Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQgenW2g4aKGoNQfEs0xlfAiHzk.roa
File: ZQgenW2g4aKGoNQfEs0xlfAiHzk.roa (raw, json)
Hash identifier: RYryJNULn7Q1UxjGdCf/g6HdtUonoqwhY3VTHkMbfN8=
Subject key identifier: 65:08:1E:9D:6D:A0:E1:A2:86:A0:D4:1F:12:CD:31:95:F0:22:1F:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01967A977E334C144871B9E9DD200D941A5E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQgenW2g4aKGoNQfEs0xlfAiHzk.roa
Signing time: Mon 28 Apr 2025 04:11:10 +0000
ROA not before: Mon 28 Apr 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 04:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:97:7e:33:4c:14:48:71:b9:e9:dd:20:0d:94:1a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 28 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65081e9d6da0e1a286a0d41f12cd3195f0221f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:79:f0:d6:88:50:fe:6a:05:fb:90:4d:27:
5a:57:67:ac:53:3e:9f:b5:b2:f2:98:f7:10:53:1a:
47:4c:3c:d0:0c:c2:38:dd:a6:53:08:c3:62:65:5d:
6f:b5:ce:0b:b1:57:32:ab:65:3c:f8:c5:e3:f6:3f:
f7:d5:d8:90:16:85:71:c1:a2:a0:11:9b:31:01:b5:
e4:14:e2:94:66:ea:f9:34:0d:ff:eb:43:ea:a8:7f:
5e:1e:50:84:50:d4:a0:29:ee:01:0f:d1:45:e0:cc:
cb:58:bc:ff:50:06:70:7e:bc:b4:80:7e:bb:8c:3a:
8a:05:95:da:c8:d2:86:f0:27:9a:94:c4:0e:c9:ff:
51:a1:1b:46:d1:86:a9:f2:c9:6d:bc:60:69:bf:bb:
bd:54:8c:84:31:62:10:ed:1d:cd:ab:bb:25:3f:07:
5f:ca:5a:a8:12:38:d1:88:fc:7e:ef:c3:9b:16:75:
4e:f9:05:47:9c:2f:c9:69:5b:93:01:7e:43:e9:74:
83:12:b1:b7:a9:10:43:63:44:f4:59:23:7b:ba:45:
cf:98:3c:a7:62:91:5d:e1:47:0c:b0:52:ab:6d:74:
75:ef:88:b4:05:0d:d1:11:b4:a2:c8:12:96:0e:ff:
85:8f:85:9b:db:cf:16:ae:a4:52:c5:6d:de:e3:b5:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:1E:9D:6D:A0:E1:A2:86:A0:D4:1F:12:CD:31:95:F0:22:1F:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZQgenW2g4aKGoNQfEs0xlfAiHzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
80:45:85:db:ec:b0:7f:9b:00:39:a5:3c:2e:ce:07:1c:1c:be:
6c:a1:7b:f4:bb:af:3b:91:01:02:6f:78:fa:35:ae:b8:21:94:
24:75:1a:67:ca:3d:8f:43:8f:98:27:2d:94:bc:2a:96:8d:81:
a8:70:66:70:15:6f:a4:a0:01:08:e7:b9:35:9f:fe:60:ae:11:
c6:72:51:32:c4:98:64:96:b6:8a:43:ea:97:f3:89:f8:6d:b0:
9f:f2:be:20:c6:c3:11:32:52:3a:b1:2e:45:aa:92:59:28:43:
60:81:b9:53:c5:67:01:ea:2f:b9:61:9d:05:44:0b:86:1e:8f:
31:2e:7a:a8:f6:d3:ce:1a:8a:c3:38:b4:e0:be:69:44:dc:d9:
85:b4:e3:ec:81:5d:a4:07:5b:50:e0:f1:5d:58:89:db:7b:3d:
25:45:76:77:cf:67:5b:12:a2:fd:9d:29:c5:5b:36:02:1c:f6:
13:07:39:ec:65:34:f0:1f:df:17:90:2f:56:cb:62:ff:d0:db:
69:04:2d:d6:29:2c:45:8b:ee:8d:c7:0e:41:1e:fe:71:53:17:
f7:65:89:13:19:7c:92:52:66:c8:3b:d1:38:ae:6b:47:34:eb:
83:91:bf:99:0f:6b:6e:59:43:0d:a1:5b:28:80:cd:75:04:9a:
22:d0:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:45 2025 by rpki-client