Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbE2FYyv6qdvddVQR2MePq6e8vY.roa
File: MbE2FYyv6qdvddVQR2MePq6e8vY.roa (raw, json)
Hash identifier: rIt7Xl0dp1r94lqWa00EgRLIxfBCLqA5baAf0ZFIVaI=
Subject key identifier: 31:B1:36:15:8C:AF:EA:A7:6F:75:D5:50:47:63:1E:3E:AE:9E:F2:F6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019758090FAFB2C20EA7B039AB236F8732C2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbE2FYyv6qdvddVQR2MePq6e8vY.roa
Signing time: Tue 10 Jun 2025 04:11:18 +0000
ROA not before: Tue 10 Jun 2025 04:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 04:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:09:0f:af:b2:c2:0e:a7:b0:39:ab:23:6f:87:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 04:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31b136158cafeaa76f75d55047631e3eae9ef2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:af:7b:c8:c0:13:70:a5:f5:0e:4e:32:de:
3b:44:33:4e:26:4c:e7:29:5e:7a:d1:a2:45:50:c4:
37:b0:98:9c:84:4a:fc:07:83:de:ab:80:8b:bd:0f:
d1:5e:93:bf:a6:50:ac:d6:7a:85:2f:22:01:91:c6:
94:9a:84:ac:8d:f5:e0:2b:bb:25:c8:4d:11:a3:61:
05:a8:5f:f9:0c:d4:89:bb:93:09:ab:d6:74:e0:1d:
2c:ea:d9:d1:56:fc:cc:54:2f:41:b9:67:ad:ed:3c:
0e:a3:14:e0:e2:93:a0:01:00:eb:37:d9:f0:29:cf:
e1:4c:fa:d8:99:dd:21:23:32:f6:f5:6c:33:47:84:
7d:9e:44:04:53:02:b1:4b:b2:68:bf:e3:18:4a:96:
f4:95:a5:86:74:f0:3d:bd:c8:93:a0:cf:b2:4f:3a:
2c:f4:4d:81:e0:ee:e4:4e:89:b9:12:80:35:b8:50:
1c:a5:0e:33:cb:c8:67:de:1f:25:1b:81:43:ca:5f:
d9:90:ef:28:38:ce:eb:2c:5c:32:1a:53:b9:f0:35:
3a:b2:de:d4:84:3a:81:0a:65:e9:6b:4c:56:9c:5e:
1e:c8:03:99:f1:1e:a4:05:fc:4a:ff:b6:99:c6:b8:
6c:98:c1:e0:2a:93:22:c7:23:8e:b6:ca:84:8a:7c:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:36:15:8C:AF:EA:A7:6F:75:D5:50:47:63:1E:3E:AE:9E:F2:F6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbE2FYyv6qdvddVQR2MePq6e8vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
5.231.94.0/24
77.90.54.0/24
87.239.131.0/24
94.249.233.0/24
95.215.32.0/24
95.215.34.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:62:11:c8:ba:57:6d:8b:02:7d:6d:98:7e:12:1c:ed:c7:7d:
0a:c6:4e:df:55:28:fe:c6:30:df:80:07:3c:17:63:0a:f1:a3:
d2:0a:89:e2:1a:ba:8b:42:4f:2a:28:37:eb:ff:c2:c7:7a:bd:
32:f1:66:a2:b3:33:d5:4c:39:e4:24:ae:dc:28:47:13:ac:f8:
54:57:48:26:76:e8:c3:34:23:24:af:95:b1:2e:0b:c0:87:d4:
cc:cb:18:a8:85:7a:d9:2c:8a:dc:bd:5e:3f:a0:69:1a:75:98:
3c:6f:c6:c0:d4:a5:64:02:4c:b9:d6:f2:66:7e:a3:49:96:b5:
32:b1:8b:66:de:bd:02:99:c9:76:b4:1e:26:9d:2f:8a:23:cb:
4d:6d:d8:bb:6f:a6:79:64:3f:be:b2:4a:12:6f:6a:c8:e2:ff:
1e:b9:37:04:f4:9b:91:62:25:49:77:70:05:00:62:76:dd:28:
d9:0b:0d:bd:71:04:4a:92:51:e3:96:e9:8a:15:fa:bd:5c:64:
e7:a9:d9:91:4c:4b:87:e3:74:86:62:dd:70:8b:cb:77:54:e0:
14:be:ae:25:a0:a8:92:10:7a:d3:6b:42:01:d4:ab:4e:d9:03:
b0:e6:9b:2f:1d:47:7b:04:7a:c1:bc:c7:a8:f6:f7:c9:58:9b:
31:83:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:14 2025 by rpki-client