Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v4l5vpPmK1P5pWwnPkwH1o3vHZ0.roa
File: v4l5vpPmK1P5pWwnPkwH1o3vHZ0.roa (raw, json)
Hash identifier: WFSIk58eyBApXCUTK21xomOCr0u+QmvvN7NxvQbiO28=
Subject key identifier: BF:89:79:BE:93:E6:2B:53:F9:A5:6C:27:3E:4C:07:D6:8D:EF:1D:9D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196327F36814AF40CA31B79EA2E2D1012F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v4l5vpPmK1P5pWwnPkwH1o3vHZ0.roa
Signing time: Mon 14 Apr 2025 04:11:59 +0000
ROA not before: Mon 14 Apr 2025 04:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 23:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:7f:36:81:4a:f4:0c:a3:1b:79:ea:2e:2d:10:12:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 04:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf8979be93e62b53f9a56c273e4c07d68def1d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:a0:00:3e:1c:6d:11:af:2f:dd:dc:bf:f3:
fe:17:bd:9b:01:b8:c2:a4:42:fd:be:04:03:43:9b:
5a:79:0b:e4:15:a7:68:7c:fc:5f:97:c2:e0:f5:96:
f4:08:54:08:d1:b2:dd:6c:59:04:b2:61:06:60:61:
35:60:69:a5:39:94:90:05:06:e6:0d:b5:a4:4a:3f:
21:5d:2a:6a:7d:28:6b:8b:71:85:58:88:2f:b3:2f:
4a:45:3b:3a:be:55:9b:4b:81:f2:8c:65:1c:e0:29:
5d:d2:a3:00:12:e9:c3:cd:4a:7c:e2:f8:ef:f9:63:
53:37:e5:da:03:c4:66:9f:0c:1e:b4:7f:ff:de:ab:
e1:53:77:f0:9b:30:6c:c0:27:b7:1f:11:b1:df:9b:
c7:82:98:c1:9d:d1:b9:d8:9a:b8:ca:a9:d4:c3:bb:
60:47:31:3f:44:a5:a3:ef:2d:60:29:44:a9:d3:ed:
88:8d:02:6f:da:27:ef:bf:72:74:b9:47:cc:07:55:
93:b3:a3:5a:f2:94:1e:81:c0:12:44:27:77:a4:24:
23:64:74:fd:17:ad:05:f4:d6:21:57:2d:15:e1:a3:
e2:32:5d:61:5c:1d:df:19:b7:1b:f3:34:a6:b5:98:
80:84:05:40:9f:bf:9a:87:d2:2d:a1:db:4c:5a:d3:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:79:BE:93:E6:2B:53:F9:A5:6C:27:3E:4C:07:D6:8D:EF:1D:9D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v4l5vpPmK1P5pWwnPkwH1o3vHZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
94.249.215.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:df:7b:89:35:cd:23:66:f5:76:0b:dc:f2:8c:d3:c7:b3:42:
fc:50:6a:35:79:da:fc:02:5c:38:d2:f3:65:18:a9:b8:27:4a:
b8:3b:fb:02:2d:2b:7f:5b:05:34:8f:f5:37:7e:08:c3:32:1a:
24:30:a4:4a:89:ee:1d:0a:5a:92:24:48:f7:e6:10:21:be:d8:
1b:26:be:1a:81:70:25:fa:40:4a:33:4b:9e:26:7c:b9:3d:e9:
47:7f:b8:57:f8:ab:39:86:3f:43:11:33:3f:6b:46:b4:04:cb:
5a:88:7f:2f:8c:79:4e:2c:59:c1:b5:dc:d4:7f:77:58:b3:26:
3f:5f:0d:51:54:d2:93:80:56:90:67:de:71:80:f5:9a:a2:70:
92:66:8e:03:23:cb:22:97:26:f4:ea:b6:80:d7:f4:27:57:60:
4b:bb:bd:d9:61:1a:ea:d6:73:1d:2c:52:13:09:e4:ed:36:d3:
bb:29:43:36:6a:c7:68:8e:6c:c5:55:a0:17:b4:e7:74:2c:bb:
a9:83:13:4c:45:e6:19:5c:2d:ba:a8:52:1c:90:54:2d:b4:56:
00:e0:b3:b3:7b:7e:a2:93:d4:f8:b7:b5:9c:da:84:1c:c6:d0:
24:97:b0:17:64:42:ce:6e:e3:55:fb:fb:ea:d1:b7:e5:d7:53:
e8:04:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:08 2025 by rpki-client