Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E628DhoANvUFancoHc8SaKd2vH4.roa
File: E628DhoANvUFancoHc8SaKd2vH4.roa (raw, json)
Hash identifier: XlF4anhlw0UQoMY7X/oadZdbRwI25rmMEQIRKXcGkJY=
Subject key identifier: 13:AD:BC:0E:1A:00:36:F5:05:6A:77:28:1D:CF:12:68:A7:76:BC:7E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019665FE0E544BD327962504D5BE593FB0E6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E628DhoANvUFancoHc8SaKd2vH4.roa
Signing time: Thu 24 Apr 2025 04:11:10 +0000
ROA not before: Thu 24 Apr 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 23:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:65:fe:0e:54:4b:d3:27:96:25:04:d5:be:59:3f:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13adbc0e1a0036f5056a77281dcf1268a776bc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:7b:2b:ab:5e:03:42:b5:50:b7:42:68:dd:
99:01:12:67:cc:c2:d8:c3:8e:cd:f1:cb:fa:e2:8a:
79:64:d5:99:86:5b:d6:62:c0:6b:7b:ff:9c:94:95:
67:96:b8:03:99:d6:81:af:9c:55:3e:d7:c5:95:9f:
a0:23:47:11:88:c3:43:27:0a:ce:d5:6f:11:4f:25:
6a:06:9e:64:df:bc:c6:0e:f4:4a:92:ca:64:f1:95:
b6:94:0e:b3:56:05:f9:3f:de:dc:03:fb:fd:2a:e2:
d1:a6:83:83:68:31:2f:64:b8:f1:34:f7:7f:ea:ba:
e3:d8:a3:5b:c0:3e:c1:22:b7:74:3c:44:ca:ea:a5:
ab:cf:26:63:ea:26:7b:0c:f7:f1:69:9f:8f:3e:80:
91:7d:52:f7:2d:ec:23:aa:ff:de:69:d9:50:b2:a5:
c6:68:55:c4:b5:ea:bd:4f:d9:0b:cf:31:1d:94:67:
db:8b:ad:ab:40:a7:aa:4f:c3:e4:ec:1a:60:78:00:
ec:78:96:98:da:0b:ed:c5:19:ea:18:5c:ab:12:fc:
b4:43:96:4f:e9:32:60:59:b8:fa:9b:95:f9:c0:9c:
f7:e7:68:a9:b9:5a:31:e6:3d:27:74:87:6f:11:89:
86:e5:8a:9d:4e:39:06:0f:99:ed:fd:3c:34:71:3d:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:BC:0E:1A:00:36:F5:05:6A:77:28:1D:CF:12:68:A7:76:BC:7E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E628DhoANvUFancoHc8SaKd2vH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.138.0/24
77.90.54.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
89:26:df:bc:33:9a:df:d6:f4:ee:b1:d9:ee:e0:83:d0:fc:af:
b3:ea:52:bc:0f:6d:09:66:ae:51:3e:41:1e:51:26:86:c2:42:
d0:1b:32:8a:84:fd:35:ea:46:79:9e:2e:f5:88:1f:52:76:70:
46:83:8b:1c:9a:59:cd:8c:45:fc:c1:4d:a6:5f:26:29:72:56:
e4:d2:6c:5a:f0:03:e8:ca:9d:2e:dc:e0:9a:6f:0b:d4:fa:6c:
41:d4:db:0c:c8:65:f9:87:d2:2a:9a:69:2f:dc:a6:f7:99:6a:
98:94:98:16:c6:55:22:f2:8b:8a:b4:41:7d:b3:77:55:17:ad:
3b:47:19:3c:68:f2:8a:64:d9:21:22:9b:43:a4:09:6e:55:f3:
5b:ca:7e:87:2e:2d:bd:74:8f:76:02:44:bd:69:11:75:b9:74:
4a:69:4c:74:95:96:58:9a:5f:04:fb:b8:32:fa:3a:c1:33:13:
ed:6d:65:0c:d5:13:e0:ca:8d:b5:53:fc:fb:a2:4c:70:bd:8e:
51:ab:9f:8b:16:5b:9a:20:36:a5:33:90:70:15:97:a1:14:50:
84:76:79:f6:d5:1b:4b:eb:15:cd:93:f2:9f:e6:39:1c:e2:b4:
f7:d5:80:e7:ec:00:fc:4c:76:a0:af:3f:b4:75:ba:79:62:0f:
22:a3:e1:dc
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZZl/g5US9MnliUE1b5ZP7DmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI0MDQxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FkYmMwZTFhMDAzNmY1MDU2YTc3MjgxZGNmMTI2OGE3NzZiYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUV7K6teA0K1ULdCaN2ZARJnzMLY
w47N8cv64op5ZNWZhlvWYsBre/+clJVnlrgDmdaBr5xVPtfFlZ+gI0cRiMNDJwrO
1W8RTyVqBp5k37zGDvRKkspk8ZW2lA6zVgX5P97cA/v9KuLRpoODaDEvZLjxNPd/
6rrj2KNbwD7BIrd0PETK6qWrzyZj6iZ7DPfxaZ+PPoCRfVL3Lewjqv/eadlQsqXG
aFXEteq9T9kLzzEdlGfbi62rQKeqT8Pk7BpgeADseJaY2gvtxRnqGFyrEvy0Q5ZP
6TJgWbj6m5X5wJz352ipuVox5j0ndIdvEYmG5YqdTjkGD5nt/Tw0cT0a2QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBOtvA4aADb1BWp3KB3PEmindrx+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRTYyOERob0FOdlVGYW5jb0hjOFNhS2Qydkg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABa+KAwQA
TVo2AwQAXvnDAwQAXvnXAwQAX9cgAwQAX9ciAwQAshKQAwQA2UWmMA0GCSqGSIb3
DQEBCwUAA4IBAQCJJt+8M5rf1vTusdnu4IPQ/K+z6lK8D20JZq5RPkEeUSaGwkLQ
GzKKhP016kZ5ni71iB9SdnBGg4scmlnNjEX8wU2mXyYpclbk0mxa8APoyp0u3OCa
bwvU+mxB1NsMyGX5h9Iqmmkv3Kb3mWqYlJgWxlUi8ouKtEF9s3dVF607Rxk8aPKK
ZNkhIptDpAluVfNbyn6HLi29dI92AkS9aRF1uXRKaUx0lZZYml8E+7gy+jrBMxPt
bWUM1RPgyo21U/z7okxwvY5Rq5+LFluaIDalM5BwFZehFFCEdnn21RtL6xXNk/Kf
5jkc4rT31YDn7AD8THagrz+0dbp5Yg8io+Hc
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:38:05 2025 by rpki-client