Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mURwyg_ZgWyYrwDNDv3v02rgl9Q.roa
File: mURwyg_ZgWyYrwDNDv3v02rgl9Q.roa (raw, json)
Hash identifier: S5cRvSI1W6FMzAT5aPxI+tzoipU+vNW2qDZ3LbtYFvQ=
Subject key identifier: 99:44:70:CA:0F:D9:81:6C:98:AF:00:CD:0E:FD:EF:D3:6A:E0:97:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196C6A16F38D3E899D40F6218CC375F2C6E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mURwyg_ZgWyYrwDNDv3v02rgl9Q.roa
Signing time: Mon 12 May 2025 22:33:10 +0000
ROA not before: Mon 12 May 2025 22:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 04:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:a1:6f:38:d3:e8:99:d4:0f:62:18:cc:37:5f:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 12 22:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994470ca0fd9816c98af00cd0efdefd36ae097d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:12:25:6b:46:5e:6c:bf:45:9c:d2:88:b0:
a2:6b:46:43:70:9d:8a:fd:8a:a3:ff:a7:6e:d4:25:
08:da:94:39:fc:95:74:83:9d:3b:03:86:4f:07:07:
70:da:7c:d4:0f:6a:a2:86:93:88:47:fd:d5:4d:3b:
e7:0d:d8:29:f0:bb:f7:8a:67:0f:7e:24:04:a9:af:
d8:37:8d:83:4b:25:0d:f0:9d:8f:fb:c3:bb:b4:19:
97:d6:1f:08:ef:e6:8e:8d:28:17:ce:66:f2:8d:2b:
15:3f:36:d2:c7:2f:0e:fc:c3:78:d2:ce:8e:39:2a:
45:0f:b5:87:54:7c:1c:37:d7:23:8e:4f:c6:c5:d9:
b0:40:9b:bf:60:9e:59:bc:07:9d:3d:64:9b:06:fc:
13:79:cf:c4:bc:18:95:f9:05:6a:e5:4b:32:72:89:
1a:c4:cd:49:e8:36:3d:13:2d:ac:b7:87:d5:92:61:
e7:6e:4d:47:20:50:4c:02:db:ad:a4:bb:5d:ab:40:
88:ca:75:7b:93:6e:e0:86:88:5c:3d:52:2f:d8:1c:
31:fb:69:b9:0e:e7:d0:ee:2f:f7:0e:bd:52:5e:4f:
5f:5e:66:41:98:ed:dd:87:13:20:b6:c8:df:b9:3c:
7b:22:9c:6a:b8:e0:f8:bf:ce:06:9d:c1:9c:26:88:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:70:CA:0F:D9:81:6C:98:AF:00:CD:0E:FD:EF:D3:6A:E0:97:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mURwyg_ZgWyYrwDNDv3v02rgl9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
95.215.32.0/24
95.215.34.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2e:78:01:a7:70:cb:1e:ac:1c:c5:be:af:40:58:98:cf:6c:
a3:73:4f:20:ee:29:96:5f:2b:ed:99:51:bf:36:b5:be:17:21:
be:30:85:d0:31:6f:30:c1:42:4d:0f:91:e2:a8:72:71:93:a5:
3e:63:3e:96:74:7f:3c:e1:e4:1a:4d:65:81:ed:d6:2f:36:85:
94:8d:c4:cb:c2:be:ec:9e:7d:fc:05:92:b2:41:00:49:61:a4:
da:57:94:eb:49:12:05:07:71:8a:b1:bc:1c:a3:d9:32:64:f0:
67:6e:df:44:c9:e9:66:31:c4:bd:b9:0f:1e:9d:8e:e6:2c:6f:
27:a6:e9:93:13:ab:07:92:b6:27:dc:55:b7:06:4a:9e:f5:e5:
56:bd:b4:04:89:99:bd:37:a3:b3:72:b1:21:67:4a:af:66:a4:
dc:66:df:b3:9d:16:bb:47:80:f4:3a:69:da:ba:ce:9e:a8:1c:
5b:36:8e:cd:6c:56:18:e1:b6:fa:c0:2b:b3:ac:32:8c:86:2d:
d2:4d:e9:e5:cc:d3:4e:06:2f:87:ae:6b:23:1b:ea:43:2e:00:
7f:3f:c5:29:17:87:aa:2b:68:94:11:15:26:8f:1e:2a:10:32:
f7:f6:23:10:b4:bd:2b:1c:d9:d5:97:3c:54:e7:7c:ac:13:4b:
40:16:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:09:30 2025 by rpki-client