Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aOF9io9k7WM1OZRFEcqh-mLerfg.roa
File: aOF9io9k7WM1OZRFEcqh-mLerfg.roa (raw, json)
Hash identifier: 3p4FS66gvXAptUO8lJX9UUYjQtimG8xtVQIsHJB6Td0=
Subject key identifier: 68:E1:7D:8A:8F:64:ED:63:35:39:94:45:11:CA:A1:FA:62:DE:AD:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019701C19BE4360C518A826040F5EB2228D4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aOF9io9k7WM1OZRFEcqh-mLerfg.roa
Signing time: Sat 24 May 2025 10:05:54 +0000
ROA not before: Sat 24 May 2025 10:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 04:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:c1:9b:e4:36:0c:51:8a:82:60:40:f5:eb:22:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 24 10:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68e17d8a8f64ed633539944511caa1fa62deadf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:b3:b8:b0:98:52:08:88:4b:5d:15:04:41:
54:a1:07:bc:13:e4:0d:9e:17:c1:33:0a:a4:c2:09:
65:d8:66:90:ac:24:eb:bf:60:55:97:df:7e:2c:da:
22:3a:07:28:a7:4d:0b:17:d4:6e:c2:24:16:31:96:
de:a2:a9:91:95:f2:0b:2c:1e:a0:21:18:dc:7b:4a:
f7:c9:cb:87:c6:a8:a6:d5:0e:85:ee:44:c2:e7:49:
75:7e:ef:ed:db:69:94:4f:52:6b:07:2f:ea:f3:11:
e8:e2:dd:24:4a:56:9c:fc:3d:2b:0c:e6:f4:c9:b9:
04:bc:de:94:96:3f:9d:e3:b5:e1:d0:9f:ed:01:55:
a0:3d:a1:7b:51:b0:a8:87:dd:1c:08:75:95:2e:19:
76:b6:43:eb:b7:da:c0:51:e6:d9:46:cf:0b:13:e2:
2b:62:ed:87:d1:53:be:36:31:af:7b:2f:4b:c3:fc:
5f:ab:4e:14:89:1e:c7:cc:41:fb:e0:6d:43:a0:d6:
82:ba:ea:88:be:d9:74:ee:1f:90:2f:8b:5b:5b:ab:
af:ba:e3:2b:80:eb:d4:68:01:52:52:cb:5c:2d:af:
33:05:d5:6d:fc:a3:98:93:60:36:7c:29:ee:fe:de:
d1:d4:c3:70:1d:c6:c8:ab:9d:e3:bb:0a:fc:73:60:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:7D:8A:8F:64:ED:63:35:39:94:45:11:CA:A1:FA:62:DE:AD:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aOF9io9k7WM1OZRFEcqh-mLerfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
5.231.105.0/24
5.231.115.0/24
77.90.54.0/24
87.239.131.0/24
94.249.172.0/23
94.249.194.0/23
94.249.233.0/24
94.249.238.0/23
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6e:44:eb:99:4a:ff:35:0b:8f:09:41:66:28:de:86:c2:95:
78:a3:aa:25:11:21:b6:55:8c:cb:8f:b5:65:88:e1:c5:0b:48:
9b:36:a9:3a:30:b1:03:72:72:36:eb:c3:9a:7e:69:22:84:d4:
2f:da:74:92:66:8f:e3:6e:48:69:e8:b1:95:6e:da:2f:92:99:
cf:20:87:22:d7:8d:42:bc:4d:19:c8:1f:68:11:8a:c7:f1:86:
7d:bd:37:8c:d1:53:15:01:ed:36:88:b5:df:e6:b7:42:47:65:
a1:78:b6:77:f1:22:18:ab:1e:bb:58:09:32:17:25:de:39:de:
41:93:f7:24:52:1b:32:2a:b1:c4:01:ec:20:45:02:23:42:3f:
d6:4a:fa:13:ff:8d:e1:59:cf:24:23:37:25:06:c6:64:05:51:
2c:56:e8:b5:d5:54:cb:52:60:b6:7e:ed:e6:dc:01:b4:21:24:
08:40:5a:0d:ab:5e:f5:2a:1c:b4:26:cf:89:51:94:ac:fe:49:
96:57:e8:14:59:ce:56:f0:02:2f:44:6d:ea:15:3b:bb:fb:d0:
24:8e:72:80:62:c4:ac:61:8a:d3:3e:5f:c7:ae:b3:19:5f:45:
fe:b4:ee:e9:eb:1d:ae:95:31:5a:d2:2b:3b:f5:e2:da:66:3e:
14:bb:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:12 2025 by rpki-client