Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N61_t27AtoOiEblaCgP_57GLv0w.roa
File: N61_t27AtoOiEblaCgP_57GLv0w.roa (raw, json)
Hash identifier: 16R8QKBDv/wQT7rwXpkqbkGs+k5aAYlCG9zbXovzh68=
Subject key identifier: 37:AD:7F:B7:6E:C0:B6:83:A2:11:B9:5A:0A:03:FF:E7:B1:8B:BF:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196230D8A860BDE7551A384EF9126FAC8E0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N61_t27AtoOiEblaCgP_57GLv0w.roa
Signing time: Fri 11 Apr 2025 04:13:32 +0000
ROA not before: Fri 11 Apr 2025 04:13:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 19:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:0d:8a:86:0b:de:75:51:a3:84:ef:91:26:fa:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 04:13:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37ad7fb76ec0b683a211b95a0a03ffe7b18bbf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:6a:98:a0:b1:f7:f6:ae:9a:0c:7b:31:44:
2f:a0:91:85:86:93:a8:91:79:28:8f:e8:f4:5f:35:
13:e0:bf:60:8c:55:41:9c:ff:b3:53:0f:04:71:5e:
47:59:55:1a:ee:a3:9b:83:22:7e:de:d6:1a:c1:3f:
ae:b7:59:f2:63:62:5b:ab:74:bf:57:d2:36:e3:9f:
d6:58:61:db:4e:ca:6d:f2:8c:a6:57:23:8d:e1:b7:
9a:45:7e:7f:09:40:8c:45:ff:88:6b:a3:cd:c2:5c:
cc:fe:b0:1c:6c:51:eb:74:57:2e:c1:a8:d6:e1:be:
b2:83:be:c3:81:bc:3d:89:09:d0:3b:39:7b:fc:1d:
8a:db:c9:60:e5:3b:9c:bb:42:73:c0:c0:dd:94:49:
f5:b7:06:8e:80:10:29:37:c7:7c:b3:31:fc:52:a2:
a5:a9:84:6c:a5:86:7f:4a:bc:8b:af:9b:0c:cf:65:
1a:0e:88:04:b0:9d:6e:22:ca:4d:ca:cb:a5:7b:11:
d3:96:de:50:62:81:7d:a3:53:d1:46:b0:84:46:a3:
da:37:7b:68:21:5a:18:41:16:b9:97:06:74:f3:74:
c0:49:2b:9e:6c:6c:0f:78:6a:f0:c8:cd:c6:8a:4b:
22:1e:27:a8:5f:75:f6:b3:39:3f:67:09:b7:5f:9d:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:7F:B7:6E:C0:B6:83:A2:11:B9:5A:0A:03:FF:E7:B1:8B:BF:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N61_t27AtoOiEblaCgP_57GLv0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:9a:51:9d:87:90:30:59:6a:7b:5f:92:a6:59:d5:5e:ca:4b:
d8:90:86:c9:c5:0a:a5:02:23:2b:ed:93:9f:6e:43:2c:04:c5:
fa:76:80:f6:d7:e2:a7:06:33:b8:4f:1e:93:28:4e:ef:77:a5:
30:79:91:4e:99:85:07:82:9a:d8:7a:4b:8c:cf:85:8c:62:f8:
63:b6:f9:3e:c3:7c:14:c2:2b:42:cc:98:a6:c9:b4:15:2d:1b:
17:8d:14:59:13:d3:38:e1:5f:96:8b:d5:72:3a:92:ae:d6:92:
3f:2b:bf:a1:28:77:cd:fc:b0:72:fc:48:29:14:7d:39:15:d5:
5b:aa:44:81:19:00:57:67:b4:c0:1b:71:cd:bd:d5:79:6f:eb:
39:76:df:ca:66:b4:d7:fe:75:8f:71:28:0e:05:b8:b4:f0:ae:
49:0a:08:89:75:dd:29:fb:63:a9:d4:7f:cb:6a:73:de:4f:38:
27:e4:a8:ba:88:5b:fe:82:96:eb:52:44:52:0d:a3:4b:f7:25:
ea:61:c0:fd:da:b8:bf:b2:36:0e:4b:04:96:ce:b5:40:96:a9:
02:37:59:f5:98:0f:a8:95:d1:ce:1c:11:60:0e:be:f6:15:91:
7d:c2:5d:44:80:10:86:cb:bf:e0:5b:7b:f4:97:d6:08:ef:e4:
ae:f2:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:17 2025 by rpki-client