Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k8wxeqKYKchqR63fdtgJquckAGg.roa
File: k8wxeqKYKchqR63fdtgJquckAGg.roa (raw, json)
Hash identifier: jKE+brVDacGHI5dRWZGB3eEZYhZEdnyMUlrH3nKWJGw=
Subject key identifier: 93:CC:31:7A:A2:98:29:C8:6A:47:AD:DF:76:D8:09:AA:E7:24:00:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196CCFF149F3A8BBBD307621DCA53BB400E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k8wxeqKYKchqR63fdtgJquckAGg.roa
Signing time: Wed 14 May 2025 04:13:10 +0000
ROA not before: Wed 14 May 2025 04:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 06:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:ff:14:9f:3a:8b:bb:d3:07:62:1d:ca:53:bb:40:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 14 04:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93cc317aa29829c86a47addf76d809aae7240068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f5:2e:81:1c:48:58:3c:3c:29:c1:ef:66:25:
90:dd:0e:22:a7:85:44:d9:d3:96:90:67:77:05:08:
b4:4f:c4:7d:ad:df:90:f1:38:b5:ad:66:63:19:5e:
57:9c:3a:2d:32:38:29:70:a3:3f:43:b6:da:97:e4:
99:38:b7:eb:18:2d:d6:a9:fe:ca:7d:08:a1:01:d5:
69:fd:fa:b3:fd:84:e9:93:f0:3c:5d:d9:88:e6:4d:
d2:fa:22:4f:e8:93:8c:85:dc:f8:26:d0:e6:71:fd:
08:91:d8:de:25:7b:54:82:5d:a8:5b:13:4f:d7:49:
79:f7:f3:e9:ca:b4:d1:8d:b8:62:10:02:c9:43:c9:
eb:73:10:fc:f9:f0:16:99:f7:5d:7b:d8:57:2c:87:
3c:10:4d:44:24:62:2d:41:f6:5b:4e:9a:a4:da:fd:
53:9c:23:2d:e1:8e:47:ef:d9:3c:85:3c:4c:2d:c1:
d7:d0:f0:1e:ff:3c:a4:ee:39:8b:3a:68:5a:6c:ac:
9f:fc:ac:f8:87:da:80:dd:bf:24:f6:a4:78:e0:54:
f3:1f:57:c4:2f:9f:21:63:e2:2c:9b:3f:8e:0d:ef:
a0:44:dc:9f:e5:8f:71:72:fd:7f:82:bf:ae:df:42:
84:ed:8a:3e:e7:24:ad:8a:f7:0e:5b:a5:09:e5:7d:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CC:31:7A:A2:98:29:C8:6A:47:AD:DF:76:D8:09:AA:E7:24:00:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k8wxeqKYKchqR63fdtgJquckAGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.175.239.0/24
5.231.25.0-5.231.26.255
85.93.23.0/24
89.106.71.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:ce:32:9f:7a:db:06:e0:9c:5f:de:be:c9:b8:6d:03:7c:77:
99:c0:97:d8:d8:3f:a4:1e:69:e4:56:25:d6:34:f7:fb:23:3d:
e9:0e:0b:69:ca:35:3a:a8:57:72:fc:5e:56:fb:b2:d9:65:7f:
43:fa:42:bb:0a:e2:a1:28:dd:e3:c7:9e:8b:32:6e:77:2e:83:
47:42:8c:c6:c0:15:b5:08:e4:b8:09:90:cc:5a:5c:c9:88:25:
c4:cb:1b:b8:e5:d9:aa:55:7a:8b:90:28:c4:d5:20:42:e8:f3:
8e:ce:45:bc:fd:45:e4:6a:9c:8c:d4:53:d3:e8:4d:3c:f9:9b:
44:0e:5b:9c:dd:05:df:04:b0:2c:b9:eb:f1:7c:50:ee:e4:62:
9f:42:16:c2:2d:59:93:68:36:14:95:e5:5a:3d:8d:cf:1b:62:
a1:9b:8c:59:b8:c5:a6:35:bd:c1:4f:2e:bc:01:e4:11:0a:61:
bc:af:1c:aa:10:d9:f0:1e:b2:5f:86:48:87:0a:e0:ed:3a:a5:
ac:c4:ed:cf:d9:bf:d7:b8:b4:e1:e1:f6:07:19:6d:60:ad:6b:
22:10:cc:6f:9a:eb:da:48:23:9d:da:7b:e1:2c:3f:44:57:76:
a8:44:4d:38:00:9a:a9:0c:3e:7f:04:fa:2e:d1:8b:32:2f:61:
2f:c4:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:00:03 2025 by rpki-client