Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v8X1SGW_Q5JO3zQbjWhz7WxMmSY.roa
File: v8X1SGW_Q5JO3zQbjWhz7WxMmSY.roa (raw, json)
Hash identifier: 0P0HDwnB+E15DTZ7zUFHzhqtqcVM/MdDqnKmrloQS3c=
Subject key identifier: BF:C5:F5:48:65:BF:43:92:4E:DF:34:1B:8D:68:73:ED:6C:4C:99:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019742385843AEE9B75008660B6CCA330256
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v8X1SGW_Q5JO3zQbjWhz7WxMmSY.roa
Signing time: Thu 05 Jun 2025 22:31:18 +0000
ROA not before: Thu 05 Jun 2025 22:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213561
IP address blocks: 5.175.236.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 04:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:38:58:43:ae:e9:b7:50:08:66:0b:6c:ca:33:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 5 22:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc5f54865bf43924edf341b8d6873ed6c4c9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:4c:c0:26:4b:84:25:5c:82:6d:4f:b6:ad:
61:18:bb:64:f6:44:ae:27:c9:ef:78:aa:cc:c6:bc:
99:c6:4e:cb:83:f0:08:87:90:59:9d:fa:af:c4:8f:
05:c8:2d:34:e7:0b:45:eb:1d:6d:2d:c1:3b:3f:a6:
ca:c3:79:48:dc:91:ae:fe:1b:d9:ac:0c:6f:8f:88:
8d:97:0a:ba:46:71:f1:04:be:ed:ad:d8:9a:af:ef:
7c:df:63:13:57:64:61:61:d1:37:72:21:94:e7:0f:
4d:2e:51:da:12:ef:ea:10:82:46:62:3e:e2:cf:94:
78:b9:e0:62:b8:44:3a:ee:f8:99:86:f0:29:ed:95:
4b:12:d8:90:a6:c9:fb:b2:16:1b:68:c9:6d:a6:b7:
90:7e:76:da:ae:6a:ef:8e:f0:01:6a:59:56:38:22:
ad:47:29:5c:22:8e:6b:1d:56:25:e2:97:e6:39:f5:
50:df:67:9f:52:5f:16:da:86:1f:60:19:5f:94:34:
0a:2f:62:98:5d:8a:8f:8b:40:b8:42:1a:9c:37:52:
a3:a9:97:1f:7d:c6:c8:db:86:8e:50:db:5e:49:ea:
bf:e2:da:60:e8:f9:8d:f4:ca:10:49:0d:8c:99:7a:
88:2d:6e:91:4d:b0:e0:ef:96:7b:97:c4:0f:16:b9:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:F5:48:65:BF:43:92:4E:DF:34:1B:8D:68:73:ED:6C:4C:99:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v8X1SGW_Q5JO3zQbjWhz7WxMmSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
89.144.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:66:12:35:bb:f4:a3:14:b6:89:30:ec:0b:dc:8b:c6:be:a6:
7d:54:a0:67:f3:fe:42:c8:e9:91:15:58:f4:32:df:b8:34:d4:
70:f4:f9:24:5f:63:2b:ef:14:1e:7b:0e:77:06:ed:b7:29:ea:
72:d5:d8:52:a1:4c:76:1d:ad:49:1a:02:31:22:d7:fd:73:eb:
60:cd:f5:4b:ce:ac:9f:8a:ac:4f:d5:e0:b6:59:83:c9:5c:90:
05:cb:6a:c0:80:d7:83:c1:0e:58:01:ca:f4:59:3d:26:b9:e9:
7b:5e:17:8e:51:b7:19:a0:1d:32:1d:10:b3:76:db:71:b6:84:
78:de:8d:aa:99:b7:3d:b4:9a:05:90:31:5d:44:7a:fb:ef:4f:
61:e4:b5:cf:0b:05:59:49:8c:96:46:1c:16:f5:42:e5:f3:57:
dd:d6:47:40:1e:e3:b9:6c:04:8e:ae:ee:34:aa:1c:51:0a:80:
9c:37:cb:71:e6:28:1c:86:c9:94:4e:ff:c4:35:59:64:fe:77:
9b:48:ad:a8:8c:21:bc:9c:54:88:de:d5:26:05:98:2f:6e:b0:
f0:5d:c1:77:1e:fb:ed:89:10:b6:a1:c6:ad:fb:66:66:d0:1e:
33:d4:f7:74:fe:28:a2:c9:02:9a:f8:25:30:2e:e1:6c:e7:13:
c7:b8:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:14 2025 by rpki-client