Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kr9_cdekr0EuTxJKre8E0VEuDL8.roa
File: Kr9_cdekr0EuTxJKre8E0VEuDL8.roa (raw, json)
Hash identifier: VmVmNAGRi2kx3RkFefepjteV0+uDZDcFJZ+bstOz5ow=
Subject key identifier: 2A:BF:7F:71:D7:A4:AF:41:2E:4F:12:4A:AD:EF:04:D1:51:2E:0C:BF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196D74F7535E5C8E3B49D1812B90EE0C051
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kr9_cdekr0EuTxJKre8E0VEuDL8.roa
Signing time: Fri 16 May 2025 04:17:10 +0000
ROA not before: Fri 16 May 2025 04:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 12:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:4f:75:35:e5:c8:e3:b4:9d:18:12:b9:0e:e0:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 04:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2abf7f71d7a4af412e4f124aadef04d1512e0cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:7b:24:0b:fc:37:f5:88:b1:8d:85:59:39:
68:25:9c:86:f1:f3:41:c9:2c:55:8c:ba:1b:16:26:
56:83:f0:9b:78:38:5e:ae:61:c9:87:9a:ef:c0:b2:
30:3f:ea:bb:6f:f8:6d:0d:3c:c0:2e:99:5a:30:5c:
ca:d9:d4:df:b6:8c:88:40:e4:13:fc:d7:16:db:91:
2a:44:74:9a:2f:b8:9c:bb:96:82:af:e1:4a:5e:44:
cf:70:08:5a:c6:bc:e3:a6:2e:85:35:6f:7f:cc:d5:
21:f9:2a:94:94:15:a4:6a:4e:65:5d:ab:9f:88:b9:
88:c1:ae:14:19:87:f4:bf:f4:73:06:50:d4:17:9a:
b3:34:3b:68:75:c2:f6:3f:0b:6e:90:21:35:45:3c:
01:10:e8:33:6f:52:29:0e:95:f2:9a:2e:78:0a:8c:
eb:f6:0f:ca:bf:ae:57:42:31:3d:30:7d:59:ad:68:
6a:4b:92:5f:97:df:1b:2d:10:82:2e:fb:b5:2e:71:
1f:f3:2b:1a:04:ab:0d:f9:d2:3b:26:f6:92:3a:47:
67:e1:9e:dd:87:4b:42:98:d0:2d:c8:9c:94:69:69:
f7:0c:0a:da:5e:bf:e2:02:76:06:da:73:62:a5:c6:
18:cf:43:7e:9c:6e:ae:e6:a3:57:16:1b:16:21:4b:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:7F:71:D7:A4:AF:41:2E:4F:12:4A:AD:EF:04:D1:51:2E:0C:BF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Kr9_cdekr0EuTxJKre8E0VEuDL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.237.0/24
5.175.239.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:d6:d4:5d:ef:86:2c:1d:1e:08:b7:4a:7c:d8:d8:85:d6:76:
7a:df:68:e4:11:e0:0a:6c:01:61:c3:19:31:29:03:41:fa:9e:
78:95:64:df:e4:25:f8:c5:d9:9a:09:15:cd:c5:01:64:0f:a1:
a9:11:4f:ac:3f:14:2d:82:1e:36:f0:e5:9b:77:34:1b:93:ce:
15:ee:3b:b9:cd:f5:44:66:8f:3f:ed:57:1f:50:e0:2e:d8:cb:
c5:33:dd:d8:13:95:df:62:87:ef:90:0e:16:69:4e:05:64:d0:
8f:46:31:54:14:c5:4c:42:95:a7:a3:f2:ce:f8:a0:98:eb:f3:
a2:dd:06:c9:db:94:7a:9d:7b:1d:c1:4b:9a:7c:24:79:06:c1:
20:2b:f4:1b:ab:45:29:a3:4b:a9:44:54:57:bf:b7:26:46:6b:
c6:09:b8:87:cc:0e:e8:dd:a3:6b:6f:93:6f:c8:0c:b1:c2:74:
a7:4e:d2:45:fd:83:2a:3d:fa:2d:63:eb:a3:3a:61:42:33:81:
84:b6:24:ec:b5:d3:b0:17:cb:98:91:2f:56:a4:3e:d6:a6:f2:
e7:ab:7b:74:d7:65:b1:b6:15:81:2c:a3:f6:60:61:c4:97:87:
7a:c9:61:b6:2f:b4:25:0e:dd:d5:f7:31:43:6c:65:cc:6e:47:
b1:4b:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:50:26 2025 by rpki-client