Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P6ZZM5_G4guFuSCwIEEPMFhoJ0s.roa
File: P6ZZM5_G4guFuSCwIEEPMFhoJ0s.roa (raw, json)
Hash identifier: /53zF9jxluXHWtOAxTEKHFhzQ8ViZ/thKTaxPTcCT5Q=
Subject key identifier: 3F:A6:59:33:9F:C6:E2:0B:85:B9:20:B0:20:41:0F:30:58:68:27:4B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019611823D186A1B12A9DE1E42647F550078
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P6ZZM5_G4guFuSCwIEEPMFhoJ0s.roa
Signing time: Mon 07 Apr 2025 18:27:50 +0000
ROA not before: Mon 07 Apr 2025 18:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 00:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:82:3d:18:6a:1b:12:a9:de:1e:42:64:7f:55:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 7 18:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa659339fc6e20b85b920b020410f305868274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:85:1c:2f:57:01:3d:af:7f:35:29:70:da:
a1:3f:3e:a0:f9:d0:16:7c:71:86:73:90:21:49:30:
0e:cd:ce:ea:f1:95:5f:96:57:57:18:ca:47:8f:51:
aa:f8:86:ad:7e:ca:bc:fb:b0:91:7b:85:da:0e:29:
4c:f0:9c:8b:40:14:2c:51:b4:d0:7f:55:42:1b:da:
a3:df:8c:c4:92:55:64:bc:bd:45:c2:cc:26:93:98:
94:ed:11:74:1f:50:f3:fa:57:5e:29:07:0d:d8:dc:
15:2f:df:4c:b2:88:5d:67:bb:be:18:5a:fa:5d:13:
73:17:4f:d5:a1:81:66:cc:f0:f9:b8:0b:2c:0d:6e:
c6:bd:dd:79:78:05:dc:9a:f9:f9:62:b9:08:fc:d7:
24:66:e8:8c:2e:0a:8a:53:ea:b4:03:88:92:7a:95:
12:79:10:e7:2f:30:5e:ec:97:6c:2b:2a:79:18:6c:
59:58:ff:f4:07:51:a8:5a:c6:ad:26:15:a9:9b:e4:
bf:3b:63:1c:4f:51:d7:57:e2:98:34:26:c9:3e:25:
1d:46:ea:5f:61:32:83:ec:b3:c1:78:41:d0:d8:62:
03:72:6c:ad:b7:b6:2c:47:9c:a1:66:a2:77:0c:10:
3b:b3:b4:7f:54:87:11:84:62:3e:5f:ea:34:08:53:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:59:33:9F:C6:E2:0B:85:B9:20:B0:20:41:0F:30:58:68:27:4B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P6ZZM5_G4guFuSCwIEEPMFhoJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
5.231.96.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.7.0-89.144.8.255
89.144.14.0/24
89.144.16.0/24
89.144.25.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c0:f3:8e:d3:d0:72:d6:70:11:f8:00:e5:2d:b4:21:04:13:
55:08:58:6f:5b:ea:f7:f0:6e:66:7e:ac:10:c6:87:54:72:cf:
43:bf:21:ef:50:e9:17:0e:e8:07:ba:bc:56:fe:2d:49:0a:0b:
ba:63:9c:fa:28:95:48:73:ce:e0:1b:e4:bc:6e:13:4b:0c:7c:
03:52:9c:4e:8a:fb:60:31:31:5a:94:10:7c:18:48:34:57:6d:
39:3c:cf:a2:ca:36:42:5a:19:d4:df:bb:00:53:24:1b:cb:e0:
5c:79:4b:6d:da:c8:dd:6c:7f:1c:35:c8:14:5b:a5:cd:5e:f6:
4f:3a:2c:74:89:3e:57:d8:33:70:72:9e:43:07:b7:f5:2c:c6:
1b:44:39:e1:f9:75:90:8f:cf:fa:29:2d:a1:f9:1f:80:42:59:
13:59:73:af:e8:53:a8:9f:a2:fd:65:67:6f:40:90:b3:df:ac:
45:3f:88:8e:b8:a8:d7:b7:cd:44:b1:e5:a8:55:9c:9f:aa:51:
78:3f:63:5b:66:28:76:21:7f:12:8b:dc:10:da:98:d6:88:77:
fe:c3:50:a7:ee:7d:5a:3a:8f:d1:e8:e8:a0:eb:58:30:27:f9:
98:59:4f:71:de:7b:71:9d:65:d9:dc:7e:88:d3:5d:85:4b:fc:
32:e3:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:35:01 2025 by rpki-client