Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O6QExm5GHurDnCZKHXmR3a-VvAQ.roa
File: O6QExm5GHurDnCZKHXmR3a-VvAQ.roa (raw, json)
Hash identifier: JPt6rDXuN6aWPC30P+LrGCEdoPf/fzEJuZl5cCTKB58=
Subject key identifier: 3B:A4:04:C6:6E:46:1E:EA:C3:9C:26:4A:1D:79:91:DD:AF:95:BC:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01960DEEB6D79C0F2448B457C47375B71735
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O6QExm5GHurDnCZKHXmR3a-VvAQ.roa
Signing time: Mon 07 Apr 2025 01:47:50 +0000
ROA not before: Mon 07 Apr 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 04:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:ee:b6:d7:9c:0f:24:48:b4:57:c4:73:75:b7:17:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 7 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ba404c66e461eeac39c264a1d7991ddaf95bc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:90:bb:68:27:8a:8d:e5:9d:da:cd:a8:02:
8e:4f:e0:79:a8:49:3c:72:3f:9c:ae:a8:00:ec:c8:
76:dd:63:92:c5:6e:8d:78:01:8d:e2:e4:fe:a2:0a:
fb:62:d5:aa:cc:6a:60:6c:e2:e7:18:1f:c0:84:4c:
73:83:d2:b6:09:b3:70:ab:72:d5:e0:87:6f:23:57:
46:f6:ce:2d:ef:06:2a:54:82:e1:98:e6:24:2c:bc:
fe:3a:dd:9b:21:be:10:13:66:49:02:35:e9:44:cc:
3a:d2:45:e5:a6:e7:7f:90:2d:ec:72:60:2d:62:df:
b6:d6:13:87:6f:47:ee:1a:bc:98:38:80:ce:0d:32:
f1:f0:51:22:51:e8:11:46:82:f7:1d:76:b4:91:d3:
0d:6a:d3:30:a3:3b:31:42:41:9f:5c:33:72:11:38:
bf:27:fd:5c:c9:7b:4b:e6:82:6b:c6:fd:5a:70:ec:
7d:a7:bd:d4:5d:e3:e1:4c:ad:25:00:90:b0:50:0c:
f5:31:26:0c:28:bc:f5:ca:ed:df:7a:58:b9:22:a6:
61:70:27:aa:57:49:c8:2e:b8:37:f1:c2:aa:b3:1b:
7e:cd:4a:36:94:51:48:6b:fe:f2:d0:6e:08:02:12:
70:2d:b3:2e:e6:f6:aa:e8:4c:01:b8:99:b7:fe:27:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:04:C6:6E:46:1E:EA:C3:9C:26:4A:1D:79:91:DD:AF:95:BC:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O6QExm5GHurDnCZKHXmR3a-VvAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
5.175.220.0/24
77.90.7.0/24
89.144.3.0/24
95.215.33.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:42:98:12:bf:ab:46:4d:a2:a4:df:ba:ab:04:c1:77:b2:ab:
46:eb:f2:01:2e:17:7f:74:48:2b:dc:6a:05:f1:a3:e7:9b:2a:
2f:19:5a:7b:5b:05:a8:2a:2f:a3:b1:63:b7:6d:99:0e:1b:cc:
54:49:b8:1d:38:6a:1b:35:dd:10:e3:af:68:79:25:d6:54:06:
c0:88:e1:cf:28:02:c4:cd:e8:a4:cc:ca:eb:5f:1c:bd:a5:27:
27:a5:46:5f:e1:f2:70:3c:81:bd:27:33:a2:ef:1f:1e:5d:05:
a5:b9:a9:65:8b:98:51:30:9b:ab:a6:90:2f:c9:68:95:96:25:
7d:a5:80:c0:81:27:3a:57:f8:11:7b:0b:dd:30:7c:7c:07:25:
76:ee:a9:19:f1:c6:87:ac:b5:95:97:87:25:4d:a7:09:e1:99:
3a:28:ba:c7:4f:cd:1b:76:bb:d3:5d:4d:64:31:11:07:79:8a:
ff:0d:ef:33:2d:40:3c:0e:4c:07:24:5b:8f:b5:33:48:2a:0c:
a7:b6:17:6b:3e:28:dc:7f:a5:c1:de:d3:b0:a3:c8:0c:f2:e9:
b3:82:37:e3:4f:7d:e7:78:ee:20:16:d4:10:f5:6a:f7:70:12:
a8:23:c0:e3:5b:bf:e0:e7:f9:48:b5:77:c6:2b:64:63:0d:fa:
22:bb:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:05:31 2025 by rpki-client