Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RQBZ9XJg_NJ7EZPFQDYwv5x4OSE.roa
File: RQBZ9XJg_NJ7EZPFQDYwv5x4OSE.roa (raw, json)
Hash identifier: 1BVT/oG7jEAN/kA75zAbKQ2Sf8uyKYJuv9PUEXMJSqY=
Subject key identifier: 45:00:59:F5:72:60:FC:D2:7B:11:93:C5:40:36:30:BF:9C:78:39:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F749DDE6E5782D385818E22AC9190C04
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RQBZ9XJg_NJ7EZPFQDYwv5x4OSE.roa
Signing time: Thu 22 May 2025 09:18:55 +0000
ROA not before: Thu 22 May 2025 09:18:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 10:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:49:dd:e6:e5:78:2d:38:58:18:e2:2a:c9:19:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 09:18:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=450059f57260fcd27b1193c5403630bf9c783921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:33:e1:d4:d6:36:36:8c:16:7b:d0:b5:0e:
1b:5b:b4:ab:e8:22:1c:04:81:64:de:6a:86:80:1c:
81:c0:74:ec:f3:10:0e:68:be:69:7e:3e:aa:ab:73:
06:d5:6e:19:a8:82:63:60:82:3b:a2:74:e9:48:74:
10:85:9e:95:46:e2:f1:9c:8e:52:19:ed:a9:30:e4:
b9:e4:47:97:8e:9e:12:96:d2:c3:17:08:8a:bd:bf:
3a:78:d2:b8:08:86:58:81:2c:c3:6f:52:91:68:dc:
c4:2e:0c:d0:80:73:40:f7:ef:ac:fa:c0:a0:28:69:
28:33:bf:cd:d9:27:69:aa:98:a1:a5:f4:ed:cd:be:
82:96:bf:e2:0e:b3:41:6b:99:66:ed:fa:85:2b:48:
d9:f8:43:8b:79:a5:ad:93:93:71:a6:d0:de:b4:47:
c4:9a:ac:93:5c:12:55:e9:94:2c:86:c1:ff:11:ba:
9d:b8:ef:91:7c:c8:9a:80:ce:c3:57:e6:09:6c:f7:
66:f0:25:14:3b:a7:5c:96:15:9a:8d:de:21:e0:35:
4c:a4:d5:e7:d6:8d:40:17:75:94:21:46:c3:65:b7:
8c:3e:5e:68:cd:9b:a5:f0:cf:39:0b:0f:48:4b:8b:
07:db:2a:fe:fe:0f:8d:6b:8d:64:80:6c:62:b6:29:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:59:F5:72:60:FC:D2:7B:11:93:C5:40:36:30:BF:9C:78:39:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RQBZ9XJg_NJ7EZPFQDYwv5x4OSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
5.231.96.0/24
5.231.203.0/24
5.231.234.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.93.1.0/24
85.93.6.0/24
85.93.22.0/24
89.144.14.0/24
89.144.16.0-89.144.18.255
89.144.25.0/24
89.144.35.0/24
94.249.153.0/24
94.249.158.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:70:13:bb:d8:bc:69:f5:08:29:f0:0c:8a:88:cc:10:cc:96:
d4:25:fb:69:79:b7:d9:a9:78:ee:b4:a4:60:b3:8b:3e:75:b5:
f6:55:a9:9d:61:c5:b9:fa:e2:01:4b:10:9b:97:4f:45:78:69:
44:39:b5:f7:d2:ef:d3:02:c4:ac:a4:ff:6d:ae:89:de:a6:c4:
48:56:ea:9a:e8:ad:68:fa:c7:87:75:a8:91:8b:58:fe:63:f9:
d3:9d:07:df:e6:c0:15:d5:47:22:9a:4d:db:cf:31:bd:ed:0a:
33:d7:e8:da:38:d6:b0:0f:01:fb:3f:51:2f:c1:cb:03:26:31:
74:b3:d6:98:01:59:cd:46:1d:c3:34:cc:7f:8c:3f:98:39:31:
91:4e:28:b4:c9:62:6d:46:3e:9b:e4:92:bc:39:79:a0:17:2f:
a5:4a:1b:c9:0e:9d:be:d8:82:da:ad:59:68:b3:ee:9f:d3:df:
e5:e9:da:34:2d:17:3f:99:2b:e0:d8:08:16:60:f5:2f:06:a0:
99:54:98:cd:a8:9c:c2:8f:05:f0:4e:fa:35:86:0f:70:07:40:
fe:0a:15:4c:0b:e3:de:fd:92:93:ba:c4:46:c9:04:71:67:16:
e8:1a:ff:7b:d2:14:63:e3:98:4a:f9:01:a0:77:18:25:d8:80:
e4:78:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:40 2025 by rpki-client