Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fCvVGf85CT9JZAXKh64qsIa_wmY.roa
File: fCvVGf85CT9JZAXKh64qsIa_wmY.roa (raw, json)
Hash identifier: arLY9q5XEJ9WAd9cy3yLEy7UtTlMVIGOOxATtlCqtPI=
Subject key identifier: 7C:2B:D5:19:FF:39:09:3F:49:64:05:CA:87:AE:2A:B0:86:BF:C2:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196B342070DD9B2A3735ADE72DF05729B94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fCvVGf85CT9JZAXKh64qsIa_wmY.roa
Signing time: Fri 09 May 2025 04:16:10 +0000
ROA not before: Fri 09 May 2025 04:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 04:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:42:07:0d:d9:b2:a3:73:5a:de:72:df:05:72:9b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2bd519ff39093f496405ca87ae2ab086bfc266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:15:ff:62:ef:34:48:ad:36:bd:e1:2b:1f:
50:4a:64:44:c0:8f:a0:60:28:61:e3:06:79:db:ba:
7f:26:3e:8b:b6:43:81:fe:71:c0:07:50:67:1e:78:
52:e5:e9:8f:2e:90:27:3b:7c:f7:e8:06:26:6c:d8:
ba:4d:14:f2:8d:32:7b:75:21:fc:cb:91:b7:b6:8a:
c3:da:7d:bd:c2:bc:f0:e0:bc:e8:05:af:06:a5:fb:
c1:b4:19:07:cf:ea:bf:a4:8b:47:39:a8:d3:95:94:
72:23:23:1e:16:4d:23:70:86:db:2f:51:d5:c0:cd:
c0:93:13:6a:0e:88:be:b9:77:10:c3:19:cf:94:a4:
50:76:66:8d:d2:c8:75:e1:b4:c3:3e:0a:8d:69:74:
79:3d:4b:c1:21:76:c3:7d:ee:b9:42:fa:38:ba:d3:
c7:c8:f4:e8:4f:41:80:06:3f:07:1e:97:61:86:c5:
7f:0a:80:40:f1:7f:46:cd:eb:85:5e:47:38:49:1d:
72:66:92:20:a7:a3:c7:30:d5:fc:4f:86:a0:af:cb:
58:4e:6b:e0:a4:e7:e1:35:38:e9:06:71:0a:61:a6:
b2:c7:ca:11:c4:e9:f6:c6:12:29:f8:f4:70:49:eb:
b5:db:d1:84:eb:bc:29:82:4d:79:cb:ff:64:b9:d5:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:D5:19:FF:39:09:3F:49:64:05:CA:87:AE:2A:B0:86:BF:C2:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fCvVGf85CT9JZAXKh64qsIa_wmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.106.0-5.231.110.255
5.231.116.0-5.231.123.255
89.144.53.0-89.144.55.255
94.103.166.0/24
94.103.172.0-94.103.174.255
94.249.183.0-94.249.190.255
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
94.249.243.0-94.249.252.255
Signature Algorithm: sha256WithRSAEncryption
a6:aa:49:1c:b3:02:0a:3b:ad:f5:a7:3b:45:b7:fa:98:9f:8d:
27:8c:46:23:86:44:c3:83:32:65:bf:60:b6:35:c5:60:fa:64:
1e:d8:f3:3f:b8:f0:c0:bc:24:24:99:9a:b7:de:39:3e:0f:b6:
9e:78:6a:0a:03:ff:a4:96:06:0f:c0:c1:4e:fe:6c:cf:1e:45:
69:b2:27:ef:22:a4:95:2f:35:b1:b8:71:ba:b0:0f:48:e9:9e:
45:71:11:54:84:95:0c:c8:8d:8d:bf:52:a8:5e:72:4a:ed:2b:
a5:3d:4c:96:2a:42:e3:4e:c1:01:3d:b9:40:ed:d3:d8:16:92:
6d:a0:51:87:2e:87:4f:72:6a:6f:ef:7c:51:e9:7c:08:88:de:
d4:9e:2d:bc:b6:5d:c7:64:35:ad:c9:14:6a:05:11:37:ee:7c:
45:61:37:8e:79:28:35:e1:67:8b:d5:61:07:d7:4a:d9:fe:a9:
8b:e6:90:7d:f7:f5:60:3b:9c:f7:a1:84:5a:c4:09:39:72:32:
28:f0:14:16:ef:e5:bd:41:d1:44:92:b8:b8:26:34:de:ba:ed:
a8:0d:4e:98:82:74:8f:ec:22:97:27:00:9d:f1:b0:ed:bb:77:
c9:0d:42:9f:f9:ea:0d:6b:d0:dd:63:c7:00:b7:ea:f2:0a:c0:
71:6d:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:40 2025 by rpki-client