Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7G6Uh299Rw9dumFIMflvEfBdHc.roa
File: W7G6Uh299Rw9dumFIMflvEfBdHc.roa (raw, json)
Hash identifier: OP9MWicyNWEk55B2WcTxDyK3aMecd75TM7u+r/iYF7I=
Subject key identifier: 5B:B1:BA:52:1D:BD:F5:1C:3D:76:E9:85:20:C7:E5:BC:47:C1:74:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019604297DCD19A2CE0F4FA859618D6A4D7B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7G6Uh299Rw9dumFIMflvEfBdHc.roa
Signing time: Sat 05 Apr 2025 04:15:50 +0000
ROA not before: Sat 05 Apr 2025 04:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 04:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:29:7d:cd:19:a2:ce:0f:4f:a8:59:61:8d:6a:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 5 04:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bb1ba521dbdf51c3d76e98520c7e5bc47c17477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:c0:d0:c9:ea:f5:9d:db:9f:a0:d9:9a:1a:
e3:1b:a6:8b:37:3c:20:8b:2f:16:26:73:ac:15:b6:
87:43:27:7f:63:b6:fe:f7:c7:4a:c2:d9:e0:f4:6c:
6c:cf:d5:91:e5:43:fc:dd:b7:3d:82:80:1e:a1:f4:
a9:f2:55:e8:54:87:a8:58:bb:ed:ed:f4:9d:06:91:
9c:9d:da:a6:52:10:60:a7:67:6a:31:62:71:64:ae:
8f:6f:21:00:b9:2d:ae:72:f2:b1:97:85:fa:dd:8b:
ba:fb:91:8c:38:1f:c9:c4:d0:8a:45:af:f3:0c:07:
e5:c7:93:e2:da:d0:8e:d9:ff:22:02:48:3d:fa:5f:
e9:64:a5:54:f5:a9:93:7a:da:d4:45:1c:b5:ef:ee:
dd:33:53:61:5e:da:9e:14:ad:dc:68:09:fa:08:6d:
d3:a3:05:52:47:eb:0c:6f:c8:86:79:26:cc:8f:3d:
66:0b:af:ee:37:8f:5c:4b:ff:d8:8a:ac:99:ad:d4:
0d:06:06:27:3b:d6:7d:b0:b7:54:f5:9c:ee:3c:cf:
a5:e5:b4:02:ff:a4:54:4e:97:ab:db:b5:9b:d9:81:
79:d2:ad:85:7e:a3:7f:0a:e3:18:98:e2:ba:cb:d6:
bc:25:c7:92:9b:7b:09:6f:f8:ac:88:ff:1b:9d:18:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:BA:52:1D:BD:F5:1C:3D:76:E9:85:20:C7:E5:BC:47:C1:74:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7G6Uh299Rw9dumFIMflvEfBdHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.231.233.0/24
77.90.3.0/24
77.90.28.0/24
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
15:8f:9f:cc:13:d6:26:6b:de:4c:36:25:25:cf:e4:be:07:8f:
27:c1:88:68:01:c8:6d:a1:75:e6:73:16:fa:ba:c2:07:62:31:
73:99:17:11:8e:55:a0:2f:5e:0c:9a:2c:6a:03:08:6f:fc:41:
5d:99:9f:a3:29:5e:50:be:1c:00:a2:51:53:af:28:a0:a9:89:
b1:bf:da:a6:ed:a6:4c:6f:2d:85:1e:65:b5:ea:86:c3:66:2c:
f5:5f:c7:76:be:2d:87:21:d8:0c:af:f9:d7:78:38:44:89:2b:
1d:cc:21:84:93:1d:7f:67:65:18:29:3b:de:d5:2c:cb:2e:0d:
26:1f:52:7d:ee:41:41:e5:1a:dc:e0:7d:aa:a7:c1:3b:95:8e:
66:3e:8f:35:e4:ed:9a:a6:49:d2:04:42:90:e7:37:c8:a8:ae:
e0:b9:9f:4c:1d:03:6d:06:0d:90:5e:e6:0c:16:72:0b:ad:4d:
73:a2:01:a3:02:d3:d0:b7:74:f7:92:f6:67:91:7d:bf:1e:4b:
4a:e6:8f:1f:2b:43:f4:e4:87:49:37:bf:37:6e:3f:e8:1b:b6:
fa:15:54:99:50:08:b8:e9:7f:e5:aa:ac:bd:66:22:7c:3b:f9:
9a:01:98:51:cc:c8:f4:fd:5b:c2:26:d6:93:35:64:84:72:8f:
96:37:e0:a4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZYEKX3NGaLOD0+oWWGNak17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDA1MDQxNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmIxYmE1MjFkYmRmNTFjM2Q3NmU5ODUyMGM3ZTViYzQ3YzE3NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JnA0Mnq9Z3bn6DZmhrjG6aLNzwg
iy8WJnOsFbaHQyd/Y7b+98dKwtng9Gxsz9WR5UP83bc9goAeofSp8lXoVIeoWLvt
7fSdBpGcndqmUhBgp2dqMWJxZK6PbyEAuS2ucvKxl4X63Yu6+5GMOB/JxNCKRa/z
DAflx5Pi2tCO2f8iAkg9+l/pZKVU9amTetrURRy17+7dM1NhXtqeFK3caAn6CG3T
owVSR+sMb8iGeSbMjz1mC6/uN49cS//YiqyZrdQNBgYnO9Z9sLdU9ZzuPM+l5bQC
/6RUTper27Wb2YF50q2FfqN/CuMYmOK6y9a8JceSm3sJb/isiP8bnRjE/QIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFFuxulIdvfUcPXbphSDH5bxHwXR3MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVzdHNlVoMjk5Unc5ZHVtRklNZmx2RWZCZEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQABVORAwQA
BefpAwQATVoDAwQATVocAwQAWZAGAwQBWZAeAwQAWZAhMAwDBAFZkCoDBABZkCww
DAMEAVmQLgMEA1mQMAMEAVmQOjANBgkqhkiG9w0BAQsFAAOCAQEAFY+fzBPWJmve
TDYlJc/kvgePJ8GIaAHIbaF15nMW+rrCB2Ixc5kXEY5VoC9eDJosagMIb/xBXZmf
oyleUL4cAKJRU68ooKmJsb/apu2mTG8thR5lteqGw2Ys9V/Hdr4thyHYDK/513g4
RIkrHcwhhJMdf2dlGCk73tUsyy4NJh9Sfe5BQeUa3OB9qqfBO5WOZj6PNeTtmqZJ
0gRCkOc3yKiu4LmfTB0DbQYNkF7mDBZyC61Nc6IBowLT0Ld095L2Z5F9vx5LSuaP
HytD9OSHSTe/N24/6Bu2+hVUmVAIuOl/5aqsvWYifDv5mgGYUczI9P1bwibWkzVk
hHKPljfgpA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:45:42 2025 by rpki-client