Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h6bU5fkxqFnmbyeGzIJVkGhhHJo.roa
File: h6bU5fkxqFnmbyeGzIJVkGhhHJo.roa (raw, json)
Hash identifier: CJKzQvYBI4b8aELwyH3fmQ6M7h8zZLg7spklB/zAmRU=
Subject key identifier: 87:A6:D4:E5:F9:31:A8:59:E6:6F:27:86:CC:82:55:90:68:61:1C:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019647143C75D6944D9BAF408C351821DCF1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h6bU5fkxqFnmbyeGzIJVkGhhHJo.roa
Signing time: Fri 18 Apr 2025 04:07:10 +0000
ROA not before: Fri 18 Apr 2025 04:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.236.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 18:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:14:3c:75:d6:94:4d:9b:af:40:8c:35:18:21:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 18 04:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a6d4e5f931a859e66f2786cc82559068611c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:5f:b5:d3:3e:8b:18:15:82:4a:73:7a:84:
a2:5b:75:35:93:89:42:24:54:8b:29:6c:71:d9:3d:
8b:44:78:fa:3c:95:41:f1:5b:63:1d:17:97:25:bd:
e0:48:6f:3e:1c:15:91:73:a9:57:26:36:73:3f:e3:
84:5c:8a:be:d1:34:01:24:0f:f9:73:11:bd:0a:d2:
37:bd:44:b6:17:52:cc:f4:7c:c3:9a:9c:cb:71:87:
60:4f:0c:48:2d:44:e9:69:cd:c5:cf:38:a9:15:af:
07:d2:77:04:ea:32:72:61:d0:8c:6e:66:12:63:f6:
b1:51:4a:ad:bf:de:be:7f:53:d0:15:53:5a:3f:eb:
e9:de:5c:5d:8a:82:26:e3:73:aa:84:94:8f:c4:b7:
0b:d8:62:2b:24:8c:04:80:d2:f5:a9:ab:85:06:67:
49:1e:e7:46:c1:87:92:c3:bc:0f:a4:0b:e4:73:5a:
dd:ba:21:fd:e4:e7:d2:c8:79:cc:99:60:af:d9:fb:
d8:04:19:d2:21:1f:f8:76:ea:e3:84:b1:c7:5d:a8:
6f:32:6d:d4:2d:88:93:cd:b5:9d:56:ae:b8:18:fc:
18:66:4e:e6:35:0c:71:73:28:8d:02:f4:0d:9e:92:
f9:8d:11:bb:8b:f1:86:19:d3:60:45:1e:d6:c2:15:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:D4:E5:F9:31:A8:59:E6:6F:27:86:CC:82:55:90:68:61:1C:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h6bU5fkxqFnmbyeGzIJVkGhhHJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:52:b6:0f:a3:40:c3:c1:e9:7e:e8:b5:2a:5c:1b:4c:87:9d:
8f:af:85:4a:9c:07:75:78:fe:39:a2:3c:2d:e3:2c:77:78:8e:
b3:c3:bd:ef:65:27:a3:d4:3b:66:bb:d9:98:3c:75:42:e0:80:
ea:84:7c:8a:90:50:e9:e5:49:93:d8:4e:3a:b2:25:5c:5c:23:
ed:74:df:6b:74:95:67:40:f8:8c:a2:41:2e:4c:4b:83:3e:b7:
3a:c4:0d:e9:f0:43:59:99:1e:9a:75:bf:1a:3b:54:74:1e:1b:
ea:43:d3:a9:bf:0d:bc:c3:68:03:55:6b:a0:4b:92:bb:06:39:
44:56:40:eb:79:01:eb:31:e4:9f:4e:32:a4:4c:fa:46:1f:15:
51:d2:ab:91:e4:97:8d:63:e6:8c:2f:1c:42:73:d0:7c:c2:a7:
63:74:1d:ae:6b:0f:4c:08:37:48:83:3d:2b:f8:0f:0b:d8:d1:
24:6d:25:13:73:1a:2b:f7:37:9a:82:7d:73:6e:40:5d:68:81:
18:c5:7c:e5:ee:a4:79:56:5d:a7:60:54:48:bf:d0:c5:5a:00:
d5:94:aa:20:a3:b4:ff:ed:10:b8:12:af:e0:52:af:4f:49:ae:
f4:fe:a7:94:e9:71:1b:f1:c2:94:e4:4b:49:b1:e8:ca:e6:3e:
81:3b:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:40:51 2025 by rpki-client