Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7841ah8xAS5SwtYZCX5VgBVkek.roa
File: j7841ah8xAS5SwtYZCX5VgBVkek.roa (raw, json)
Hash identifier: qXDCXnuOeAOwHMUaO3qj81hwXv/RfOB/bEt8g19tQt8=
Subject key identifier: 8F:BF:38:D5:A8:7C:C4:04:B9:4B:0B:58:64:25:F9:56:00:55:91:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01964068C7D454936E3E9A5504E30A2336B8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7841ah8xAS5SwtYZCX5VgBVkek.roa
Signing time: Wed 16 Apr 2025 21:02:10 +0000
ROA not before: Wed 16 Apr 2025 21:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.93.7.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 19:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:68:c7:d4:54:93:6e:3e:9a:55:04:e3:0a:23:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 16 21:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fbf38d5a87cc404b94b0b586425f956005591e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:b3:6b:90:53:fd:03:57:01:1d:47:f7:26:
e7:7b:3b:9e:ed:54:be:bc:58:d4:bb:2f:b0:9d:8c:
11:a2:6a:39:ed:df:ab:f0:9c:60:ec:36:70:e7:6d:
d5:2e:f5:db:0a:97:36:21:8c:a0:ee:ed:4b:b5:57:
3b:47:1f:03:d8:2f:1b:9f:ce:ee:97:cd:60:6c:83:
c6:ff:69:3c:77:e3:d9:58:3c:47:03:94:75:31:2c:
44:b8:57:52:5a:ff:77:45:d7:ac:74:df:ed:3d:5d:
19:6c:55:b6:32:52:38:12:fc:b3:00:85:74:7f:78:
55:32:7a:c7:15:c3:aa:de:cd:78:c9:68:b0:a9:b5:
ce:59:2e:00:d3:9c:3e:13:6a:76:0e:a4:c1:a5:4e:
fe:90:dc:cc:44:8d:7b:db:b4:2b:cb:89:c2:3d:29:
b8:84:2e:93:87:8a:b3:8c:ae:26:8a:03:5d:fb:43:
4e:59:7c:85:d2:b3:9a:b9:b1:c1:64:69:21:65:fa:
3d:4b:4f:06:54:1d:c1:77:73:48:3a:fe:be:7e:13:
29:29:88:a0:6c:c9:78:f1:33:e0:6d:b0:75:7e:85:
e0:74:ce:53:fb:49:3f:6c:4c:ce:54:c7:52:4e:e2:
9a:48:39:f8:c0:75:1c:01:0c:df:b3:16:e8:9a:c1:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:38:D5:A8:7C:C4:04:B9:4B:0B:58:64:25:F9:56:00:55:91:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/j7841ah8xAS5SwtYZCX5VgBVkek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
5.231.96.0/24
5.231.225.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.93.7.0/24
85.93.22.0/24
89.106.70.0/24
89.144.7.0/24
89.144.14.0/24
89.144.16.0/24
89.144.25.0/24
89.144.35.0/24
94.249.153.0/24
94.249.158.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c8:58:2b:76:de:71:9b:bd:11:f5:28:ca:78:4e:dc:f5:2c:
42:4c:10:c6:09:c4:16:d2:ae:16:47:56:54:29:62:e0:50:01:
11:3b:90:d0:32:e4:08:99:d1:96:19:1b:c4:57:a6:d6:c6:5f:
bd:64:32:ef:c8:d6:03:bc:e6:73:e8:cd:67:57:8e:b7:30:86:
fc:11:b1:10:60:b8:44:0d:eb:ee:19:a2:5c:89:3c:23:97:3a:
21:fc:88:d7:2c:11:b0:47:a1:29:5c:09:cd:f3:dd:0b:73:30:
f9:32:5b:72:9d:22:36:eb:99:e7:26:b1:18:ba:17:ab:08:f3:
82:e9:df:b8:18:27:f8:9b:d0:fe:25:f3:47:0f:95:13:f5:58:
d4:47:c4:cc:f6:30:72:f7:96:ae:01:ba:70:10:43:d8:31:b9:
5f:e2:05:ce:da:dd:16:47:91:85:1e:1d:d1:cc:7a:44:32:73:
1a:1e:5a:f3:44:e4:fa:76:8c:d1:74:16:bf:d3:65:ec:6a:8d:
76:74:e4:35:95:ff:fb:12:bb:e7:23:c7:3e:dd:34:d4:ef:c7:
ae:0d:a9:ad:c0:e1:a4:67:94:de:eb:fc:d9:0a:4b:c1:88:c6:
f3:90:72:62:67:51:29:77:3d:aa:72:d0:32:d0:e9:69:7e:8e:
70:1d:51:32
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZZAaMfUVJNuPppVBOMKIza4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDE2MjEwMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmJmMzhkNWE4N2NjNDA0Yjk0YjBiNTg2NDI1Zjk1NjAwNTU5MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo72za5BT/QNXAR1H9ybnezue7VS+
vFjUuy+wnYwRomo57d+r8Jxg7DZw523VLvXbCpc2IYyg7u1LtVc7Rx8D2C8bn87u
l81gbIPG/2k8d+PZWDxHA5R1MSxEuFdSWv93RdesdN/tPV0ZbFW2MlI4EvyzAIV0
f3hVMnrHFcOq3s14yWiwqbXOWS4A05w+E2p2DqTBpU7+kNzMRI1727Qry4nCPSm4
hC6Th4qzjK4migNd+0NOWXyF0rOaubHBZGkhZfo9S08GVB3Bd3NIOv6+fhMpKYig
bMl48TPgbbB1foXgdM5T+0k/bEzOVMdSTuKaSDn4wHUcAQzfsxbomsF+cwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFI+/ONWofMQEuUsLWGQl+VYAVZHpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvajc4NDFhaDh4QVM1U3d0WVpDWDVWZ0JWa2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQABVOW
AwQABedGAwQABedSAwQABedgAwQABefhAwQATVoWAwQATVonAwQATVopAwQATVo0
AwQATVo6AwQAVV0HAwQAVV0WAwQAWWpGAwQAWZAHAwQAWZAOAwQAWZAQAwQAWZAZ
AwQAWZAjAwQAXvmZAwQAXvmeMA0GCSqGSIb3DQEBCwUAA4IBAQDMyFgrdt5xm70R
9SjKeE7c9SxCTBDGCcQW0q4WR1ZUKWLgUAERO5DQMuQImdGWGRvEV6bWxl+9ZDLv
yNYDvOZz6M1nV463MIb8EbEQYLhEDevuGaJciTwjlzoh/IjXLBGwR6EpXAnN890L
czD5MltynSI265nnJrEYuherCPOC6d+4GCf4m9D+JfNHD5UT9VjUR8TM9jBy95au
AbpwEEPYMblf4gXO2t0WR5GFHh3RzHpEMnMaHlrzROT6dozRdBa/02Xsao12dOQ1
lf/7ErvnI8c+3TTU78euDamtwOGkZ5Te6/zZCkvBiMbzkHJiZ1Epdz2qctAy0Olp
fo5wHVEy
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:27 2025 by rpki-client