Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xkYFe4KUiT_BbpqU1rEJDUMedvY.roa
File: xkYFe4KUiT_BbpqU1rEJDUMedvY.roa (raw, json)
Hash identifier: mrb3abDFBIvzyXO6CB6DW5eUur3DtHKkHfKmLJ85jhw=
Subject key identifier: C6:46:05:7B:82:94:89:3F:C1:6E:9A:94:D6:B1:09:0D:43:1E:76:F6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196DDCEF792ADC727A53E7987E5900C29E2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xkYFe4KUiT_BbpqU1rEJDUMedvY.roa
Signing time: Sat 17 May 2025 10:34:10 +0000
ROA not before: Sat 17 May 2025 10:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.204.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.118.167.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.106.72.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.232.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 14:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:ce:f7:92:ad:c7:27:a5:3e:79:87:e5:90:0c:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 17 10:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c646057b8294893fc16e9a94d6b1090d431e76f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:ef:b6:ae:bb:50:4f:e1:c4:c5:13:67:ab:
ff:f8:3f:d2:6a:fd:08:91:0d:13:dd:5e:f7:89:d3:
ac:a2:c7:ab:12:eb:a5:f2:56:db:a5:95:84:da:da:
31:d6:0e:76:4c:71:28:e4:07:b6:b2:02:8f:d6:8d:
6c:3b:60:a8:ac:10:89:2f:a5:92:e2:51:ab:09:5b:
40:69:aa:8f:95:79:f0:28:91:fe:1a:ad:b0:4e:a4:
bd:20:63:4f:1b:4b:07:67:6b:78:09:a2:b4:6f:7f:
6c:97:87:f8:5b:f9:f1:8b:19:50:ba:e9:18:a2:01:
ac:cc:ce:7a:b7:fc:58:6d:c6:4e:4c:fc:8a:ea:13:
81:bf:06:bc:28:c2:dd:68:04:1d:e8:3d:0f:da:18:
bc:60:3e:0b:a1:45:d4:6d:ea:62:ad:9b:6d:41:85:
88:f8:98:fc:b0:18:f3:26:47:4f:59:9a:ab:e4:c2:
ca:c3:b7:ad:a4:60:6d:5c:be:5d:56:3d:fb:e3:ac:
d4:c8:fc:9a:00:2d:b9:3a:37:30:05:5d:fd:6c:1b:
b5:45:34:3a:a8:c9:d4:9d:ae:0f:e6:dd:b5:9e:93:
78:47:e7:1b:0e:b2:f1:8a:00:96:bb:54:52:2d:94:
8e:0e:e4:12:e6:cc:4e:47:c1:24:2b:d9:88:3f:8c:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:05:7B:82:94:89:3F:C1:6E:9A:94:D6:B1:09:0D:43:1E:76:F6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xkYFe4KUiT_BbpqU1rEJDUMedvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
5.231.30.0/24
5.231.94.0/24
5.231.105.0/24
5.231.115.0/24
5.231.204.0/24
77.90.7.0/24
83.243.86.0/24
85.118.167.0/24
87.239.129.0/24
89.106.72.0/23
89.106.89.0/24
89.106.91.0/24
89.144.3.0/24
94.249.172.0/23
94.249.194.0/24
94.249.232.0/23
94.249.238.0/23
95.215.33.0/24
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
04:84:3a:ea:0f:f3:89:a9:02:e6:ff:ca:f6:16:ed:d8:3a:01:
ee:12:fb:ed:5b:51:2f:6e:39:63:94:81:88:82:1e:d6:4a:12:
89:80:4d:12:10:ab:a2:48:1c:a8:e6:65:74:a0:40:c3:6b:0b:
96:33:84:88:49:ad:a4:39:3a:c1:c9:fe:3a:2d:f5:c5:8b:c0:
cd:35:fd:48:d1:62:be:00:4c:67:56:1b:d5:0b:cd:c5:0d:26:
6a:3f:57:20:cf:d8:1c:8e:3c:4c:cf:31:a9:8f:81:91:62:4e:
b0:a9:61:67:f9:61:3e:dc:fd:7f:35:07:4c:6a:70:71:ef:c0:
e2:b2:f6:91:e8:51:1d:ac:9e:df:2b:21:3a:b2:f2:c9:f5:8c:
2a:74:04:d6:b8:f1:1c:05:d0:a0:00:47:d3:d2:72:2b:aa:7b:
29:74:d1:36:6c:fd:07:07:46:4c:63:1d:79:04:a2:e4:85:f7:
1f:93:59:fd:85:1e:97:db:1c:19:81:1e:14:0f:6a:8e:cd:b8:
d5:1d:25:5e:6a:ad:0d:05:ad:ac:c8:04:09:0f:5a:0c:4c:6a:
84:77:2d:40:18:04:40:a1:e2:02:cd:fc:66:8c:73:a1:b5:f6:
2e:d9:68:74:8a:35:96:be:6d:36:fa:a5:67:dc:2c:9a:6e:f8:
21:13:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:07:12 2025 by rpki-client