Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qLFDkekmUn65zJADCqcuSRwhbZE.roa
File: qLFDkekmUn65zJADCqcuSRwhbZE.roa (raw, json)
Hash identifier: fJXP4Fb0oNUMrM8sXqf1IhzcwTu7m7vE05fKLXtm4JU=
Subject key identifier: A8:B1:43:91:E9:26:52:7E:B9:CC:90:03:0A:A7:2E:49:1C:21:6D:91
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01963A7558159023422DC6F2BDD40F19999A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qLFDkekmUn65zJADCqcuSRwhbZE.roa
Signing time: Tue 15 Apr 2025 17:18:10 +0000
ROA not before: Tue 15 Apr 2025 17:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 04:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:75:58:15:90:23:42:2d:c6:f2:bd:d4:0f:19:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 17:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b14391e926527eb9cc90030aa72e491c216d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:a2:1a:6d:b6:1c:bb:9a:3f:57:20:e8:e6:
b8:4d:20:2a:fb:60:34:9a:e4:38:9d:b7:0f:88:68:
8c:59:13:0c:c7:24:7f:c4:af:d9:be:2b:7f:2e:8b:
55:9a:1b:94:35:16:dc:fe:0c:67:8e:b5:07:77:bb:
33:41:2e:c7:a5:b6:d9:fd:0d:56:97:60:cc:20:37:
0e:f5:d8:9c:cb:64:04:09:c4:d1:3c:11:41:77:b0:
54:82:65:3b:f0:db:c1:5d:9f:ba:32:7b:f5:c2:8f:
a1:76:8f:99:3f:e1:6d:26:5b:38:a5:73:e4:d6:cc:
74:ae:f0:2e:2d:3e:6b:b9:b4:24:05:7e:61:f9:6d:
e7:0f:0e:7b:ac:bd:9d:d4:a8:2c:36:2a:3a:37:81:
a6:d6:89:6c:e8:f8:c7:c6:40:8e:ab:81:6a:85:0b:
85:49:ea:32:cb:12:ce:51:ee:15:f2:e5:f9:98:bf:
d2:cf:20:8c:23:97:63:6d:1e:ee:a7:62:ce:82:bd:
80:70:05:e5:79:ff:9e:1a:e3:15:95:85:ad:cf:5e:
e6:76:cf:44:f5:36:a0:d0:aa:f7:14:bf:27:63:e1:
db:47:c8:f8:b2:00:fe:6c:32:02:c3:3d:c4:8f:88:
14:7f:44:28:1c:5d:2a:55:ad:e0:ef:6d:ba:1f:e2:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:43:91:E9:26:52:7E:B9:CC:90:03:0A:A7:2E:49:1C:21:6D:91
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qLFDkekmUn65zJADCqcuSRwhbZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
85.93.21.0/24
85.118.162.0/24
89.144.17.0-89.144.18.255
89.144.22.0/24
94.103.163.0/24
94.249.213.0-94.249.214.255
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5c:8e:b5:63:51:15:d9:97:e2:fc:00:6e:ed:8c:35:30:bb:
9e:5a:59:e1:21:01:2b:a3:75:16:83:3d:48:00:a8:b6:43:71:
7d:3d:7c:b2:96:28:21:9e:6d:ef:34:25:fa:dc:86:2d:6c:01:
f9:a7:dc:d4:56:ac:3b:26:51:52:5c:77:e5:6f:d8:7d:af:41:
79:7c:3c:c4:8f:22:92:f6:73:b3:b5:ca:c5:7a:f5:ed:d3:a5:
9d:3c:36:43:77:07:70:f7:66:98:a3:79:e1:9f:5c:53:0d:ee:
b5:2c:aa:bc:7a:b1:39:aa:cc:bb:c2:8d:f4:1e:67:96:e8:33:
ba:63:74:76:29:97:a4:c4:00:c0:ac:cc:5b:48:90:f1:81:60:
a6:a8:a6:79:c7:14:80:15:c6:0e:a0:c1:45:60:fe:f4:07:4f:
6f:0b:b5:4b:69:28:53:d3:10:db:f6:17:55:8e:e9:27:fe:67:
15:5c:3e:12:13:b3:8e:d4:1d:f6:e1:00:ed:a1:e2:b8:7c:12:
8f:31:5e:17:62:24:17:7f:e3:87:ce:06:e3:cc:03:24:40:d4:
8e:8e:9a:79:ae:e0:97:6c:08:45:1c:75:89:57:7c:4e:3e:33:
c2:ed:ca:67:ef:95:2b:23:f9:ef:82:c1:02:e5:a9:8a:e0:76:
2e:9b:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:51 2025 by rpki-client