Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KdNda6x8UcZJba9wqAwjHydPGqQ.roa
File: KdNda6x8UcZJba9wqAwjHydPGqQ.roa (raw, json)
Hash identifier: j9uYQWNmB41x2u8Pgs0v3Uiy6Gl1Dc0ShtGkjAMoT7o=
Subject key identifier: 29:D3:5D:6B:AC:7C:51:C6:49:6D:AF:70:A8:0C:23:1F:27:4F:1A:A4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194DC7ADB01B11CC4C9EEE95C583A7BFA3E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KdNda6x8UcZJba9wqAwjHydPGqQ.roa
Signing time: Thu 06 Feb 2025 18:17:06 +0000
ROA not before: Thu 06 Feb 2025 18:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 05:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:7a:db:01:b1:1c:c4:c9:ee:e9:5c:58:3a:7b:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 18:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d35d6bac7c51c6496daf70a80c231f274f1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:29:39:f3:8c:41:0b:3e:bd:8b:f9:cc:fc:
be:ea:a5:79:d8:9a:84:6a:3b:25:01:c7:df:fb:d6:
bf:c8:a6:bc:9e:88:9f:a8:37:c5:45:0c:0a:53:b9:
e9:4b:6e:a6:af:46:3b:c5:32:10:78:db:79:93:3d:
0e:9e:e5:10:ad:61:3a:ca:ab:d8:cb:65:93:9b:dd:
57:76:c3:83:12:3e:d1:09:b2:5d:d6:d3:48:99:64:
37:92:79:eb:cb:be:45:eb:af:cb:f0:65:52:63:8c:
6a:ec:de:f0:59:80:a3:30:62:fa:f7:ac:0f:d7:db:
33:3b:bd:88:08:d4:d3:78:97:74:86:52:e6:15:af:
36:70:4d:b1:d0:4f:ac:03:9d:96:67:aa:71:04:1b:
97:af:a1:86:dc:d0:44:20:4f:00:b8:e6:94:19:73:
3a:bb:22:01:25:23:bd:7f:4b:0d:41:17:19:0b:b2:
f4:4e:2b:3b:c9:18:f4:42:c1:6b:de:40:f0:0d:1b:
69:56:1f:02:67:e6:9d:88:cc:f3:ea:6d:e6:7e:a9:
b4:8e:13:4e:28:b8:21:fb:43:08:67:e1:6d:a1:54:
50:f9:e1:95:be:5d:97:c3:0b:6b:9a:59:42:2a:ae:
c3:99:88:75:51:fa:b9:0a:35:f6:e9:9c:77:fc:46:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:5D:6B:AC:7C:51:C6:49:6D:AF:70:A8:0C:23:1F:27:4F:1A:A4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KdNda6x8UcZJba9wqAwjHydPGqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.231.79.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
94.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:aa:cb:e8:45:fb:71:13:c8:50:68:91:70:30:9c:44:63:23:
ff:fa:46:ad:0d:2b:e8:07:cf:45:3b:00:52:ab:95:e2:11:70:
53:89:ce:d2:91:c5:a6:5b:86:bd:08:a0:81:87:e4:ab:a7:f4:
08:e1:9e:e3:92:87:19:47:6c:11:55:dc:79:a1:4f:13:c9:7f:
a0:46:fa:f3:7a:6a:20:65:59:81:ad:a7:bd:e6:b3:2e:2a:1d:
29:34:90:82:a5:71:07:be:af:50:56:18:03:e2:58:68:a9:9b:
87:dd:9a:6d:5b:84:98:04:01:85:1a:72:97:5f:05:34:9e:58:
5e:5c:d6:b5:5b:eb:f0:cd:42:15:ae:2a:4e:53:90:65:12:1a:
8c:e3:cb:80:24:b3:96:0c:9d:b1:1c:ab:27:fc:0e:f9:c9:78:
79:b9:1e:74:a1:9c:4a:a6:4c:d5:00:cb:3a:02:c5:22:1d:47:
2c:a0:9d:0f:6d:e8:94:5b:8f:58:d4:82:18:60:ec:41:9d:c7:
a4:59:a8:f6:b1:2d:ef:2a:d6:dd:3d:bd:73:e1:a8:fc:a8:c7:
44:24:41:27:f4:91:7b:61:44:42:05:5f:ad:4b:7b:16:22:79:
90:ce:1a:48:c2:43:70:ed:0d:27:3b:81:95:49:8f:c9:ac:e6:
f2:49:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:48:21 2025 by rpki-client