Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSAuPqU0frwnHqQ4Gm904BuydF4.roa
File: rSAuPqU0frwnHqQ4Gm904BuydF4.roa (raw, json)
Hash identifier: +4aJqCuff9tNk9iJMj746FwXJgZEnyWbzcxXx62ehTY=
Subject key identifier: AD:20:2E:3E:A5:34:7E:BC:27:1E:A4:38:1A:6F:74:E0:1B:B2:74:5E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196DAF7210ED56309C48221576D8429A831
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSAuPqU0frwnHqQ4Gm904BuydF4.roa
Signing time: Fri 16 May 2025 21:19:10 +0000
ROA not before: Fri 16 May 2025 21:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 04:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:f7:21:0e:d5:63:09:c4:82:21:57:6d:84:29:a8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 21:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad202e3ea5347ebc271ea4381a6f74e01bb2745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:b9:66:57:e3:76:6e:af:f8:ff:94:04:fc:
a6:11:91:f2:e4:22:c6:ef:d8:d2:82:07:cc:86:d3:
58:03:f3:73:6b:90:4f:29:04:f2:7b:51:d9:35:c6:
4c:5d:55:97:2f:43:15:7c:5d:19:5c:bf:bb:6f:f3:
78:f9:87:3d:ca:22:ed:c7:b4:9d:86:0b:5e:af:ba:
cb:91:fb:af:1f:cb:94:a6:2a:83:f5:41:5d:02:2b:
e5:bc:c7:1d:37:79:00:4e:10:c9:6a:09:4e:b2:45:
90:e0:01:3a:25:10:d6:22:5b:30:a9:ae:98:7b:85:
cb:54:29:c2:8e:db:63:a7:02:3a:a2:3b:cd:fd:b7:
15:c3:af:5e:95:d0:99:7b:5e:f3:d1:c7:a6:ba:13:
5b:0f:f5:74:8b:4e:34:fc:ec:16:8a:9c:01:2f:e1:
b8:d7:97:15:ee:e1:fc:75:24:e3:a4:99:0e:aa:66:
39:0b:c0:20:38:75:bc:34:9a:59:dd:79:82:71:bb:
1c:16:97:28:3c:28:97:03:e0:f8:92:a4:74:2a:3c:
e4:1c:f0:6e:02:6f:31:c7:33:71:c2:0d:57:a6:c5:
5a:6c:c7:56:50:6d:93:0e:5d:12:65:0b:33:47:e2:
38:6f:41:63:5e:72:cb:82:48:bb:bb:ec:94:c4:2f:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:2E:3E:A5:34:7E:BC:27:1E:A4:38:1A:6F:74:E0:1B:B2:74:5E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rSAuPqU0frwnHqQ4Gm904BuydF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bd:3a:e4:90:39:47:82:98:b8:bd:bd:5d:f3:d7:1f:af:f2:
e6:b6:8d:07:ce:90:42:31:df:77:1f:da:df:26:fe:d3:4b:3f:
5a:c1:59:f6:cd:c8:0d:5f:8f:ca:ec:01:62:71:e4:70:2c:62:
be:61:fe:e1:86:3e:4b:31:56:04:93:6e:0a:3b:8f:e9:4a:d7:
a8:3e:20:50:43:35:6c:b9:1c:dc:c3:60:0c:81:4b:72:75:14:
89:65:af:93:f4:45:33:e1:4d:e2:0e:f2:7d:49:02:24:3d:c0:
b5:5c:8a:5a:ed:2b:a6:d5:9d:bf:b3:5e:62:5c:01:86:ac:70:
37:c1:87:f0:92:c6:08:52:b6:50:90:59:76:a4:7f:db:c0:bf:
f5:23:aa:94:87:d2:4a:0c:66:39:de:73:df:4b:36:dc:40:74:
f6:79:ff:73:7b:89:89:9f:1c:f6:2e:51:26:94:db:75:8c:4c:
c0:21:65:7a:a7:7b:89:c5:d7:ea:a8:a3:26:17:50:85:31:0b:
fb:38:d1:78:5e:e0:96:42:36:1b:ab:d6:7d:e6:d1:6e:fa:11:
bd:d4:4b:36:14:d0:bf:6b:bf:19:f2:69:6c:06:80:30:8e:37:
5e:9d:f5:e4:14:db:8d:32:f9:a9:8a:33:b0:52:05:76:07:b5:
8f:92:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:07:47 2025 by rpki-client