Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wj1rNRwMlVICP2FiL3z44XaIUMQ.roa
File: Wj1rNRwMlVICP2FiL3z44XaIUMQ.roa (raw, json)
Hash identifier: HG5L7aN3g9Q32CNtaW+OIJmSz+zyO7kreeXl5Zm8/aI=
Subject key identifier: 5A:3D:6B:35:1C:0C:95:52:02:3F:61:62:2F:7C:F8:E1:76:88:50:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019655767DE44700A74C60A92FCBFD931B01
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wj1rNRwMlVICP2FiL3z44XaIUMQ.roa
Signing time: Sun 20 Apr 2025 23:09:10 +0000
ROA not before: Sun 20 Apr 2025 23:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.233.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 21:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:76:7d:e4:47:00:a7:4c:60:a9:2f:cb:fd:93:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 20 23:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a3d6b351c0c9552023f61622f7cf8e1768850c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:85:6f:6a:88:49:b4:53:0a:c3:f9:bd:89:
67:32:a0:66:49:1a:1b:66:c0:8a:a3:b2:60:6c:3b:
22:26:3b:a5:51:80:8d:10:10:96:d8:89:32:3e:ff:
8b:5c:32:65:eb:33:be:32:a8:14:29:7f:f3:0b:80:
12:b6:89:1e:c2:b8:c6:42:b9:11:c9:7e:a5:81:f7:
a1:4a:c5:38:1c:5f:66:9b:68:cc:02:6f:47:aa:1f:
c7:14:bd:9e:96:79:f3:92:b9:b2:de:e3:81:a4:79:
cc:a1:c1:a5:6e:6c:13:68:f7:7c:3d:fd:4c:a3:35:
8d:12:28:51:ed:2e:46:d1:b9:7f:96:78:b1:3e:8b:
69:8f:62:2a:b1:15:4e:d5:89:fa:4f:b9:8e:c7:22:
db:bd:ad:5b:5b:16:7f:89:04:e0:56:72:10:a5:cf:
50:bc:55:39:74:df:2f:d5:af:de:7a:4c:4d:e8:49:
25:23:24:89:4c:04:a0:a8:88:5e:a0:34:00:0b:8f:
a2:49:1e:3c:42:87:0c:85:a5:53:70:f7:b1:c0:e4:
77:d1:c6:d7:4d:82:41:cd:21:d6:e0:9d:8a:50:f6:
db:44:2c:b1:3c:75:be:c6:be:78:3f:0f:33:e6:85:
0d:83:67:8c:c1:ac:49:8e:9e:ea:0c:2b:d5:1d:9d:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:6B:35:1C:0C:95:52:02:3F:61:62:2F:7C:F8:E1:76:88:50:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wj1rNRwMlVICP2FiL3z44XaIUMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.233.0/24
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.18.0/24
77.90.51.0/24
87.239.130.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:11:bf:cf:76:7f:92:a8:93:c0:01:52:a3:88:16:f9:10:d2:
0e:02:7b:ff:18:f2:a5:9b:e1:44:b9:bc:a5:99:98:58:d8:86:
6f:6e:3c:c1:b3:01:c4:7e:f6:1b:df:40:4a:e6:e7:21:ea:ae:
92:19:01:ba:ac:1c:8a:57:0e:49:68:3c:97:e7:69:75:87:fd:
e1:fd:e1:52:3c:12:16:03:f2:85:b1:81:4c:ad:7f:47:c1:8f:
4a:f9:5a:d8:57:4d:84:4b:7d:6b:ce:1d:2e:8e:ae:c7:c7:04:
6f:55:d7:73:09:97:32:3a:0e:87:ee:96:be:88:aa:77:53:5b:
a4:8a:dc:fd:07:3c:55:b9:af:98:45:bc:e0:4c:18:d2:dc:73:
21:f1:88:cf:0f:20:91:49:b5:05:0d:06:f1:1a:c3:1d:63:01:
3d:41:d5:36:21:44:96:7d:f5:c6:2b:b9:ce:fa:d5:20:d4:ac:
9f:1f:36:25:9a:3a:46:91:e1:49:a5:6d:bf:e5:5a:50:1a:4c:
c8:05:80:44:6d:3c:1c:21:25:ee:f2:17:28:b5:91:28:db:a6:
33:94:21:0b:6d:f6:bc:30:da:ef:65:41:aa:03:7c:93:bc:7c:
db:14:a0:97:e1:ed:b7:7a:ad:cb:94:1b:af:e9:20:5b:23:69:
6f:10:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:51:39 2025 by rpki-client