Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dv4sg6H3ZIWNQbxuaVpeORruC-w.roa
File: dv4sg6H3ZIWNQbxuaVpeORruC-w.roa (raw, json)
Hash identifier: 1rHjeRSuBf2GqKePBrkHYA/k0QYoyy284tgN++vQX3g=
Subject key identifier: 76:FE:2C:83:A1:F7:64:85:8D:41:BC:6E:69:5A:5E:39:1A:EE:0B:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019667CA9293825D635C926377D55EE77762
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dv4sg6H3ZIWNQbxuaVpeORruC-w.roa
Signing time: Thu 24 Apr 2025 12:34:11 +0000
ROA not before: Thu 24 Apr 2025 12:34:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 18:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:ca:92:93:82:5d:63:5c:92:63:77:d5:5e:e7:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 12:34:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76fe2c83a1f764858d41bc6e695a5e391aee0bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:1c:c4:33:29:24:21:5c:57:f3:4d:c4:43:
f9:41:7a:36:71:57:86:fa:31:2e:ff:e6:a0:e0:72:
d8:20:5b:1c:be:83:23:00:75:53:00:4a:35:b2:7d:
eb:09:9f:82:65:6a:dc:6d:f5:f1:ca:f6:f1:e3:91:
92:ae:73:76:99:9b:7f:15:e9:e9:ff:fa:98:4b:93:
7a:2a:79:3b:53:57:54:b1:85:7f:12:2d:bf:17:83:
f1:2d:a9:aa:83:13:05:04:29:5b:77:70:4e:92:d0:
2c:5f:1c:bc:0f:1a:17:5c:d4:63:d1:6e:a6:d9:19:
cf:3d:d3:98:f9:f3:0b:a9:67:4c:ca:06:e3:14:3c:
6c:91:88:76:22:1d:b6:e7:a6:aa:9a:9d:45:22:5a:
e7:ac:2f:ff:cc:03:57:51:f6:62:98:38:c9:d8:e3:
b9:2d:46:20:53:a0:53:57:15:37:e7:78:51:08:4f:
c5:6d:2d:43:66:bf:d5:31:ad:71:fb:8e:d3:a8:2b:
50:70:d0:e3:41:30:c8:dc:37:3a:01:6d:32:b9:55:
8d:63:22:91:7f:5d:bb:17:15:73:0a:d5:b8:89:03:
37:f8:13:2c:9b:60:7d:39:64:82:d6:f3:56:54:fa:
be:fd:c8:d7:3b:51:1f:0d:cc:3b:32:2e:c8:29:72:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:2C:83:A1:F7:64:85:8D:41:BC:6E:69:5A:5E:39:1A:EE:0B:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dv4sg6H3ZIWNQbxuaVpeORruC-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.106.0-5.231.110.255
89.144.34.0/24
94.103.166.0/24
94.103.172.0-94.103.174.255
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:eb:c6:dd:fa:f3:c7:e8:17:23:b3:ab:4f:e0:e2:73:d6:94:
b8:cd:d6:0d:1a:72:71:55:36:0a:cf:9e:bf:a5:9d:d9:0e:04:
0c:76:57:19:01:50:19:8c:e6:6e:8a:b2:36:80:91:5f:82:40:
46:16:0d:12:b4:74:b6:a5:0a:e1:30:7f:35:b2:70:3b:12:c3:
57:34:cd:ad:a1:1c:b0:98:8d:33:10:e3:ac:14:4a:1e:67:9f:
ba:6d:74:52:1c:58:9d:1e:03:7b:15:78:1e:3c:56:2a:1c:40:
46:55:72:50:82:39:a3:77:1f:1d:a4:f4:b8:91:04:b8:f7:17:
fa:6f:69:f9:3b:da:23:1a:0d:2f:6b:5f:fa:a1:fe:ce:c9:9d:
94:8b:79:84:ca:47:f7:93:fe:8f:93:06:c7:76:b0:54:89:8f:
f2:bf:7a:a5:d2:16:f8:3d:57:0b:50:0c:9c:07:5e:06:cd:dc:
4e:00:f1:62:98:0f:03:21:de:56:a0:7b:79:30:a0:a8:d2:80:
d9:80:58:3c:96:43:25:a5:cd:23:80:ec:c8:b1:ee:59:2f:37:
54:e0:33:ba:25:6c:01:10:c7:5d:64:09:6c:12:69:9e:67:2c:
53:09:cf:2f:4b:67:54:57:74:d5:c2:71:a9:e9:db:8c:29:31:
6b:a4:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:43 2025 by rpki-client