Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YYBuTdCVEvUEaWKVG-xd9asipk4.roa
File: YYBuTdCVEvUEaWKVG-xd9asipk4.roa (raw, json)
Hash identifier: dbgkUaE8fIPMrDniErwPVHL54s2qfvqHlOl9kUcy4mg=
Subject key identifier: 61:80:6E:4D:D0:95:12:F5:04:69:62:95:1B:EC:5D:F5:AB:22:A6:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196BD8A29B345AF8A5D9F4434D4A38ED141
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YYBuTdCVEvUEaWKVG-xd9asipk4.roa
Signing time: Sun 11 May 2025 04:11:10 +0000
ROA not before: Sun 11 May 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 22:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:8a:29:b3:45:af:8a:5d:9f:44:34:d4:a3:8e:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 11 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61806e4dd09512f5046962951bec5df5ab22a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:eb:96:ce:cf:43:22:03:a1:41:29:57:04:
be:a5:c2:2a:17:c8:f3:8c:f7:3c:db:08:be:66:11:
e5:6c:49:26:bf:9d:d0:f2:2e:74:88:f7:92:1b:64:
58:f9:7f:31:00:60:58:c2:19:51:02:e6:a2:ba:6e:
bd:dc:a0:a0:85:39:20:b0:c1:88:09:0b:82:98:9b:
f9:5b:89:6e:a3:23:ba:03:ed:29:67:d7:35:3f:b1:
89:2d:49:c2:e7:69:2d:b9:19:44:35:51:4f:a6:9e:
e5:1b:5f:64:a8:91:fe:47:d9:77:7f:e4:b3:f3:f4:
c4:87:a3:c7:57:9d:a0:01:d4:dd:82:ba:bd:38:f6:
d3:c8:13:a3:a7:7f:2a:1c:66:c3:ef:d8:94:b5:72:
dd:19:4a:c4:37:91:d7:71:ea:af:78:0b:96:5c:52:
7a:46:d6:94:5f:62:e1:50:30:d4:50:c6:4a:2b:e9:
91:70:a2:42:d4:3e:97:2e:7e:94:ce:e0:c3:7b:d5:
64:6f:f0:cc:2f:cb:6e:1e:a4:ec:7d:09:92:d1:ec:
eb:24:4b:1b:9b:e5:ba:0b:3f:4d:de:2d:5b:29:59:
c6:bc:f1:1d:60:18:1c:c2:96:66:cc:68:f3:3e:78:
c0:69:53:1a:7a:d1:f5:a4:6b:61:e4:2f:09:b9:d9:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:6E:4D:D0:95:12:F5:04:69:62:95:1B:EC:5D:F5:AB:22:A6:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YYBuTdCVEvUEaWKVG-xd9asipk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
95.215.32.0/24
95.215.34.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:9a:7b:e5:81:11:67:43:9b:d8:65:e4:66:64:1c:15:b7:ad:
69:b5:25:4a:25:de:e3:41:40:7d:9d:99:95:dc:a4:9d:b6:0b:
58:0a:6b:82:15:d5:ef:7e:01:dc:ef:ee:c2:76:06:74:50:c7:
ff:7a:a5:86:9c:41:82:40:c5:4a:de:0f:b9:d3:16:c9:2a:f9:
a0:08:a0:01:ef:cc:e0:4d:b4:65:2e:2c:a6:f0:0a:a6:be:a2:
e0:a7:57:20:25:5a:a5:90:f8:6f:98:c4:84:26:9c:8b:6b:6d:
fd:2f:1a:e6:0f:ba:f4:b4:a4:17:14:b0:7c:41:ea:25:51:91:
eb:71:85:ed:77:9b:1d:84:d4:9c:01:ca:40:24:29:eb:b2:2c:
70:a9:0f:51:47:ea:8f:a2:20:18:eb:c8:66:8c:02:1e:f9:48:
b2:e6:36:6f:b1:f7:f5:c3:fd:92:61:b7:d7:eb:d2:91:68:ff:
f1:24:ee:96:2c:45:5b:38:8d:bc:3f:6b:b4:a3:bc:67:86:48:
b3:10:46:90:4e:70:4d:06:b4:52:0e:8b:3c:db:68:2c:8f:92:
9d:37:1e:b4:29:22:3a:5f:88:ff:54:2d:ac:d2:10:5c:8c:2d:
78:aa:c8:dc:82:ff:1e:a4:20:1c:5d:9b:e2:e5:7f:a1:d7:ca:
e5:a9:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:26:49 2025 by rpki-client