Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b79j5T1iSDfhrMEDt_cow5930eo.roa
File: b79j5T1iSDfhrMEDt_cow5930eo.roa (raw, json)
Hash identifier: OxCcSRY3/ac107Ndii1k1soIEXyakYRpBWE9TAEgpXA=
Subject key identifier: 6F:BF:63:E5:3D:62:48:37:E1:AC:C1:03:B7:F7:28:C3:9F:77:D1:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01964C3E42199839C365A1404913C12E6121
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b79j5T1iSDfhrMEDt_cow5930eo.roa
Signing time: Sat 19 Apr 2025 04:11:10 +0000
ROA not before: Sat 19 Apr 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 08:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:3e:42:19:98:39:c3:65:a1:40:49:13:c1:2e:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 19 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fbf63e53d624837e1acc103b7f728c39f77d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:bc:77:69:fe:1c:52:57:b4:71:74:17:cd:
03:fd:9c:a6:3f:fd:81:b4:e8:d6:cb:0b:22:69:20:
ac:24:1c:35:5d:ae:21:86:33:f5:44:bb:6c:5c:2d:
4b:02:38:6a:8a:b1:c0:c2:3b:99:28:c4:6c:f8:9f:
58:b2:99:54:70:66:14:c7:32:d9:ff:81:2b:50:3d:
77:5a:2b:e9:68:c6:c4:bd:c3:26:57:93:44:9a:34:
7c:77:bb:5c:27:c2:41:59:9f:d4:a4:e9:ce:a4:15:
73:c4:f3:a5:a6:30:46:05:de:0f:5b:0b:e1:52:2f:
8b:c0:68:25:35:30:f1:e9:17:17:1b:28:54:2a:6e:
03:77:cb:2b:bb:92:88:d0:03:42:a5:64:3b:cc:14:
bd:95:79:33:8d:6b:c7:69:55:bf:71:61:f5:84:f4:
6b:19:24:04:8d:c0:77:1a:9a:64:cb:ee:f7:a3:b3:
57:da:bc:9e:ae:02:ba:50:9a:81:dd:53:de:e6:56:
ca:8d:26:40:d3:49:86:7e:3d:c6:bf:7a:81:b9:aa:
94:1e:6f:50:9b:d8:0d:3a:e7:d4:4e:99:2b:f2:03:
fc:02:94:67:05:ce:61:81:d3:5e:f8:70:d4:75:cf:
1b:9e:57:c3:2e:66:e3:33:19:4b:c5:2f:bd:15:8c:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:63:E5:3D:62:48:37:E1:AC:C1:03:B7:F7:28:C3:9F:77:D1:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b79j5T1iSDfhrMEDt_cow5930eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:53:7c:2c:35:8a:db:a1:d6:7c:e4:53:bf:01:af:de:43:c9:
a9:77:28:9e:8a:e1:4b:61:79:0e:04:e5:11:d5:1f:7d:6e:c5:
8c:cb:a0:0f:33:a9:ad:cf:1e:15:83:8a:94:57:88:3d:aa:e3:
d8:a4:6b:1e:82:77:bc:55:64:e7:e3:d8:7e:18:58:5d:99:2c:
47:c9:3c:cf:13:d3:73:66:5a:d6:68:d2:9a:b3:d3:60:d3:d7:
f9:52:60:26:81:e8:61:4b:16:82:40:36:f4:fc:a8:ec:67:4e:
85:aa:8a:56:a2:23:91:6f:75:b2:ee:d7:a8:12:81:16:4d:cb:
3f:66:2d:51:32:1e:35:4d:be:da:c2:1a:9e:a2:04:7a:07:6f:
90:b6:c9:40:90:61:7c:02:ff:0f:2d:3f:55:cb:34:94:cb:e3:
6d:2a:9f:3f:d9:5c:ff:31:a9:cd:31:28:32:13:d2:03:79:86:
12:af:0b:44:14:9d:6d:40:c2:9f:99:d7:5f:34:a1:f1:7b:07:
62:5a:f8:45:33:0b:ad:4b:52:8e:b5:e1:ee:11:a4:35:e3:26:
2b:e5:84:a0:8b:43:61:04:2d:17:1d:bc:e5:50:a7:48:72:8a:
3e:a9:c5:2a:1d:1d:f9:51:4c:a3:56:ef:8d:4b:a8:ab:79:c9:
1d:6d:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:03 2025 by rpki-client