Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NZGcCd32-WmahLXD1Us0P658w.roa
File: 95NZGcCd32-WmahLXD1Us0P658w.roa (raw, json)
Hash identifier: Yr04axrkeLNmRVOM11yeMyrg8aNMzIcVZWBS5dAVEzI=
Subject key identifier: F7:93:59:19:C0:9D:DF:6F:96:99:A8:4B:5C:3D:54:B3:43:FA:E7:CC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F1102AEDBC1F560843898AD410E6BB49
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NZGcCd32-WmahLXD1Us0P658w.roa
Signing time: Wed 21 May 2025 04:18:10 +0000
ROA not before: Wed 21 May 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 04:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:10:2a:ed:bc:1f:56:08:43:89:8a:d4:10:e6:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7935919c09ddf6f9699a84b5c3d54b343fae7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:a4:f2:e9:e9:87:2b:9a:af:99:c0:39:b9:
99:f0:53:f0:5f:eb:d9:c2:35:ec:ab:9f:86:be:a2:
e4:cf:16:8a:e5:1e:30:65:a6:6f:ec:f2:e8:8a:e9:
27:ee:d9:c5:71:67:23:63:3a:33:cf:13:7f:20:d1:
50:0a:65:e9:7c:f7:ab:f1:52:bd:f3:8e:78:d5:7f:
94:a3:f2:77:f6:bb:be:c8:fe:aa:d3:aa:f9:c0:0c:
ad:3f:1c:59:1f:f7:25:ec:4b:22:a4:89:9e:0a:de:
5f:52:26:ba:6e:64:5a:cf:a7:19:43:03:8c:15:d5:
d8:15:2e:9f:48:b1:46:35:e8:91:51:46:94:0e:de:
20:8e:1c:44:0a:b9:63:75:b2:14:c7:48:95:b7:fd:
91:ed:3a:13:0a:9a:1a:40:c6:7e:86:2a:0b:ff:8d:
65:4d:5b:7c:9e:cb:4a:1a:83:5f:a6:d6:4a:15:c2:
72:34:9f:82:49:1c:5a:f4:bb:4b:d9:15:02:28:c0:
e2:50:df:7a:18:c4:9c:f3:46:d6:c7:4c:39:49:4d:
01:52:ba:c2:ce:65:2a:e6:2f:a8:ea:5c:87:1f:3c:
70:6e:8b:34:23:6b:34:14:48:be:ab:16:a2:a4:b2:
c7:9c:07:64:1d:14:ec:71:ca:e1:22:39:b1:7f:18:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:59:19:C0:9D:DF:6F:96:99:A8:4B:5C:3D:54:B3:43:FA:E7:CC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/95NZGcCd32-WmahLXD1Us0P658w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.237.0/24
5.175.239.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3a:98:e8:f2:79:0c:2f:f1:91:3a:9b:df:4e:75:2d:c9:e0:
e3:ad:83:8b:64:d9:3b:8f:ea:26:51:de:81:6a:b7:a1:f3:ac:
f6:fd:a7:bd:3b:9f:21:46:4b:da:5d:e6:16:ff:55:68:77:2e:
c9:35:15:fc:fd:ef:5e:94:ec:90:f8:3d:32:e8:18:c7:b9:ca:
d4:b8:13:1c:4a:95:e3:f6:14:54:67:f2:fd:22:f1:ff:d1:b2:
c2:0c:5e:47:79:51:59:ee:eb:d6:b7:0f:e7:0c:4f:a8:10:82:
46:83:99:bb:a6:2b:38:c3:16:0f:ef:02:51:bc:88:99:60:0a:
c0:1b:20:00:1e:00:a1:d0:7b:3e:b1:75:a7:02:94:b0:06:fe:
04:01:60:91:54:ba:f5:a1:73:f3:a9:f8:a8:40:78:1d:ca:1d:
a0:98:9c:f0:eb:97:1e:5e:10:eb:c4:38:77:39:b9:a1:64:78:
5b:0a:e5:60:3f:1c:cb:cb:1e:d2:3e:52:1d:00:1c:59:72:50:
b4:fc:b1:bd:76:7d:ff:ab:3f:6f:c1:19:e0:82:0d:e4:96:2e:
58:78:04:64:bd:f6:b4:dd:e4:b4:d4:00:61:9d:76:d2:98:83:
57:e2:f0:4f:7e:58:88:32:c4:a2:d7:c8:5b:67:72:27:97:13:
5d:aa:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:24:06 2025 by rpki-client