Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AxDvf8t-4yQL7Uku7CGxDDZA9s0.roa
File: AxDvf8t-4yQL7Uku7CGxDDZA9s0.roa (raw, json)
Hash identifier: y0jgsX8ZeTCL2EhWKYEn5xXbzfzCGc4b2gCoJYF1CdE=
Subject key identifier: 03:10:EF:7F:CB:7E:E3:24:0B:ED:49:2E:EC:21:B1:0C:36:40:F6:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961F26B3DB0760413F34049928031E6663
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AxDvf8t-4yQL7Uku7CGxDDZA9s0.roa
Signing time: Thu 10 Apr 2025 10:02:32 +0000
ROA not before: Thu 10 Apr 2025 10:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 16:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:26:b3:db:07:60:41:3f:34:04:99:28:03:1e:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 10:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0310ef7fcb7ee3240bed492eec21b10c3640f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:01:15:6f:85:ed:a0:18:a5:0f:b1:f2:9e:
68:67:da:89:7f:c6:ff:ff:81:43:36:7f:e8:49:1d:
e4:bf:71:d8:ec:8b:80:ec:db:f4:35:35:81:9a:4b:
5d:0d:f9:e2:8b:42:d6:af:05:1a:78:73:63:bf:34:
ac:b9:d6:b0:f4:33:cb:ab:7a:39:e9:d3:ed:04:9e:
ba:5a:e1:af:0d:02:67:b0:85:59:3b:44:76:fa:4e:
5b:5f:6a:4d:ef:f3:03:df:c3:83:3e:42:97:e4:93:
5f:7b:52:23:bf:a6:f9:04:3c:af:b4:97:47:77:10:
9d:c0:e7:f9:8d:62:7c:7f:8b:e7:c5:36:7d:5f:ff:
45:f5:9d:6d:86:45:8f:2b:32:e6:fa:4c:dd:67:72:
4d:7d:51:b1:da:fe:42:5d:5b:96:59:08:cf:7d:78:
33:2a:94:69:bf:ce:83:1e:b4:d7:fd:df:1f:48:64:
15:f8:eb:da:36:0e:a8:f5:9c:6e:ac:b7:40:e2:8d:
fe:38:1c:62:e2:d1:7a:d7:38:8d:70:1a:78:52:ad:
51:fd:66:56:e9:ec:6d:5e:c0:53:5d:9d:89:9a:9f:
db:bf:64:fd:48:40:fc:db:62:b8:9f:52:84:fe:fa:
98:a5:14:18:2d:f2:1c:d5:24:89:54:24:3c:49:a3:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:10:EF:7F:CB:7E:E3:24:0B:ED:49:2E:EC:21:B1:0C:36:40:F6:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AxDvf8t-4yQL7Uku7CGxDDZA9s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:41:5d:dc:82:bf:20:33:d6:87:26:a3:93:88:63:3f:dc:40:
cc:5f:37:d9:09:12:7c:61:18:a2:aa:4f:61:e7:16:c3:b2:63:
a4:16:0f:b0:69:fe:c2:8e:af:8f:8b:d8:d7:85:9f:4c:4c:6d:
21:ea:61:38:35:ff:14:ac:8b:4c:52:3d:f0:6a:aa:9e:55:c7:
2f:17:8b:3c:43:dc:92:e5:31:14:ce:6c:cd:fa:14:08:3c:5c:
5d:10:7e:5b:13:4c:a7:66:61:d5:d5:a0:74:85:3b:c7:60:39:
81:6d:bf:97:98:38:44:25:10:30:0f:77:62:03:f7:1b:d7:20:
45:ee:d6:e5:33:a4:be:d9:a2:27:2b:d3:c6:e1:cf:14:a5:4f:
54:f0:2a:be:f0:cd:17:62:98:e1:15:08:e7:18:55:91:cc:82:
dd:1a:c8:3e:ac:ed:c3:17:00:a1:bf:71:cf:6b:24:d8:3e:eb:
39:5b:42:a7:c1:41:35:b0:16:4b:14:ae:c5:e2:3c:d1:42:ed:
b9:e1:e0:bb:c0:53:9e:69:4a:48:ec:44:0a:da:74:94:c1:9e:
3b:77:e1:a3:32:ef:e0:87:35:19:96:b7:3f:87:0a:28:b4:51:
d6:53:b4:3e:f2:98:88:54:9d:37:4d:82:4a:84:d0:62:bc:32:
47:75:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:46 2025 by rpki-client