Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TNlbaGq4ZlwXmh1GhMgPlREkj0w.roa
File: TNlbaGq4ZlwXmh1GhMgPlREkj0w.roa (raw, json)
Hash identifier: uGwNnWlu9aoLEZhWwiBmqoRm11Cx/7m9oU38THDCeBo=
Subject key identifier: 4C:D9:5B:68:6A:B8:66:5C:17:9A:1D:46:84:C8:0F:95:11:24:8F:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01963CCED7C792A1007BECA389D712EC30C8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TNlbaGq4ZlwXmh1GhMgPlREkj0w.roa
Signing time: Wed 16 Apr 2025 04:15:10 +0000
ROA not before: Wed 16 Apr 2025 04:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 18:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:ce:d7:c7:92:a1:00:7b:ec:a3:89:d7:12:ec:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 16 04:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cd95b686ab8665c179a1d4684c80f9511248f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:70:63:76:5d:dd:5a:56:46:12:58:27:ff:
51:ee:a3:df:db:d7:ae:fd:9e:2e:94:dc:d8:2d:f9:
61:6f:0b:52:6b:64:25:ad:2e:dc:cb:0f:b3:92:05:
84:af:b2:3c:69:f7:30:6c:fd:3d:c6:97:76:ba:ad:
c3:a9:3a:ff:78:0e:98:5a:c6:69:99:20:f2:a2:5e:
9c:f8:b3:75:c4:bd:1d:e3:50:d4:1e:dd:4c:72:dc:
6f:4f:91:d2:fc:a4:39:8d:42:fd:b3:37:d6:c9:ff:
cd:25:cb:4a:2b:4e:f5:04:47:c0:f7:4c:78:05:42:
e7:eb:9e:6b:87:ac:0d:a0:13:23:cc:91:b4:73:9a:
97:0a:f6:8e:ff:14:48:d5:1b:2e:bc:a4:f3:56:6a:
79:f2:a8:9e:67:14:4c:ed:90:65:cf:b6:2a:5f:23:
53:d4:f4:91:73:4a:a9:1c:60:36:74:5d:c3:e6:ea:
98:54:25:cc:a6:e1:a8:2c:43:a6:0e:e6:67:ab:c5:
54:6f:dd:60:88:8f:35:ea:91:cd:76:81:cb:bc:e4:
29:51:8f:7d:be:fe:09:7f:29:06:8f:72:7f:ef:4c:
dd:6c:09:22:c9:fc:be:36:23:16:ae:35:1c:c5:1a:
42:6f:86:8c:ab:40:a2:17:8a:b3:54:3a:75:92:f2:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:5B:68:6A:B8:66:5C:17:9A:1D:46:84:C8:0F:95:11:24:8F:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TNlbaGq4ZlwXmh1GhMgPlREkj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
94.103.163.0/24
94.249.213.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
13:57:43:58:7a:87:61:00:68:07:68:e1:5d:94:0c:c2:e2:9c:
07:b9:54:05:9a:9c:f2:f9:68:c1:db:00:e6:82:dc:d0:d5:44:
ca:e9:0b:bf:04:3e:87:b9:46:76:50:0a:82:4e:dc:03:cf:37:
48:b1:cb:1a:76:e6:bd:bc:3e:89:dc:50:d4:8e:d5:85:c2:c1:
fe:0a:69:df:fc:54:8a:c2:8c:ec:c8:77:8e:c5:e7:1c:bb:47:
91:99:3e:c0:bf:62:0e:0c:03:8f:14:db:66:7c:1a:d5:75:a5:
43:e8:59:14:ee:85:2a:fd:44:f3:ba:24:60:55:a0:a0:c9:2c:
0f:f2:52:ad:1c:47:84:5e:06:3c:f3:2d:20:13:15:1f:05:fc:
59:72:25:55:a4:27:22:77:83:c2:12:f4:72:dd:ed:80:7a:bb:
77:b6:f9:fe:de:65:e3:9d:c6:28:45:09:cb:f7:12:de:81:16:
10:c5:62:14:3b:7d:0b:00:1c:8f:c8:fb:da:b2:c2:e1:91:75:
f0:1a:dc:1a:5d:01:39:4c:ec:8b:08:8f:da:f5:1a:a0:d4:67:
0d:d0:5e:20:ba:f1:de:69:08:0c:8c:78:21:b6:24:15:b2:4b:
92:c8:88:2a:3d:39:82:d6:7c:a2:49:27:cb:aa:5a:cb:02:01:
4c:97:df:d9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZY8ztfHkqEAe+yjidcS7DDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDE2MDQxNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Q5NWI2ODZhYjg2NjVjMTc5YTFkNDY4NGM4MGY5NTExMjQ4ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOhwY3Zd3VpWRhJYJ/9R7qPf29eu
/Z4ulNzYLflhbwtSa2QlrS7cyw+zkgWEr7I8afcwbP09xpd2uq3DqTr/eA6YWsZp
mSDyol6c+LN1xL0d41DUHt1MctxvT5HS/KQ5jUL9szfWyf/NJctKK071BEfA90x4
BULn655rh6wNoBMjzJG0c5qXCvaO/xRI1RsuvKTzVmp58qieZxRM7ZBlz7YqXyNT
1PSRc0qpHGA2dF3D5uqYVCXMpuGoLEOmDuZnq8VUb91giI816pHNdoHLvOQpUY99
vv4JfykGj3J/70zdbAkiyfy+NiMWrjUcxRpCb4aMq0CiF4qzVDp1kvLBYwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEzZW2hquGZcF5odRoTID5URJI9MMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVE5sYmFHcTRabHdYbWgxR2hNZ1BsUkVrajB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABVOGAwQA
Ba+MAwQAXmejAwQAXvnVAwQAuS+PMA0GCSqGSIb3DQEBCwUAA4IBAQATV0NYeodh
AGgHaOFdlAzC4pwHuVQFmpzy+WjB2wDmgtzQ1UTK6Qu/BD6HuUZ2UAqCTtwDzzdI
scsadua9vD6J3FDUjtWFwsH+Cmnf/FSKwozsyHeOxeccu0eRmT7Av2IODAOPFNtm
fBrVdaVD6FkU7oUq/UTzuiRgVaCgySwP8lKtHEeEXgY88y0gExUfBfxZciVVpCci
d4PCEvRy3e2Aert3tvn+3mXjncYoRQnL9xLegRYQxWIUO30LAByPyPvassLhkXXw
GtwaXQE5TOyLCI/a9Rqg1GcN0F4guvHeaQgMjHghtiQVskuSyIgqPTmC1nyiSSfL
qlrLAgFMl9/Z
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:20:21 2025 by rpki-client