Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzO8p5TRH3907eVJBJMMVvOJRrI.roa
File: ZzO8p5TRH3907eVJBJMMVvOJRrI.roa (raw, json)
Hash identifier: GBHsbCNm5fYfmzH/qwQ8AG4rT5vrhRdPcOAfNuFX0Ps=
Subject key identifier: 67:33:BC:A7:94:D1:1F:7F:74:ED:E5:49:04:93:0C:56:F3:89:46:B2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019643F7BAFF631F127E83A460F0489FDD19
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzO8p5TRH3907eVJBJMMVvOJRrI.roa
Signing time: Thu 17 Apr 2025 13:37:10 +0000
ROA not before: Thu 17 Apr 2025 13:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 04:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:f7:ba:ff:63:1f:12:7e:83:a4:60:f0:48:9f:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 17 13:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6733bca794d11f7f74ede54904930c56f38946b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:5f:28:9c:46:01:44:c2:0b:47:1a:c9:14:
ef:0b:36:34:d7:da:44:a9:f5:1a:94:15:2a:59:b7:
99:e4:01:92:a2:0f:82:d9:f5:47:04:32:48:b2:a3:
2c:e7:24:8e:6e:ef:89:cf:60:f8:f5:ea:65:ac:1e:
91:7c:ee:44:c9:bf:12:1b:4a:2f:5d:0a:8e:a8:12:
d1:e7:7b:28:7d:f3:d4:64:90:81:99:29:4c:89:90:
39:67:ad:14:62:03:8f:d8:61:0b:7f:6d:0b:8a:32:
6a:50:41:50:20:2f:ee:31:4d:1a:cf:65:a7:9b:dd:
a9:9f:6a:c5:a5:20:61:b2:6c:7b:e8:46:f1:de:05:
a8:ef:8e:d8:f1:30:67:e1:83:1d:2c:1b:ff:a8:e0:
c5:d4:85:78:fb:ef:1d:48:a7:8b:b1:95:45:51:a0:
e0:8e:3d:f1:93:ea:9e:b8:02:f0:0e:2d:f9:7b:20:
6a:b3:35:10:c1:64:55:0e:87:61:70:e5:5a:9d:3e:
2c:e9:3f:41:71:92:8a:1b:78:98:69:41:a6:2c:23:
b1:86:6a:62:d1:56:6c:a7:b1:02:13:c5:e9:ab:72:
7a:55:d2:fe:bf:f6:ad:51:86:0e:a3:9a:e7:e1:b4:
4a:60:df:a0:4d:14:70:6c:1d:b4:98:ed:ba:60:7a:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:BC:A7:94:D1:1F:7F:74:ED:E5:49:04:93:0C:56:F3:89:46:B2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZzO8p5TRH3907eVJBJMMVvOJRrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
df:b9:0e:fa:91:a0:d7:e8:f6:6b:1c:50:00:92:7f:ef:05:95:
8d:09:b6:f5:15:e3:7c:2a:b5:73:ab:8d:57:51:5d:f7:96:8c:
f0:93:ed:d4:dd:ee:69:40:34:b4:7e:a6:76:b5:b7:a4:e1:11:
46:b5:80:14:c9:4f:fb:a4:8b:d3:5f:fb:38:60:c0:57:cf:8f:
93:92:df:76:84:7e:fd:c2:3d:9a:e0:af:06:59:07:a1:2a:83:
25:1c:a8:52:23:44:b3:49:c1:a9:f0:06:83:dc:e2:73:57:1b:
63:a8:ad:7a:86:89:17:e5:c3:07:3a:5b:09:3e:8f:a0:63:63:
ee:88:67:03:06:fe:f3:27:27:3c:25:19:0c:d4:2b:b3:9a:e9:
68:c4:5d:45:7e:cd:82:2f:a7:d9:bb:72:64:95:e7:42:82:42:
70:ca:1b:43:d4:d1:97:ec:89:9f:af:8f:e4:bf:0b:34:3f:fe:
e9:b6:bd:65:a6:0a:82:a5:db:8d:28:6b:05:cd:c1:5b:6d:ef:
fd:9f:38:ae:9c:e8:e9:03:92:0d:15:36:24:53:0f:2b:fb:e4:
c8:f7:0e:be:33:b9:dc:d4:9a:91:b0:c6:88:bc:cd:2a:c0:81:
04:f5:64:fa:3d:4f:a8:3a:a7:a1:26:53:8e:08:bb:77:26:28:
63:eb:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:53:31 2025 by rpki-client