Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CA9hz2D8Ia1dgb09HEfOmZ833nc.roa
File: CA9hz2D8Ia1dgb09HEfOmZ833nc.roa (raw, json)
Hash identifier: sgC8dlslKxqJbRRYN4tge5xC/sRTCFrKGkgOsYXlRGc=
Subject key identifier: 08:0F:61:CF:60:FC:21:AD:5D:81:BD:3D:1C:47:CE:99:9F:37:DE:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196FF120D2589E85F4E3F90686D0A6875FC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CA9hz2D8Ia1dgb09HEfOmZ833nc.roa
Signing time: Fri 23 May 2025 21:34:55 +0000
ROA not before: Fri 23 May 2025 21:34:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.78.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
89.106.80.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 04:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ff:12:0d:25:89:e8:5f:4e:3f:90:68:6d:0a:68:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 23 21:34:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=080f61cf60fc21ad5d81bd3d1c47ce999f37de77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:24:a8:df:aa:c7:96:a8:59:22:e8:11:2b:
e2:b1:e6:bc:09:93:c1:b9:72:3b:c6:b1:d7:c6:eb:
ac:10:b5:13:8b:78:37:e5:af:9f:23:8d:82:54:df:
d9:bb:87:41:25:a6:81:4a:a8:4e:dc:7c:88:05:7e:
52:57:a5:43:79:17:31:ea:83:97:26:d8:93:a6:96:
91:85:3c:b5:5a:57:9a:61:6f:21:22:c3:26:c1:94:
c3:56:cd:a9:76:bd:76:e6:2e:8b:1b:92:b4:87:e6:
dd:3d:2c:2e:fb:94:4b:3d:5c:b2:c0:18:de:ab:28:
25:bf:2c:8b:dc:cb:00:95:84:ef:35:71:13:75:90:
ec:b9:66:e7:b5:4c:3d:d6:f3:3c:41:6f:43:62:99:
cd:c3:5d:c8:72:19:d1:57:65:4e:29:24:8d:92:04:
64:10:f9:7a:ba:35:eb:39:3a:20:a7:bf:56:79:f5:
3a:fd:0e:15:88:d5:b5:26:70:04:2c:4b:d5:75:d2:
be:8c:b6:e4:23:ff:c4:af:ef:a1:c6:f5:3a:b2:cb:
e9:be:33:97:84:eb:7a:de:dc:a9:d0:0e:ee:72:2a:
84:5d:49:0e:3e:cd:63:02:0c:d2:39:18:94:bb:72:
0d:9e:15:16:c0:ac:48:25:a0:16:21:70:73:62:cf:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0F:61:CF:60:FC:21:AD:5D:81:BD:3D:1C:47:CE:99:9F:37:DE:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CA9hz2D8Ia1dgb09HEfOmZ833nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.106.78.0-89.106.87.255
89.106.92.0/23
89.106.95.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
Signature Algorithm: sha256WithRSAEncryption
57:cc:ce:14:ff:35:79:7f:0f:dc:96:65:dd:8f:10:05:62:a8:
a1:17:ce:8b:1c:b8:37:79:dc:31:cb:26:46:76:08:4a:41:68:
fe:9a:12:b9:69:8c:0b:f7:06:8c:72:6f:04:1f:86:cc:c9:5f:
09:08:9c:41:19:3c:78:43:33:45:8d:6f:34:1a:55:e3:cb:3b:
76:42:02:28:f5:3a:76:c5:9e:f3:cd:86:57:b3:16:6c:88:65:
76:b6:de:c1:0a:44:63:59:62:b9:44:ef:cc:c6:c3:a9:54:8b:
7c:e6:ee:fe:4f:0f:cd:d3:a0:04:8f:ab:85:fc:d7:de:85:e7:
71:29:d6:24:ec:29:d8:31:26:46:ec:a9:23:aa:b7:1a:43:46:
69:71:e7:b5:39:51:93:9a:b5:50:7c:a9:80:9d:8e:01:62:b9:
b6:6a:4e:9d:c1:1d:c5:7e:d1:96:15:10:8e:74:f9:1a:f6:89:
53:ed:da:51:c6:a9:e0:9a:a0:ae:54:48:ff:28:17:ea:d6:dc:
9e:12:34:e2:df:70:24:c0:a7:a2:db:8c:d6:49:e7:5f:ea:d2:
ab:d7:2b:7d:86:43:da:9c:fe:42:d6:c9:f5:fe:ae:0e:e7:e7:
59:b1:07:17:5c:e6:85:b4:c6:26:8c:16:c2:b8:f9:d5:60:2e:
b0:20:32:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZb/Eg0liehfTj+QaG0KaHX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTIzMjEzNDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBmNjFjZjYwZmMyMWFkNWQ4MWJkM2QxYzQ3Y2U5OTlmMzdkZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqEkqN+qx5aoWSLoESvisea8CZPB
uXI7xrHXxuusELUTi3g35a+fI42CVN/Zu4dBJaaBSqhO3HyIBX5SV6VDeRcx6oOX
JtiTppaRhTy1WleaYW8hIsMmwZTDVs2pdr125i6LG5K0h+bdPSwu+5RLPVyywBje
qyglvyyL3MsAlYTvNXETdZDsuWbntUw91vM8QW9DYpnNw13IchnRV2VOKSSNkgRk
EPl6ujXrOTogp79WefU6/Q4ViNW1JnAELEvVddK+jLbkI//Er++hxvU6ssvpvjOX
hOt63typ0A7uciqEXUkOPs1jAgzSORiUu3INnhUWwKxIJaAWIXBzYs+3+QIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAgPYc9g/CGtXYG9PRxHzpmfN953MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQ0E5aHoyRDhJYTFkZ2IwOUhFZk9tWjgzM25jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQABVORAwQA
TVoDAwQATVocMAwDBAFZak4DBANZalADBAFZalwDBABZal8DBAFZkB4DBABZkCEw
DAMEAVmQKgMEAFmQLDANBgkqhkiG9w0BAQsFAAOCAQEAV8zOFP81eX8P3JZl3Y8Q
BWKooRfOixy4N3ncMcsmRnYISkFo/poSuWmMC/cGjHJvBB+GzMlfCQicQRk8eEMz
RY1vNBpV48s7dkICKPU6dsWe882GV7MWbIhldrbewQpEY1liuUTvzMbDqVSLfObu
/k8PzdOgBI+rhfzX3oXncSnWJOwp2DEmRuypI6q3GkNGaXHntTlRk5q1UHypgJ2O
AWK5tmpOncEdxX7RlhUQjnT5GvaJU+3aUcap4JqgrlRI/ygX6tbcnhI04t9wJMCn
otuM1knnX+rSq9crfYZD2pz+QtbJ9f6uDufnWbEHF1zmhbTGJowWwrj51WAusCAy
zg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:12 2025 by rpki-client