Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fp7Fxsu6znZrn8UYe4VuN6MtKrY.roa
File: Fp7Fxsu6znZrn8UYe4VuN6MtKrY.roa (raw, json)
Hash identifier: lbuQ+pJd9zi/IK8iPMYKFWGs2xHUFlvJTyMUPdci5lQ=
Subject key identifier: 16:9E:C5:C6:CB:BA:CE:76:6B:9F:C5:18:7B:85:6E:37:A3:2D:2A:B6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019758090F5FE621221F0719C72FC7E93BBD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fp7Fxsu6znZrn8UYe4VuN6MtKrY.roa
Signing time: Tue 10 Jun 2025 04:11:18 +0000
ROA not before: Tue 10 Jun 2025 04:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.175.194.0/24 maxlen: 24
5.175.215.0/24 maxlen: 24
5.175.216.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.175.218.0/24 maxlen: 24
5.175.219.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 04:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:09:0f:5f:e6:21:22:1f:07:19:c7:2f:c7:e9:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 04:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169ec5c6cbbace766b9fc5187b856e37a32d2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:de:6f:90:e8:48:35:87:d5:d2:66:93:14:
e0:19:07:d5:0f:fd:39:b1:de:72:2e:77:f2:2f:f4:
08:b5:fe:63:2e:97:c8:3d:0f:27:69:e3:a3:85:f7:
7f:a5:3e:a3:f2:d8:81:56:d7:04:19:88:9c:21:0b:
9a:83:64:19:17:92:81:3e:c5:38:2c:18:16:cf:66:
71:3c:0e:a1:5a:20:1d:2b:f1:86:e4:b3:94:88:48:
fb:22:76:55:3c:16:e2:46:73:38:a5:54:6e:ec:61:
0c:60:af:9b:59:54:a1:51:1f:99:7f:27:f0:33:7b:
37:19:8e:9b:d5:16:a9:74:37:64:6a:cf:92:28:d7:
e1:10:09:d9:59:ca:df:d5:3f:9a:6e:da:c6:ca:a3:
82:32:1f:3c:3a:eb:a4:8c:c4:8f:58:2c:7d:fa:44:
ab:9f:dc:55:19:a6:d7:74:87:c5:17:cb:f2:a6:a9:
72:66:42:34:ab:41:a2:b7:59:e0:38:2f:9f:75:7a:
6d:ea:58:19:9e:13:d4:37:7f:a0:4a:78:56:aa:47:
45:a5:bb:b6:a5:fa:e7:b4:69:70:3f:f2:d6:f2:31:
1c:97:01:11:b8:dd:b5:77:b2:ed:46:72:ec:32:6e:
c3:b8:89:67:b7:2c:66:5e:71:92:18:c6:5d:45:43:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9E:C5:C6:CB:BA:CE:76:6B:9F:C5:18:7B:85:6E:37:A3:2D:2A:B6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Fp7Fxsu6znZrn8UYe4VuN6MtKrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.194.0/24
5.175.215.0-5.175.224.255
5.231.106.0-5.231.110.255
5.231.116.0-5.231.123.255
89.144.53.0-89.144.55.255
94.103.166.0/24
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
94.249.243.0-94.249.252.255
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b8:26:e7:7e:fa:76:d2:6b:7c:7c:0a:8a:40:48:dd:b7:57:
d9:f0:da:b6:b6:06:dc:5c:f4:c0:dd:5e:ae:86:8f:11:90:dc:
b5:ca:31:4b:b4:fd:4f:ee:ec:e9:b8:c1:b7:d7:67:a3:2f:a0:
6e:51:68:08:c5:11:6b:b2:38:aa:09:57:88:c0:52:80:0a:99:
59:e7:45:41:f1:76:d2:f7:86:69:36:26:31:19:6e:21:a1:26:
85:10:17:ef:43:02:4d:b0:b4:87:46:80:d1:45:17:ed:fc:d6:
fb:66:7b:d1:4b:71:71:34:83:b2:88:ad:75:b2:4b:4d:39:60:
3a:10:9c:51:c9:2a:e4:8e:44:ea:82:58:96:6c:2a:2c:63:a9:
0b:2c:b8:f2:d8:5d:33:1f:4b:c6:d4:79:f2:3a:4e:e7:f9:3c:
a2:7a:2a:16:0b:75:3a:2f:2b:36:a3:04:89:87:5d:ab:d7:06:
c6:95:48:e3:73:08:eb:5d:f3:e2:6a:f4:0a:e1:be:0b:a8:65:
31:f4:7c:8b:26:06:7a:a7:17:60:23:04:0c:d6:c6:07:d9:71:
dc:49:77:31:be:f1:42:64:81:30:74:a1:c9:23:57:a6:0d:62:
9e:08:31:a8:67:d0:cb:e3:e4:6c:38:dd:48:fb:d0:77:a7:63:
45:98:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:00:08 2025 by rpki-client