Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WVpEO5S7zTF7An2vdWLRdfl-Hdk.roa
File: WVpEO5S7zTF7An2vdWLRdfl-Hdk.roa (raw, json)
Hash identifier: x6ml49AydLnksnEUenmbf364rIXDEDWdc/wNkhO/v5o=
Subject key identifier: 59:5A:44:3B:94:BB:CD:31:7B:02:7D:AF:75:62:D1:75:F9:7E:1D:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196DAF9DE685ADA60EC9568D1E513CC674F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WVpEO5S7zTF7An2vdWLRdfl-Hdk.roa
Signing time: Fri 16 May 2025 21:22:10 +0000
ROA not before: Fri 16 May 2025 21:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 10:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:f9:de:68:5a:da:60:ec:95:68:d1:e5:13:cc:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 21:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595a443b94bbcd317b027daf7562d175f97e1dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:42:47:3a:7d:32:03:de:72:eb:a2:68:46:
d9:39:b9:9d:2d:41:66:83:c4:6b:da:38:e5:07:cb:
36:fa:cd:91:fe:91:0a:dd:4c:68:cc:a1:0a:8b:e0:
e3:0e:87:3e:a3:68:84:04:75:38:91:7b:c4:f7:e1:
9a:eb:d3:1e:55:e6:b6:84:a9:ac:74:ca:bc:d2:55:
5e:b3:b4:44:7b:a6:42:bd:ea:b1:9e:b6:92:17:1b:
55:bf:e8:af:9b:44:6e:dc:37:50:7e:41:d2:1a:dc:
bb:1c:eb:12:e8:87:ab:37:6c:21:cf:b8:e1:f8:64:
e3:15:8b:1a:02:87:96:a9:e9:ad:c8:96:45:4c:35:
aa:e4:38:66:c6:39:66:93:0e:7a:02:cb:9d:b6:2c:
b8:d9:5b:f6:9d:32:0a:dc:0a:cf:78:ba:34:f7:76:
d9:33:4c:92:63:71:8f:5c:b5:99:b6:27:e1:55:18:
45:6a:18:d9:ed:e8:c6:88:a6:43:90:c2:43:a6:a4:
1a:47:e3:f6:b2:21:1e:d6:31:ac:de:23:26:9a:1a:
a8:55:c4:21:13:b3:b1:66:35:82:1f:2a:ad:3c:bb:
90:d6:76:e7:9f:ff:77:d5:1d:8e:0d:f4:57:1b:3c:
28:da:ec:83:9f:5f:9a:3d:e0:2f:6d:c6:44:7f:aa:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:44:3B:94:BB:CD:31:7B:02:7D:AF:75:62:D1:75:F9:7E:1D:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WVpEO5S7zTF7An2vdWLRdfl-Hdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
77.90.7.0/24
89.144.3.0/24
94.249.232.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
45:86:74:4d:47:d6:f6:51:42:70:19:d7:e7:37:fd:8c:39:21:
cb:3f:77:9d:f2:c6:8c:db:15:de:d5:b0:d3:ef:f3:32:2c:ba:
83:fc:21:7c:34:a4:f8:f0:6a:69:fd:93:ae:f9:f0:7c:ea:b4:
cf:7f:70:28:06:d5:ee:64:a4:f0:32:37:7b:93:fe:3a:33:e4:
95:20:97:93:61:e8:07:62:8d:c0:3f:37:e4:77:a4:88:b5:28:
46:ba:07:e9:2f:d5:70:5a:3b:80:ce:b3:76:a9:e0:c6:17:63:
a8:19:a2:ef:86:e0:18:70:6e:f5:b3:36:0e:44:6f:a0:a9:b8:
e7:0f:37:f2:1b:25:f2:9c:20:de:8b:37:14:47:47:7f:37:13:
7f:13:0b:5f:92:f4:65:cb:5e:6e:67:a9:f1:c8:cf:dd:5d:df:
38:98:dc:81:71:90:e9:ee:3f:fd:89:4d:82:58:29:87:49:1b:
2b:4e:fc:80:b3:ce:26:d5:2c:3f:0e:64:f8:52:90:64:eb:43:
3c:9f:c6:2d:0c:9e:64:19:c7:cd:11:be:0d:29:9e:c7:d7:b4:
ec:83:2b:59:df:e4:5a:0e:16:0d:67:c3:7b:75:09:c0:c1:7a:
4d:03:23:e0:82:94:73:ff:9c:a3:8d:d0:34:d7:72:46:67:04:
44:0a:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:15:23 2025 by rpki-client