Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_J-yOrb6LDvazwqJLxgCoJx1oQo.roa
File: _J-yOrb6LDvazwqJLxgCoJx1oQo.roa (raw, json)
Hash identifier: LxkwkmxrbtnMK7RGFQEm2bemNK+TIqp5/4q0cgu+Eys=
Subject key identifier: FC:9F:B2:3A:B6:FA:2C:3B:DA:CF:0A:89:2F:18:02:A0:9C:75:A1:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196C2AB0818343BF8F2DF8455BFE384791C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_J-yOrb6LDvazwqJLxgCoJx1oQo.roa
Signing time: Mon 12 May 2025 04:05:10 +0000
ROA not before: Mon 12 May 2025 04:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 07:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:ab:08:18:34:3b:f8:f2:df:84:55:bf:e3:84:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 12 04:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9fb23ab6fa2c3bdacf0a892f1802a09c75a10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:ad:ce:e4:97:26:db:8c:15:ca:24:f5:ee:
b8:4c:68:22:b5:9c:d2:10:5f:e1:73:28:d5:cb:55:
15:2a:6f:98:cf:bd:ad:a4:55:d4:e2:20:8f:50:40:
22:c5:41:bd:21:9f:04:00:75:bc:70:f5:21:94:7b:
85:d0:9c:fb:70:23:eb:4a:86:c7:05:c3:85:65:74:
2d:25:87:88:11:7f:ce:b7:b0:f6:e5:81:4a:47:bc:
92:6d:75:ca:a8:15:32:32:be:99:9a:98:15:94:9f:
3a:25:fc:d8:d8:10:34:46:c6:99:1b:1e:bb:68:0a:
b0:38:43:23:94:81:75:d1:9d:02:91:8f:00:eb:b5:
d2:8d:f2:97:ab:c9:ab:3d:d6:dc:21:50:b5:e7:04:
05:c9:73:55:90:e6:a0:5b:5f:57:c5:70:87:3f:f7:
ab:f8:44:0b:6f:49:17:e3:4f:ae:d1:b0:10:f5:66:
2e:ed:4d:2d:2c:15:7d:ed:df:78:b9:3e:ed:3c:f5:
31:34:52:7a:f4:e9:32:bf:99:2a:11:14:da:52:97:
5b:3d:bb:77:d3:87:22:ad:dc:0e:4d:08:08:ca:da:
e7:f3:0b:5a:24:20:b0:95:6f:07:87:ff:13:1e:8b:
bd:0d:e0:45:f4:84:e8:fa:8c:5e:7d:47:59:55:b4:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:B2:3A:B6:FA:2C:3B:DA:CF:0A:89:2F:18:02:A0:9C:75:A1:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_J-yOrb6LDvazwqJLxgCoJx1oQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
85.118.162.0/24
94.103.163.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4e:23:e8:48:72:8d:a2:55:dd:da:b7:60:bb:53:4a:e1:53:
b8:02:a6:a5:5c:05:49:6f:87:6f:ed:63:00:06:d0:ba:b3:2d:
1d:02:09:58:c9:33:a6:76:7d:ba:71:9c:2c:f3:01:de:62:af:
81:98:00:26:9c:82:b4:cb:75:11:47:5a:a6:b4:5b:51:50:32:
a3:a3:5d:53:f0:30:c1:68:8c:c1:1c:c9:87:7f:4f:60:cf:4f:
54:7f:70:e6:e2:28:c6:e1:b0:e0:f4:11:04:15:08:23:21:32:
5b:70:4b:b7:42:6f:1c:bd:b9:f2:d1:47:87:91:9a:ed:6d:c8:
b0:05:1f:e3:2c:a3:4e:b7:e7:21:7c:e3:49:8f:6e:ad:83:dd:
f2:ff:74:c7:21:9d:c9:41:b0:4e:34:c7:47:9b:86:ac:c7:bb:
17:ab:18:d7:b6:09:f9:a6:97:cb:6c:5f:9e:1f:c2:39:68:cc:
4f:15:45:b6:22:77:e9:fa:27:5d:c6:19:22:fb:8a:e5:39:7a:
d6:32:a0:d9:b7:6b:37:eb:d9:8b:2d:bd:50:6c:58:a4:c1:50:
e2:45:a1:8a:30:80:94:10:b7:04:fa:d8:23:a2:38:76:73:d8:
01:df:f7:89:2d:68:2d:e0:2c:d2:41:a4:af:30:31:80:8a:66:
72:f8:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:35:54 2025 by rpki-client