Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p3BF7Aq4Y_saLlm19_Ec8tKenvE.roa
File: p3BF7Aq4Y_saLlm19_Ec8tKenvE.roa (raw, json)
Hash identifier: zKZrdHH1ltZVgP5CcFNEri97+AueoJAArf2WBd8qGrs=
Subject key identifier: A7:70:45:EC:0A:B8:63:FB:1A:2E:59:B5:F7:F1:1C:F2:D2:9E:9E:F1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01972686255CB150EAFA667EAD10181B1F4D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p3BF7Aq4Y_saLlm19_Ec8tKenvE.roa
Signing time: Sat 31 May 2025 13:26:54 +0000
ROA not before: Sat 31 May 2025 13:26:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 13:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:86:25:5c:b1:50:ea:fa:66:7e:ad:10:18:1b:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 31 13:26:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a77045ec0ab863fb1a2e59b5f7f11cf2d29e9ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:cd:1a:cd:40:d8:72:b6:e4:e8:cc:7f:2b:
fe:8f:17:42:82:5a:55:d7:d0:1b:e8:e8:d9:00:21:
76:a9:40:4b:ef:21:a2:eb:3d:41:4a:4d:ff:06:ed:
52:9a:cb:c3:1d:20:3e:45:91:14:76:0a:0f:85:31:
9b:ab:c2:20:9e:e9:af:91:1c:d3:b6:fb:f3:ba:50:
c7:f6:f3:4d:88:4e:17:52:bf:53:3d:0b:41:fe:b9:
de:9e:00:1f:b5:d1:77:99:2d:25:87:9a:80:8f:cd:
24:7a:d5:3c:82:84:15:05:0e:e0:4a:b4:fb:6e:db:
57:9d:5f:f0:37:b7:ad:b9:0e:02:4a:b1:08:1a:ff:
23:c8:5d:e2:43:f3:53:43:d5:fa:51:fd:04:fb:49:
b9:70:f1:f8:cb:b9:bb:57:cb:4b:bb:b8:f8:8e:9d:
4d:cf:97:cb:8d:06:cb:60:9a:6d:34:60:cc:37:51:
e0:05:e3:cf:12:28:1c:5e:4b:75:bd:ed:56:38:6b:
dd:b9:f6:db:07:a5:ed:e8:64:a1:b2:5e:6a:2d:9f:
e4:0e:e0:09:f2:92:e8:28:58:21:36:57:cb:96:bc:
9b:f2:1c:d0:48:87:aa:f8:cd:14:08:61:6e:3a:eb:
8d:75:d0:63:ed:b5:05:42:36:72:c0:46:7d:67:9b:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:45:EC:0A:B8:63:FB:1A:2E:59:B5:F7:F1:1C:F2:D2:9E:9E:F1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p3BF7Aq4Y_saLlm19_Ec8tKenvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
07:77:f1:d7:96:1d:bf:38:11:c1:a1:9a:d0:f4:4b:c6:a2:82:
00:28:90:4e:8b:29:39:cc:d4:66:19:68:88:a6:8e:68:7d:43:
87:70:8d:ff:b7:b8:b1:07:93:6d:fe:3e:e4:c2:39:9e:71:ef:
7b:2d:e7:3a:92:c9:4d:53:64:d1:d9:56:ea:8a:88:6e:ef:b9:
f7:ae:b6:6f:6f:05:2c:3f:a3:25:92:57:93:50:a6:da:ec:c5:
b6:2e:6c:32:4c:50:59:58:34:b7:60:01:1e:0a:bc:a4:4b:6b:
b7:77:80:e1:86:94:06:8e:81:2a:e5:3f:57:5e:ae:20:75:aa:
05:da:f1:13:ee:b8:23:63:66:22:93:3f:3d:8a:db:56:98:77:
55:93:92:cf:2e:5a:d9:d5:b0:d0:f0:30:03:9a:4a:9a:15:73:
4b:83:7d:b0:cf:3e:2c:8e:76:cf:39:c0:35:38:a1:77:08:e4:
57:3f:e0:7f:95:42:aa:db:96:6c:a0:81:44:0c:ea:0c:60:a9:
92:4f:8e:ea:ec:f7:39:6d:04:18:75:92:ef:f0:68:fa:93:5c:
f4:f9:71:23:e9:f1:d6:93:29:4e:ba:15:c4:c8:ea:5f:d3:f7:
5c:12:ab:b3:0e:89:de:0b:8d:f6:86:b1:6e:d9:61:32:80:ac:
44:c5:c4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:23 2025 by rpki-client