Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9FvFYHjLmawlmeM0wbH6RKq-d_k.roa
File: 9FvFYHjLmawlmeM0wbH6RKq-d_k.roa (raw, json)
Hash identifier: i8QMPvqLhPuShKFrxDx3pQGpFa+kdwNJR/63+FeEmRg=
Subject key identifier: F4:5B:C5:60:78:CB:99:AC:25:99:E3:34:C1:B1:FA:44:AA:BE:77:F9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196D74F747900C322BBD8E7EC61281C4EF9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9FvFYHjLmawlmeM0wbH6RKq-d_k.roa
Signing time: Fri 16 May 2025 04:17:10 +0000
ROA not before: Fri 16 May 2025 04:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 04:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:4f:74:79:00:c3:22:bb:d8:e7:ec:61:28:1c:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 04:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f45bc56078cb99ac2599e334c1b1fa44aabe77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:c9:ec:b6:0e:28:43:fb:b9:3b:86:da:fb:
1f:10:34:5d:52:7a:e7:4d:5f:f6:c7:c1:c5:d0:30:
53:36:04:a0:c6:77:e8:54:4a:6d:67:34:b0:c9:c2:
b2:bc:f2:69:be:e7:b6:14:be:8b:49:70:0f:a6:f1:
44:b6:76:3f:ca:ed:9f:73:0c:c6:ef:f5:c1:50:71:
74:50:fd:08:e8:2e:86:0e:4f:10:55:94:84:1b:e7:
c8:a9:e5:9d:0c:65:4d:99:22:93:27:10:36:62:ce:
b9:4d:58:4e:d7:da:a3:8d:3f:ca:55:36:7a:3b:2d:
56:6f:ca:aa:16:f6:26:e0:08:da:1a:7c:e3:0c:4a:
4a:cb:b9:4f:23:db:42:99:a4:9b:c4:e9:9a:7d:4d:
2c:80:03:c5:2c:89:b2:c6:4d:46:f7:de:c8:8d:07:
1e:28:9c:ed:75:b7:ea:55:a7:5f:ed:b6:c7:d4:27:
f4:8f:ae:31:53:30:d2:32:4d:4a:61:d3:d7:f2:3b:
16:b9:86:2c:9c:72:09:14:9e:82:18:6a:a0:1f:e1:
6e:f0:da:2a:c0:89:e9:1b:fb:a3:fe:73:5b:6c:04:
95:5f:4a:fc:f5:5d:06:57:14:05:4a:59:77:d0:7d:
e2:dc:33:73:21:19:65:a7:23:52:81:91:49:02:87:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:C5:60:78:CB:99:AC:25:99:E3:34:C1:B1:FA:44:AA:BE:77:F9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9FvFYHjLmawlmeM0wbH6RKq-d_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.175.239.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
09:52:52:14:fc:00:6e:c1:30:7d:2b:04:f9:64:7a:55:e5:ca:
a3:92:b2:3d:18:49:58:7e:38:ae:2b:23:0c:9e:0c:60:3c:b5:
7e:1c:17:ba:27:f6:57:c8:cd:eb:c5:fc:7f:54:10:e8:85:f2:
2e:8b:7f:3a:11:68:af:3b:80:c4:39:72:19:0b:13:a0:7c:3f:
6c:3e:5c:e9:0b:d3:5e:db:cd:6d:b4:6a:60:30:94:df:d2:f3:
8f:11:ae:21:84:df:7e:6d:25:da:74:39:cb:57:04:1a:7d:d2:
6d:d0:dd:65:ba:a0:43:04:44:07:b7:44:4f:b0:cd:15:e6:4d:
15:e9:79:d0:20:aa:11:75:72:1d:46:15:5b:f4:61:9f:c0:8a:
1a:e2:70:43:65:2e:4c:01:9e:c4:cf:d3:df:82:9b:ff:6e:7c:
21:3f:04:e9:36:83:01:99:14:28:70:f2:01:6d:22:87:b7:3c:
e9:16:2e:b7:42:41:76:b1:15:5e:90:80:4e:21:b8:f7:d9:d6:
1f:7b:52:5f:8a:66:56:af:d2:c3:5f:e7:dd:28:e4:c9:a3:89:
e5:f0:1b:77:f3:f8:23:d4:bb:8d:68:9d:ed:b0:a6:2f:ac:84:
72:92:e9:b5:9a:74:2e:54:30:21:76:8a:8f:b2:28:d5:23:80:
75:22:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:25:36 2025 by rpki-client