Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_8GUGq42Cm3J8DXJokDof1SXsI.roa
File: K_8GUGq42Cm3J8DXJokDof1SXsI.roa (raw, json)
Hash identifier: kwWuqYdEi/ELSzRCWaspeNu0oz8G09zfghpJP25FdJk=
Subject key identifier: 2B:FF:06:50:6A:B8:D8:29:B7:27:C0:D7:26:89:03:A1:FD:52:5E:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966423D00EB40F241022DC834CB62C0B57
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_8GUGq42Cm3J8DXJokDof1SXsI.roa
Signing time: Wed 23 Apr 2025 19:33:10 +0000
ROA not before: Wed 23 Apr 2025 19:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 04:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:23:d0:0e:b4:0f:24:10:22:dc:83:4c:b6:2c:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 23 19:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bff06506ab8d829b727c0d7268903a1fd525ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:1c:ec:ea:28:98:4b:f0:44:28:82:f0:1d:
49:3b:14:b4:6e:4c:4a:26:f4:9b:18:4f:9e:7f:50:
76:b8:2f:44:99:76:41:c6:65:f7:c1:e1:2e:6b:b4:
25:2d:5f:9d:da:95:6b:c7:14:57:9f:e4:d8:83:a3:
9e:fc:2c:84:ae:b1:60:fc:f0:5f:ec:5a:3a:18:ce:
22:f7:2c:fd:d9:3e:a8:81:1c:fc:f4:69:de:ba:3f:
a4:ae:db:88:03:f3:52:72:76:6d:45:01:a4:4f:78:
b9:3d:b6:13:84:8f:f2:b5:7a:99:0d:9a:fa:22:03:
db:96:b2:4e:02:a5:56:78:dd:cb:c2:d8:c6:85:be:
95:03:ee:b1:ba:36:32:a3:68:37:89:60:01:5d:52:
2c:89:df:37:0c:eb:9b:fb:01:9c:a4:eb:8d:35:b0:
9a:ca:00:97:aa:8d:9f:30:d5:90:b6:5a:85:05:f4:
3c:e5:7f:15:64:cd:de:e0:33:25:61:b9:34:f1:69:
59:51:32:f6:de:eb:52:32:e8:32:6c:3d:75:88:79:
a9:8f:eb:7d:d1:52:98:d4:04:2b:b5:c3:44:89:13:
9d:b8:c9:b3:be:dd:75:d3:25:79:b0:fe:4f:79:1d:
1e:49:d4:8a:56:38:77:26:d8:3f:1e:84:61:8f:2c:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:06:50:6A:B8:D8:29:B7:27:C0:D7:26:89:03:A1:FD:52:5E:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K_8GUGq42Cm3J8DXJokDof1SXsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.106.92.0/23
89.106.95.0/24
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
Signature Algorithm: sha256WithRSAEncryption
3c:8f:c1:2d:41:71:34:b2:b7:f2:8b:6e:23:18:0a:b5:f0:26:
1d:01:75:ba:16:3c:79:71:5a:fb:b7:c1:5b:63:cb:13:ba:07:
49:3b:dd:15:24:04:d9:99:ab:4e:d7:89:bd:98:db:ff:3e:25:
7b:95:08:f2:ee:63:6d:c6:e6:de:c9:de:da:7b:cc:2b:4e:79:
f0:37:3c:95:b2:47:1c:6a:88:f1:c7:6d:d0:12:5d:11:6a:85:
5a:a6:d8:8e:53:ca:ea:66:22:29:87:d1:76:da:de:cd:3d:31:
3a:0d:c1:a2:bf:28:d3:1d:1e:80:d2:78:c0:e7:74:b3:19:d6:
53:03:a0:83:0a:dd:f3:ba:36:aa:ca:1f:24:a8:65:cf:f2:51:
32:c7:7e:4b:89:85:62:1e:59:0d:d1:d0:e3:55:89:60:c4:84:
e0:ad:d4:0a:87:a9:22:b2:93:a2:f2:ca:0d:be:fb:92:73:72:
4f:88:57:52:27:df:c1:c6:52:ca:ca:99:7c:9a:dd:70:35:8f:
b9:68:04:d5:49:10:16:21:94:48:e5:ed:2f:00:9c:66:b6:0d:
36:a7:8b:ce:8c:25:80:6d:08:ed:24:3f:88:19:40:c1:33:20:
42:8c:45:06:db:24:68:c6:9d:76:2d:72:62:8f:e5:8f:9c:96:
38:e9:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:11 2025 by rpki-client