Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d07Fsc2fkhSRSMbZUxR4r-G-PJw.roa
File: d07Fsc2fkhSRSMbZUxR4r-G-PJw.roa (raw, json)
Hash identifier: TLe/13YoXDmP0orpEgsHC7fye4wdOJRnI2suSXRBSfk=
Subject key identifier: 77:4E:C5:B1:CD:9F:92:14:91:48:C6:D9:53:14:78:AF:E1:BE:3C:9C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197322E33E60235372D84B5218798DA83FE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d07Fsc2fkhSRSMbZUxR4r-G-PJw.roa
Signing time: Mon 02 Jun 2025 19:46:18 +0000
ROA not before: Mon 02 Jun 2025 19:46:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 06:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:2e:33:e6:02:35:37:2d:84:b5:21:87:98:da:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 19:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=774ec5b1cd9f92149148c6d9531478afe1be3c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:1a:e5:c5:06:32:97:4d:fc:84:ca:f0:e9:
f1:01:d8:d2:8a:f4:87:c5:58:61:4c:6c:c7:0a:dd:
fa:2f:b3:29:31:4e:0b:e0:9f:af:37:89:41:3c:a9:
f8:ea:48:f7:b0:db:1d:cc:3c:75:c3:e2:b5:38:54:
6f:e9:18:6d:b3:2e:a3:ff:30:03:e1:9b:d4:20:4c:
bc:48:5c:47:7a:4d:c9:c6:ff:0e:6e:c5:43:f0:99:
9d:b3:27:af:59:1a:91:d9:75:ba:f0:71:3b:fc:43:
fb:e9:94:49:21:55:c0:d7:ba:95:aa:9e:8a:b2:3f:
56:40:b8:0b:9b:6c:09:47:24:97:09:bb:3f:6b:2c:
29:e8:25:15:bf:02:8d:33:c8:89:78:9f:3b:57:d4:
fd:35:57:56:4a:fe:b3:db:1e:05:d7:bc:34:c4:3a:
eb:09:e1:3f:11:2e:05:76:a6:cb:03:3f:30:ec:c7:
3b:5e:86:45:42:37:1a:22:4f:45:43:26:33:21:49:
a0:e0:21:cd:fb:e5:b7:03:23:da:6c:b2:e8:5d:da:
72:0e:4a:c7:3a:bb:d0:4e:79:6d:8f:3c:9f:1a:99:
42:49:60:a7:7d:2e:90:8c:36:89:78:0c:a9:f9:dc:
51:f4:9d:64:6b:9e:7d:cc:29:05:55:92:9f:e0:d8:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:C5:B1:CD:9F:92:14:91:48:C6:D9:53:14:78:AF:E1:BE:3C:9C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d07Fsc2fkhSRSMbZUxR4r-G-PJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
94.249.213.0/24
Signature Algorithm: sha256WithRSAEncryption
49:39:30:ae:3c:99:72:0d:43:3a:c4:1f:75:77:40:45:5f:62:
43:bd:12:59:81:a5:07:13:5a:fb:b0:d0:c9:4c:d2:f8:3c:7b:
b2:30:a3:c2:50:06:06:2c:e9:87:4a:c8:10:d6:af:ea:46:dd:
2c:da:a4:aa:72:3c:52:63:65:5d:44:56:d2:3a:10:51:bd:e9:
e2:1c:0a:c0:6b:fe:a4:5a:62:13:b2:ba:37:8b:2f:45:3b:43:
f0:36:22:4b:a3:da:a5:50:f0:5e:ed:1a:d5:41:f4:13:8a:56:
0d:11:06:51:25:c6:14:88:f3:0e:19:88:28:38:72:eb:e8:fa:
1f:ee:52:09:57:32:e7:7c:cc:94:38:45:d2:97:01:a8:41:c8:
fb:fc:03:1d:00:d3:90:21:90:1e:b1:f4:d2:6b:74:d3:db:4e:
68:f6:5d:a7:b2:63:84:92:91:49:47:34:5a:e1:4f:89:77:ea:
2d:0e:26:75:e3:0a:1f:34:a4:e6:eb:b5:7f:cf:f4:cf:02:f4:
1d:8c:ce:5e:30:65:74:ac:2d:01:bb:46:70:74:3d:e9:ce:9c:
59:1c:30:33:8e:41:e8:cf:e2:82:52:77:05:e7:ba:02:56:ca:
3c:10:fd:91:f2:6d:f6:41:cd:9a:e5:86:ec:40:ca:61:12:74:
eb:07:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:06 2025 by rpki-client