Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s5PweVLwLonauxRKVirQ3xOKqjo.roa
File: s5PweVLwLonauxRKVirQ3xOKqjo.roa (raw, json)
Hash identifier: yVXbKIApN10yB3OpImMQkk3RoEDpet6CpEnc18WkkMs=
Subject key identifier: B3:93:F0:79:52:F0:2E:89:DA:BB:14:4A:56:2A:D0:DF:13:8A:AA:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F7521A3BC695CC8BA7679B7B89666AC9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s5PweVLwLonauxRKVirQ3xOKqjo.roa
Signing time: Thu 22 May 2025 09:27:55 +0000
ROA not before: Thu 22 May 2025 09:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.200.0/24 maxlen: 24
5.175.201.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.210.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:52:1a:3b:c6:95:cc:8b:a7:67:9b:7b:89:66:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 09:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b393f07952f02e89dabb144a562ad0df138aaa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:3a:21:b5:b5:41:99:c2:d7:6b:8d:ee:a4:
15:a1:c1:54:0c:81:81:96:7a:18:9a:2e:d4:88:3c:
49:95:2c:df:06:da:1e:16:77:29:c4:42:d2:30:5d:
a5:1d:34:a4:75:16:b0:32:2e:ba:b6:de:f0:8b:78:
2e:05:c5:00:dd:73:63:1b:30:9e:f9:47:a3:46:17:
da:e6:ed:66:ae:e8:ee:79:ba:88:24:66:7a:09:f1:
83:9d:3d:ba:35:28:2d:54:87:42:ad:d7:60:fc:d3:
a5:37:24:4d:b7:ab:ae:1e:ce:09:63:17:d5:03:51:
c0:54:d6:5c:a8:d4:03:d4:50:e8:7b:52:c0:0f:71:
82:f5:ae:bd:6d:0f:88:53:f6:09:2b:87:70:5e:73:
4d:87:d4:b2:ed:eb:7d:39:66:b2:68:b5:96:72:b2:
d9:8b:ea:14:7f:c8:ea:11:64:2a:22:3b:68:ef:44:
1f:cf:9d:2d:0e:5e:2e:bd:4d:2a:fe:04:10:2e:ec:
d2:99:6c:4c:c0:54:ae:ba:20:2f:33:1c:3f:8f:e1:
d2:6d:b1:57:9e:e2:86:00:41:65:82:d9:bd:42:d1:
92:2a:88:d2:83:78:c1:5f:05:dd:64:bc:60:e6:3b:
5a:3c:a8:a0:33:79:39:5f:0e:bf:6b:4c:fd:70:3e:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:F0:79:52:F0:2E:89:DA:BB:14:4A:56:2A:D0:DF:13:8A:AA:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s5PweVLwLonauxRKVirQ3xOKqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.200.0/23
5.175.204.0/23
5.175.209.0-5.175.214.255
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
5.231.113.0/24
5.231.240.0-5.231.248.255
85.93.5.0/24
85.93.21.0/24
85.93.31.0/24
89.106.90.0/24
89.144.5.0/24
89.144.34.0/24
94.249.168.0/23
94.249.180.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7f:f1:32:86:2b:fa:58:7e:a3:38:ef:9c:4e:0b:22:3f:3d:
a8:61:ed:1d:e9:74:b5:9b:4f:0b:a9:44:fc:d7:66:eb:2a:09:
f7:00:12:5e:c9:da:2e:91:de:cd:89:ce:09:d3:26:3e:0a:d3:
68:37:b8:c9:6e:c8:3d:2b:e6:9b:3a:3a:2d:fd:e1:c3:b9:21:
37:66:be:13:30:b3:0a:00:ee:53:42:c0:a0:99:43:d9:75:1c:
85:79:db:1f:a6:f2:ce:72:0b:94:11:e3:f0:67:4a:a6:df:06:
78:fe:ed:42:1e:91:5a:c7:31:be:60:3c:cb:4a:b9:32:e9:52:
6a:63:0a:be:b1:57:4e:e6:04:d6:c6:44:86:69:7a:78:f2:31:
a5:10:86:e5:96:2b:e2:e3:84:6b:25:b1:ed:da:35:04:19:c2:
ff:c1:57:bc:32:2b:cc:5c:c1:2c:49:79:50:b4:04:8b:30:70:
c4:ad:2c:bc:4e:43:04:4c:3b:5b:06:96:a4:58:6a:43:8d:45:
43:59:e8:a6:f1:a7:cb:3a:10:69:e6:5e:b3:9a:eb:99:cc:72:
b1:46:9f:50:73:6b:9b:9d:ce:ff:12:d4:07:75:e6:36:98:ac:
ae:96:1e:bb:cc:04:7b:ae:dc:e5:e9:05:1a:f6:6a:4c:74:69:
10:6f:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:45:15 2025 by rpki-client