0a:94:c3:83:3c:44:a4:c5:76:f0:8a:b1:b3:eb:60:73:
8a:d5:cf:15:f0:59:35:70:c7:51:0a:18:2b:cb:5d:31:b7:1e:
cf:d5:4f:bb:e7:0d:82:de:8b:78:e4:e6:d3:99:f8:df:e4:e0:
8b:5d:05:24:4e:43:93:fe:51:e6:85:a6:b0:0a:5c:50:e7:e3:
3b:a1:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:24:12 2025 by rpki-client