Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_lj2hqlHE-WyYsFmQAJYQGyPLN0.roa
File: _lj2hqlHE-WyYsFmQAJYQGyPLN0.roa (raw, json)
Hash identifier: JjJt7LKXmCGykxJdSADCttTCIUavGoiQI/llyY0uPjk=
Subject key identifier: FE:58:F6:86:A9:47:13:E5:B2:62:C1:66:40:02:58:40:6C:8F:2C:DD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019694D2E2F6577773CDBAF078755CBEE67E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_lj2hqlHE-WyYsFmQAJYQGyPLN0.roa
Signing time: Sat 03 May 2025 06:26:10 +0000
ROA not before: Sat 03 May 2025 06:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 14:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:d2:e2:f6:57:77:73:cd:ba:f0:78:75:5c:be:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 3 06:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe58f686a94713e5b262c166400258406c8f2cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e9:ee:7e:dd:c2:be:8c:ac:86:d7:56:53:09:
55:4a:93:50:7a:9d:5b:d0:43:74:0b:ab:dc:6b:f2:
16:a1:87:ae:ae:ab:78:e3:83:c0:17:ae:d4:bb:f8:
d6:48:6e:de:a5:02:cd:32:ff:96:8b:b4:a0:eb:a2:
d1:18:da:34:f9:95:c1:b4:dc:3f:aa:2f:15:b6:fa:
9a:48:a5:d3:50:08:e2:53:8b:85:c1:4d:95:01:9a:
43:b4:9f:a7:af:a9:bf:ef:92:28:ec:49:73:53:a3:
24:04:2d:3c:0d:cc:e6:40:f7:2c:49:7d:19:b3:ba:
a7:85:a1:c9:37:e4:85:83:17:4f:a7:0a:6d:5e:8d:
83:cc:72:9c:20:51:43:50:b1:68:38:31:fa:76:56:
33:cc:00:65:4c:27:95:bc:0e:8b:43:94:54:e4:da:
a1:68:77:1b:e0:f8:26:cd:c0:0b:61:a1:69:c5:c2:
59:fb:07:30:26:2d:ec:d1:68:30:e2:f5:02:51:df:
41:05:2b:e7:fa:58:a5:53:f0:a2:ed:d3:2b:3f:b7:
63:5f:2c:3d:a5:52:45:83:2a:ef:7a:45:fd:6e:80:
14:14:fa:a6:54:c4:9d:14:e2:ed:ea:a1:d9:49:4f:
b2:1f:a9:60:69:37:64:b7:df:e7:e8:f6:93:c4:c8:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:58:F6:86:A9:47:13:E5:B2:62:C1:66:40:02:58:40:6C:8F:2C:DD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_lj2hqlHE-WyYsFmQAJYQGyPLN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.33.0/24
85.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:33:0c:3c:f4:60:44:fc:f3:af:0b:b2:c6:ca:6b:a2:25:82:
8d:bb:5f:d2:9d:67:c3:28:ef:31:04:53:8b:e5:41:e2:49:86:
74:9e:23:ac:1c:23:9b:39:72:e7:9f:e1:aa:45:ac:e3:e9:be:
66:bb:92:3e:19:f6:44:a6:ff:09:fa:d4:9a:f8:27:44:ce:d0:
5c:f3:29:31:66:75:6f:17:5a:b0:a4:ca:cd:98:6d:70:4a:97:
5a:4d:61:f1:c6:c3:85:42:d6:1f:1a:95:fb:3b:9b:c6:ac:f1:
97:51:b7:4e:cc:ce:3f:56:dd:fe:46:fe:d5:c0:d9:25:fc:04:
1d:36:c6:78:13:35:b8:af:1c:a4:82:a3:bf:a2:fb:ae:04:c4:
03:6e:cd:7c:b3:f6:65:c2:e8:0e:5c:c1:f9:b5:7f:c4:e7:1e:
e4:fd:57:9b:d1:23:d2:7c:d7:79:38:b3:cb:7f:a6:78:09:d7:
af:34:ad:d8:13:3c:4c:31:c2:19:06:d4:4e:bc:ef:a5:23:6a:
5d:da:03:b9:94:98:a0:cd:02:08:07:b0:59:36:ac:1e:6c:3b:
83:dd:c2:cb:5c:f3:b5:7c:5d:9b:4f:35:9e:57:74:9f:73:aa:
93:2f:5e:28:6e:92:a6:52:1c:f7:31:32:06:e7:1c:16:61:87:
ee:99:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:22 2025 by rpki-client