Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bWm0WXrVCUcw9Rx9ZlSlZ157GcE.roa
File: bWm0WXrVCUcw9Rx9ZlSlZ157GcE.roa (raw, json)
Hash identifier: Ye2MLDAOrVN1LqzuBvu7Wc4HNcvRGvT20BblSL2x2CM=
Subject key identifier: 6D:69:B4:59:7A:D5:09:47:30:F5:1C:7D:66:54:A5:67:5E:7B:19:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196E6BB3509974368A7966BCF788A61E690
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bWm0WXrVCUcw9Rx9ZlSlZ157GcE.roa
Signing time: Mon 19 May 2025 04:09:10 +0000
ROA not before: Mon 19 May 2025 04:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 19:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e6:bb:35:09:97:43:68:a7:96:6b:cf:78:8a:61:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 19 04:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d69b4597ad5094730f51c7d6654a5675e7b19c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:aa:d3:de:2c:6b:d6:97:59:ec:20:7f:20:
8b:0e:50:e1:db:8b:3a:9b:28:45:17:69:12:32:3d:
5f:ee:fd:cd:b4:b3:81:d5:ed:92:e9:c5:2b:58:3c:
4e:ae:11:7b:d5:ca:60:73:d3:d9:ce:75:e2:1d:e3:
c6:9b:8a:2e:67:07:ec:b9:92:67:20:67:97:69:84:
78:4e:50:15:7e:69:74:14:d2:3d:59:83:8d:e0:c1:
5c:8e:28:fe:b9:55:8c:da:6e:0e:74:54:20:54:37:
91:3b:b8:f5:ac:8c:e8:7e:84:37:7a:9f:e3:de:c6:
47:87:08:a0:15:50:61:91:fa:e8:f8:1f:fa:5a:b5:
a6:46:e8:2a:12:51:f4:58:e0:2c:bf:59:1a:c1:5d:
1c:67:25:31:c8:30:4d:c2:61:a1:61:dc:85:fa:19:
85:a5:38:7e:f5:1f:69:44:73:fe:20:18:9d:2a:db:
c7:61:43:77:64:b0:c0:5d:ec:d2:21:b3:6b:65:b5:
75:4e:9e:02:78:da:e4:c9:2d:0d:be:b4:41:55:70:
95:3f:43:a6:3c:14:60:2b:2a:42:f0:17:3c:f8:3e:
b4:ad:c2:cb:5e:84:d9:0d:0c:e5:6e:57:22:82:b2:
9a:f9:60:af:72:cb:a0:c3:fa:94:16:86:2c:b1:4f:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:B4:59:7A:D5:09:47:30:F5:1C:7D:66:54:A5:67:5E:7B:19:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bWm0WXrVCUcw9Rx9ZlSlZ157GcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
95.215.32.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:54:a5:f5:81:54:34:a6:d7:6b:a5:b4:aa:15:63:a5:bb:03:
e5:7a:0c:87:ea:d8:43:6c:a2:4d:f4:7b:ae:5e:dc:62:92:eb:
c9:e3:23:27:f2:f9:35:13:63:ba:46:12:ca:1a:a3:a1:f4:30:
ba:fe:de:9b:95:a9:3e:e8:8a:35:b6:54:b8:8d:d7:7e:61:5f:
65:9c:58:ff:aa:65:7e:37:71:ba:19:fb:7e:e5:0d:b1:e4:1e:
45:18:16:94:bd:3f:f1:7a:f5:16:93:88:e3:6b:18:e5:9f:fc:
16:fe:81:89:1a:58:d9:52:c6:d7:e4:ff:ff:3d:eb:02:b9:57:
06:78:c8:6a:bb:6d:bb:a0:84:de:e7:12:4a:a6:ff:79:c8:c2:
8f:19:41:91:cf:cd:cd:d5:07:86:76:b5:ab:66:a5:16:31:59:
10:89:62:07:9a:55:bf:43:5c:14:7d:9e:ba:ec:c0:6d:77:53:
45:8f:e3:ae:7d:9c:6b:d6:a4:b4:a0:74:bb:22:d0:33:c4:60:
73:97:31:22:2e:b7:0f:3f:85:d5:2a:66:11:fc:89:9b:86:35:
ee:fd:86:67:e9:52:c0:c7:41:c4:b9:3e:e7:0f:8a:b0:b1:78:
88:00:e0:5e:46:4f:a1:55:4a:02:49:c1:08:93:cf:87:7d:46:
35:ae:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:50 2025 by rpki-client